masonhensley

Client security teams have been very reasonable on deviations to their massive spreadsheet checklists.

On one hand, I think that if you, as a vendor, reply back with a few "well, we do X instead of Y in the same spirit" they will probably believe & trust your answers more than a spreadsheet returned in 2 hours with "yes/in compliance" for each question.

Very nice:

- Secure by default (automatic https with letsencrypt, secure cookies)

- Sane defaults (No public access unless explicitly added)

Curious (not nit picking). What's the high level possibility of allowing keycloak (or another self hosted auth provider)?

Looks like you are leveraging goth... fairly simple for someone to extend down the road via a contribution, correct? https://github.com/gnur/tobab/blob/2d1fa1227d1f56ee332d3d83b...

Ref - https://github.com/markbates/goth/issues/319

I think they will have a much longer lifespan than the electronically controlled sit/stand desks.

Already found and fixed two typos.

Primarily because the functionality targeted for being completed by the MR can vary so greatly.

Regarding time MR’s take to merge? I don’t think trying to get the number “lower” is the goal. Probably best to say, we’ve agreed to an SLA of x days. Anything over Y days is a big red flag.

Thanks for sharing- not trying to come across as negative. I totally agree metrics should be included in retro’s ... it’s adjacent to what I’m working on.

I’m just convinced that a lot of product/project management metrics have “no meat on the bones” or aren’t really concrete at the end of the day - vanity metrics.

- cutting grass

- pulling a stump

- leveling a gravel road after a heavy rain wash out

- pushing around a brush pile

- moving some big rocks around

Imagine being able to "jettison" your battery pack from your classic car EV conversion to plop into your tractor. I know the swappable battery packs failed to take up with the Tesla model, but think about the secondary machines that need occasional power - tractors, ride on lawn mowers, sentimental classic/ hobby vehicle. Things that could be used in series (you won't be moving your lawn and driving your classic car at the same time) that could also benefit as being a power wall.

High class problem for sure, there's a big opportunity to leverage micro-grids + flexible power.

I'm not big on microservices unless your org is scaled people wise and need to decouple your team, but I'm happy to outsource to Keycloak as an auth focused service.

Cool integration in the k8's space.

Seems questionable to repurpose the repo to leverage the stars regardless of whether you posted it here or someone else did.

A bunch of enterprises are going to get burned when say ubuntu:trusty-20150630 disappears.

It's not that they even have to rebuild their images... they might be pulling from one that will go stale.

I use one every day. Generally, fresh grounds, prewarm the water before assembly.

I also like to wisk in a little sugar in the final cup after pouring out. (Don’t add sugar to the moka pot or it will caramelize/burn)

It's also a good sniff test if you're interviewing. Slow and steady might be up your alley too. There's definitely a hierarchy of security and compliance needs depending on the org, but many orgs loose the forest for the trees.

Bonus points for the easy heroku deployment.

Curious - any reason behind using mongo vs a relational db? Was that more aligned with the apollo stack (I haven't kept up with it)?

Totally agree with the Wordpress example, however, I'd argue that more products & applications should attempt to be build upon known primitives to reduce cognitive overload for both the building team and the end users.

I do think there is need for a common vernacular in these components, however I think that too often teams start from scratch when they could pull something off the shelf, and swap out some colors.

List of corporate sponsored design systems: https://designsystemsrepo.com/design-systems/

Close to Nashville, Huntsville (huge aerospace & engineering base has fiber) & Atlanta.

Pretty sure they also have municipal fiber.

NoodlesUK points out alerting which is a pretty important concept to incorporate.

Largely a solved concept in Electronic Medical Records & as outlined in the post.

A few font-awesome, testing-library, ES-Lint & react imports. Some of those broader libraries have been broken up so you don’t have to import the whole enchilada.

But ya in a larger project, mixing and matching the versions of some of those components can get tricky. This repo seems reasonable in dependencies, the dependencies of dependencies on the other hand can be crazy in any project these days.

I appreciate they where trying to protect passwords & promote security, but it definitely caught me off guard that this wasn't widely understood.

https://m.signalvnoise.com/subscription-hostages/

"Good Housekeeping Seal" for Analytics

- Self host analytics

- Don't use google analytics

- Don't use tracking pixels (FB, Reddit, etc)

- etc

"Good Housekeeping Seal" for Billing Practices (in same vein, a little off topic though)

- Can cancel your subscription online

- Sends reminders prior to charging card (dark pattern on some sites)

- Open receipt API to scrape out historical spend data - started some thoughts here- https://github.com/HipSpec/invoice-data-api-specification

- No sneaky trial => subscription without warning

- etc

====

I think most of us here acknowledge that privacy or "how the sausage is made" generally doesn't sell to businesses & consumers. But I think there's some fertile ground between a self attestation (PCI style) and a $40-50k SOC Audit.

There are a ton of incumbents that at this point could not strip out spyware from their application/data stacks even with 100 human years of engineering effort... could be a competitive advantage for smaller/newer organizations to leverage.

Good Housekeeping reference: https://www.goodhousekeeping.com/institute/about-the-institu...

Thanks for sharing the article, SimpleAnalytics, Posthog & Fathom are steps in the right direction. Also shout out to Matomo/Piwik, one of the OG's in self hosted/ Google analytics alternatives.

Edit: here you go: https://vue.land/

You also get to a point in hiring where the field of sales/ops people judge you & your maturity based on whether you use a commercial tool like Salesforce/HubSpot vs build your own.

Can you imagine joining a tech org and they have a half baked phpadmin wysiwyg as a standin for github + code reviews?

While yes, you could calculate out how much the subscription is vs development time to build a simple CRM, the maintenance & mental overload is righteously terrible. Better to spend that effort integrating your foos to your bars than building a sales crm.

What are people’s thoughts on remote conferences moving forward?