Hovertruck

Watch out for third party libraries breaking with this release. A couple that we use use were importing some modules from 'react/lib' that moved to 'react-dom/lib' such as CSSPropertyOperations.

We received an email from Github yesterday informing us that one of our repositories had been accessed by a third party due to this issue. While it's not a fun notification to receive, it definitely made our general security paranoia feel justified – we're lucky that from the get-go we've held best practices around keeping secrets out of the codebase. Obviously we still dedicated time as a team to prune through our repository history with a fine-toothed comb for anything that could potentially be a vulnerability, as we take this very seriously.

One of our engineers came up with a useful script to grab all unique lines from the history of the repository and sort them according to entropy. This helps to lift any access keys or passwords which may have been committed at any point to the top.

I think this is a great example to illustrate the tough edges of security to less experienced engineers. Github will most likely never let something like this happen to you, but on the off-chance that they do it's great to be prepared. Additionally, the response from Github was very well received. No excuses, just a thorough explanation of what happened.

I also can't help but mention that we're hiring, if you'd like to work at an organization that values security and data privacy very highly. :) usebutton.com/join-us

Batch review has been my #1 most desired feature for Github for many years now. This is great!

Engineers (Data, Platform, Web/Frontend) | Button (https://www.usebutton.com) | NYC (Data SF/NYC) | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

Engineers (Data, Platform, Web/Frontend) | Button (https://www.usebutton.com) | NYC (Data SF/NYC) | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

Engineers (Data, Platform, Web/Frontend) | Button (https://www.usebutton.com) | NYC | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

Agreed – I had a Lumia that I really loved, but there was a lack of direction for the platform and severely lacking app ecosystem that ultimately brought me back to an iPhone.

Engineers (Data, Platform, Web/Frontend) | Button (https://www.usebutton.com) | NYC | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

Engineers (Data, Platform, Web/Frontend) | Button (https://www.usebutton.com) | NYC | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

Yeah this is my #1 feature request, and the main reason that a number of companies I've worked for/chatted with have switched to using Phabricator for their code review.

Notably the "requests" library

At Button we switched from baking AMIs to deploying containers on ECS and it's had a pretty amazing effect on deploys, both in terms of the speed and (due to them being quick and painless) frequency.

Button (https://www.usebutton.com) | NYC | Onsite

https://www.usebutton.com/join-us

Button is building an ecosystem of connections that drive commerce. We're partnered with some of the largest commerce apps like Uber, OpenTable, TicketMaster, and more – allowing you to add real-time inventory for these on-demand services to users in your app. We were also recently named by Crain's as the best place to work in NYC[1]!

We use a mix of different technologies, but some common themes are NodeJS, Python, React/Flux, Docker/ECS, Objective-C, and Java.

[1] http://www.crainsnewyork.com/section/bestplaces/2015

The biggest pain I've experienced is updating react-router. I've run into cryptic failures each time, and googling usually turns up answers for the previous (or even next/beta) version.

I see a lot of complaints about this that I don't really understand. This is similar to final in Java, val in Scala, etc – sure, it's potentially referencing a mutable value, but you know it's not going to be reassigned.

Surprised they didn't start at 1.0. I understand what they're saying with the reasoning, but I don't think I agree with it.

Not that it really matters, I guess.

If you use Chrome, there's a plugin[1] you can install that displays this info in the URL bar for each page you visit

[1] https://chrome.google.com/webstore/detail/http2-and-spdy-ind...

Potentially. This lib is going to call setState on every scroll event, which is triggered multiple times every time you scroll up or down the page. Traditionally you would debounce a scroll handler like this.

AFAIK there is not. Maybe one of their devs will see this and can provide a link or something though.

Not quite free, but this does exist at a pretty low price point: https://www.tailorbrands.com/

Probably true in most cases. I hate when sites do this because it prevents me from hitting backspace to leave, but I get it.

I slapped this together recently using Chartbeat's realtime data (so the sources are major sites – nytimes.com, foxnews.com, espn, etc): http://percentoftheinternet.com

http://percentoftheinternet.com/windows http://percentoftheinternet.com/chrome http://percentoftheinternet.com/ie

...etc...

Raw data is here: https://api.chartbeat.com/cbtotal/?v=2

HIPAA requires encryption-at-rest of any personally identifiable information.

I think the NYT article implied that it was 34 days until the ceremony where he was awarded the Peace Prize.

Still quite useful internationally I believe, for countries where credit/debit cards aren't commonly used.

I know it's anecdotal, but most realtors I have met actively dislike Trulia/Zillow/etc

Why? This is what betas are for.

Meetup does something along these lines. Check out the revision history and first paragraph:

http://www.meetup.com/terms/

"Thus, the bar argument is initialized to its default (i.e., an empty list) only the first time that foo() is called, but then subsequent calls to foo() (i.e., without a bar argument specified) will continue to use the same list to which bar was originally initialized."

This actually happens when the function is defined, not when it's called the first time.

From the bower docs:

"N.B. If you aren't authoring a package that is intended to be consumed by others (e.g., you're building a web app), you should always check installed packages into source control."