you’re just copying their meeting notes prompts and turning them into your own summarized apps. dude!
6 karma · joined May 2, 2022
you’re just copying their meeting notes prompts and turning them into your own summarized apps. dude!
Sometimes, I wish that I am a billionaire, so that I could let people using my software for free, completely. And the key point is, they know that it is free, absolutely. Because I am a billionaire, they know.
So, just keep it up. Anything you wrote is not important than the thing you do. Don't let people sink you in their perspective about the world they saw.
Open-source software needs a ton of efforts, tears, bloods. Above of the passion, you know that it should be pay-off, fair-price at least, for you and your people hard-works.
At the end, plan is just a plan. Just go to have a chance to fix it.
Good luck and best wishes!
1/ 30m meeting. Everyone who wants to make a meeting with me must via the invitation ( send to my calendar ), and the meeting duration must be 30m ( or less than ).
2/ Document by priority. I track the top 3 problems by their frequency and make the document ( troubleshooting ) next week. Automate your work first, after that, do delegate.
3/ Keep the fire burning. I mean you have to find your top 3 reasons, why you are still here, and work for the company. If you tried but can't find them, leave.
Hope it can help.
1/ We should have an API tracing system, hosted in a server for example, which capture all requests, including the params, headers, response. with some secure rule, e.g. hide Secret-Token header.
2/ Each request will have a header, its value is the request-id for example
3/ Whenever a bug come, we just need use request-id from 2/ and search the information in 1/
Right ?
1/ secured, the credentials should not be exposed.
2/ enough information, e.g. the response must be snapshot, general parameters should be transparent.
3/ easy to re-produce and confirm resolved.
What do you think?
I found that, the order listing API doesn't work as expected. I send the curl to my teammate. Please take a look at `-H 'X-Access-Token: SECRET_TOKEN' \`
```
curl 'https://mocha.lozi.vn/v6/users/me/orders' \ -X GET \ -H 'X-Access-Token: SECRET_TOKEN' \ -H 'Host: mocha.lozi.vn' \ -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:101.0) Gecko/20100101 Firefox/101.0' \ -H 'Accept: /' \ -H 'Accept-Language: vi_VN' \ -H 'Accept-Encoding: gzip, deflate, br' \ -H 'X-Lozi-Client: 1' \ -H 'X-City-ID: 50' \ -H 'Origin: https://loship.vn' \ -H 'Connection: keep-alive' \ -H 'Referer: https://loship.vn/' \ -H 'Sec-Fetch-Dest: empty' \ -H 'Sec-Fetch-Mode: cors' \ -H 'Sec-Fetch-Site: cross-site'
```
The problem is:
1/ If I don't replace the real token by SECRET_TOKEN, others can use it to buying their own stuffs, by my token. :(
2/ If I replace the real token by SECRET_TOKEN, it's so hard to detect what the problem is, cause my teammate can't see the response, and can't request to re-produce the issue too.
So, there have anyway to secure the curl ? But we are still easy to detect the API issue.
Updated:
--
I think that way is not secure enough. For example, I can use Secret Token, which is exposed in curl, to do something like ~ buying my own stuff .
So, there have anyway to secure the curl ? But we are still easy to detect the API issue.