etagwerker

I'm glad this topic if finally getting the attention it needs.

I really like Google's paper on technical debt: https://ieeexplore.ieee.org/document/10109339

I wrote an article with a summary of the key insights in that paper: https://www.ombulabs.com/blog/tech-debt-maturity-model.html

Hopefully, the more articles like this one, the more non-technical managers will finally give a shit about technical debt?

Ombu Labs (https://www.ombulabs.com) | Software Engineer | Philadelphia, PA; Buenos Aires (ARG); or REMOTE | Full Time

Ombu Labs, The Lean Software Boutique, is hiring a full-stack software engineer to work on our products and consulting projects.

What we do: We aim to write less software. We take YAGNI to the next level. We apply lean principles to our own products and our client's products.

Why us: You will be our 4th software engineer hire. We are a small/agile company passionate about open source, pair programming, Ruby/Rails, and continuous improvement.

Tech we use: Ruby, Javascript, React.js, Backbone.js, Rails, Sinatra, Cuba, AWS, Heroku, Git, Slack, Screenhero.

If you're interested, please apply here: https://www.ombulabs.com/jobs.

If you have any questions, feel free to message me.

Location: Philadelphia, PA

Remote: Yes

Willing to relocate: No

Technologies: Ruby, Rails, Sinatra, Cuba, Rack, Javascript, Node.js, Backbone.js, React.js, Angular.js, iOS, Android, HTML, CSS, AWS, Heroku.

Résumé/CV: https://www.ombulabs.com/#clients

Github: https://github.com/ombulabs

Blog: https://ombulabs.com/blog

Email: hello@ombulabs.com

That is pretty embarrassing too and even a bigger vulnerability, but Dropbox released a statement about it.

I believe that owning up to your mistake and being transparent about it can only make your customers trust you more. What worries me is that Mercado Pago is huge and they never released a statement about this issue. I hope that they change this policy soon.

Maybe rookies wasn't the right word.

The fact that they allowed such a blatant vulnerability to reach production makes me question their test suite and development process. What else is wrong that we are not seeing?

I expect more transparency and professionalism from a company that processes $7.1 billion in transactions.

Yeah, Mercado Pago has been around more than Stripe, but they are still rookies when it comes to their platform's security.

See Stripe's Security section: https://stripe.com/help/security

I'm still trying to find Mercado Pago's Security section and security vulnerability protocol (e.g. Who do I contact when I find the next security hole?)

Using their authentication mechanism, a user should only get an access token with the right combination of client id and client secret.

For at least 7 hours, anyone could get an access token for any client id, without entering the right client secret. With that access token they could see a lot of information for any account.

I've updated the post title with your suggestions. Thanks!

Yes. I wish they were more like Github or Stripe about disclosing this sort of information.

This is usually how I do it for libraries:

* Read the README.

* Install it and start using it with a couple of sample cases. That will give you an idea of what it does.

* Read the test suite. This will give you a better idea of what the library does.

* Look at the directory structure. This should tell you where things are.

* Start reading the core files.

* Start looking at open issues. Try to solve one by adding a test and changing the code.

* Submit a pull request.

Couldn't you do the same with RSpec or straight Capybara code?

I no longer see the added value of Cucumber when you work in a project that has no non-technical team members writing tests.

I've been using Cucumber for almost 3 years now, but if I were to start a new project today I'd pick Capybara with MiniTest or RSpec.

When I first started using Cucumber I thought it was cool that "anyone could read the test and understand it"

But that one advantage doesn't really matter that much when everybody in your project knows Ruby and doesn't need the natural language side of it.

SEEKING WORK - Remote

Full-stack Web Developer, specialized in Ruby and Javascript.

Some of my favorite tools: Rails, Sinatra, Redis, Postgres, Backbone.js, jQuery, Bootstrap, SASS and Heroku.

Cheers

--

LinkedIn: http://www.linkedin.com/in/etagwerker

Sample code: http://www.github.com/etagwerker

Not necessarily. You could build a smoke test (experiment) for a SaaS solution for dog owners (product)

You have your vision, but before you go into building a product, you test your target market.

How about this?

Build an experiment, then your product.

I know that on Round 6 they are experimenting with the Lump Sum agreement, making it easier for some startups to get 100% or 50% of the $40k in advance.

I wish they had done that with my round.

I have complained and suggested alternatives for their very slow reimbursement process. I think they are open to constructive criticism, but as any government institution change is slow.

The one thing that I kept saying to myself is that it was equity-free.

It is hard to get paid. Every time there is a reimbursement you have to dedicate many hours to get all the paperwork right.

You will need to spend $10-$15k to get started, before you see a dime from Startup Chile. In a team of 3, I'd say closer to $15k.

$40k is definitely enough for a team of 3 to move to Santiago and work on your idea/product for 6 months.

I am a round 4 participant and I went from Buenos Aires. I consider BA to have a decent startup ecosystem, but it doesn't have an entity that gathers entrepreneurs and encourages them to meet and share their experiences.

BA doesn't have a "Startup Chile" in its environment. It does have one or two incubators/accelerators but they are very selective in who gets to participate or not.

I believe the kind of synergy and energy that happens in Startup Chile can only happen in other accelerators/incubators like Y Combinator, Tech Stars, et al; or in co-working spaces that encourage meetings/networking.

The other reason to go, and probably the most important one, is that you get $40,000 equity-free.

Way to go Chef Surfing! I've been fortunate enough to meet Chef Nancy in Santiago thanks to them.

This is pretty awesome. It's nicer than http://www.google.com/webfonts

> You can't do this until GoDaddy.com is back online.

You actually can. You will have to modify your /etc/hosts file, go to your GoDaddy account and change to a new DNS service (name servers)

I followed the instructions in this post and I solved the GoDaddy hell for my sites:

http://davewasmer.tumblr.com/post/31283249223/migrating-from...

I'd switched half of my domains to Namecheap. I was waiting to migrate the other half. I do not support them, but I had hired their service before SOPA and I just didn't want to pay twice.

It sounds like a problem that could be solved by proximity cards. Has this been suggested to the CMI personnel? Is it something that they'd implement?

I am starting Startup Chile at the end of July and I am seriously considering a shared office space, due to many reasons (security being one of them)

Shopify is a great platform for North America but it lacks essential features for Latin America. For example: Integration with Dinero Mail or customer care in Spanish.

That's where Ombu Shop has an edge. Also, Ombu Shop is based in Buenos Aires, Argentina. So we understand the challenges in our region.

This is interesting. But how do you install it? Just drop the .scss files in the stylesheets/sass directory?

Thanks!

Hug!

yes, you couldn't be more right with this.

I am from Argentina and I found this disturbing: "taxes on commercial profits in Argentina add up to an effective maximum rate of 108 percent"

But also very true.

I wonder what would happen if the Argentina government reduced the taxes (because for the past 10 years I feel they've only gone up)

Would that encourage businesses to pay taxes instead of doing everything 'en negro'? It would encourage me.

As an entrepreneur I want to pay taxes but they are extremely high, punishing me for the corruption that surrounds me

As a programmer, all I need is:

1. Money (to not have to worry about it)

2. A challenge

3. A great team

It was inspiring to see Foursquare make it to the mainstream.

Also, Heroku. But I'm unsure about the future after the acquisition. Hopefully they'll stick around and continue to rock!

Great landing page!

I would display the examples even higher in the page.