Just some feedback on your landing page.
I have no idea what problem you're targeting, what your product is, or how I would use it.
Hit those three targets without someone scrolling below the fold.
536 karma · joined July 19, 2017
My key focus is helping organizations do security better, make it simpler, and get alerted when things get messy.
I have no idea what problem you're targeting, what your product is, or how I would use it.
Hit those three targets without someone scrolling below the fold.
It's common to have endpoints like `/customers` and `/customers/{id}` which has a tendency to move SQL table names to match the API endpoint.
I tend to name tables in the singular form if writing applications that interact directly with SQL tables, but where standing up a API in front of a SQL database, I tend to move to the plural naming of the table.
It helps to have the table 'customers' be associated with an API endpoint of the same name.
... and Google... and the people they sell aggregated traffic data to...
CloudFlare (e.g. NSA [joke!]) also gets a truckload of data from each web call, and your ISP, and the hosts of any <script> tags, and the image hosts, and all the engagement tracking plugins in your site...
The list is endless
I think a better question is: "How can you ensure any VS Code extension is safe to use?"
Understanding exactly what an extension does and getting clarity around how it operates is something that I'd like to better understand as well.
It makes me think that moving to other editors like Neovim might be a safer way to go, if Microsoft has created an environment where malicious plug-ins can operate.
Why is there no company / legal entity / contact information on the home page?
It's an interesting idea, but if you want budget information about people, you need to excel at being above board.
Surely CrowdStrike encrypts and signs their channel files, and I'm wondering if a file full of 0's inadvertently signaled to the validating software than a 'null' or 'none' encryption algo was being used.
This could imply the file full of zeros is just fine, as the null encryption passes, because it's not encrypted.
That could explain why it tried to reference the null memory location, because the null encryption file full of zeroes just forced it to run to memory location zero.
The risk is, if this is true, then their channel loading verification system is critically exposed by being able to load malicious channel drivers through disabled encryption on channel files.
Just a hunch.
And for the rest of the stuff, stay as boring as possible.
So many times I see dev teams get innovating the whole way down and end up losing the focus as to how they provide value.
I need to burn this slide deck into my world view!
Also add an option for people to view the target of a URL before they click it, such as adding a + to the end.
But also understand that URL shorteners are considered unsafe due to the lack of transparency on the target.
Embrace it, there is no other option.
I remember in 2010, having to present to a team of Mainframe techs at a bank about how we would be integrating an Identity solution (that ran on Windows servers) into their Mainframes.
They couldn't stop making comments about how useless Windows is and it's just a gaming platform. One guy ranted and raged so hard that he stood up and stormed out of the room.
I remember my Project Manager who was in the meeting looked at them and said 'Guys, we talked about this earlier'...
I can see where that mindset comes from, these guys have been drinking the IBM Kool-Aid for a long time
Ask it to act as a mentor that is teaching you how to program, ask it to give you an problem to solve, and give it a shot.
Then paste back your code you wrote (keep it simple) and ask it to explain your approach, provide advice, describe patterns, and explain tradeoffs between different techniques.
Initially, learning how to talk about code is important, then identifying patterns and approaches.
Coding isn't about memorizing things, it's about understanding the advantages and disadvantages of different approaches.
Have fun!
Your URL is logged, therefore everything you type is readable by anyone farming your URLs.
What am I missing here, why does this seem like such a security risk.
If you're new to this concept, then you're new to programming in this space.
Too often when working on a startup, you have a number of core beliefs or assumptions that can be corrected during the down swings.
Those negative swings are a way of letting you see through the assumptions and re-evaluate their importance.
The upswings are lies, that is what I've always told myself.
The middle band is the nice place to be.
There is room for a future competitor, but now might be too early.
Say... to help identify if a specific phone comes around, or what phone/s were around when a break in occurred?
Times were simpler then, I feel the abstraction was a lot simpler.
I'd like to see the simpler ColdFusion / ASP style model grow with support from smarter back end tech.
The crazy levels of abstraction in the client/server model are just confusing for someone like me, who was quite happy with the older way of doing things.
Web delivery should be about simplicity and maintainability, not seemingly academic exercises in purity, speed, or abstractions.
When working with databases, all properties / columns that I use are lowercase snake case.
Much faster to work with, you learn to type _ pretty quickly.