DavorDK
Re:30k APIs Exposed – Postman Data Breach
on Monday January 13, 2025 @10:20AM (#42684346)
The Postman data breach exposed over 30,000 APIs, uncovering critical flaws in API management. Misconfigured permissions and poor secrets management revealed vulnerabilities, emphasizing the urgent need for stronger safeguards in API development. Here’s what went wrong and how to fix it.
Re:
on Wednesday March 20, 2024 @10:22AM (#39766995)
API Insights, launched recently, tackles API quality problems by enabling detailed review and analysis. With the addition of a CLI tool, it streamlines quality checks, integrates seamlessly into developer workflows, and promotes high-quality APIs with minimal impact on efficiency.
Ask HN: How fair is to present a plugin as partnership?
I saw this one post where a CEO and Founder is saying and proclaiming in it's title:JetBrains Adds :Company:Name: to Remote Dev Env ManagersThe first paragraph says: "We're thrilled to announce :insert:company:name: partnership with JetBrains, marking the launch of our new JetBrains plugin. This collaboration opens up a world of seamless development environment management within your favourite...
Happy inhouse developer does wonders for marketing your developer tool
At first, some of the developer marketing things aren't so obvious until you unlock them. Especially if you don't have any real prior developer experience. And I don't need to tell you that devs hate marketers now, do I? :)However, devs ldo like to experiment, and if you give them access to what you are building in places they trust, it can go really good. The obvious lesson from what I'm...
Re:Ask HN: What's the idea behind the WebNN API?
on Monday March 18, 2024 @11:25AM (#39745826)
A great question, went into a small rabbit hole, still don't know how to answer this xD
Ask HN: Is there a place where one can learn about platform engineering
I've been seeing DevOps vs Platform Engineering posts around the web. A lot of it claims to be different, but then there are a lot of groups where these things are put together.DOes that just mean that PE just hasn't amassed a critical amount of people to be its own thing?
Re:Ask HN: What do you recommend for SaaS broadcast emails?
on Friday March 15, 2024 @04:40AM (#39713388)
We use Mailcoach. There is a version where you pay once for the tech, but you then need to set everything by yourself. It's great if you have the time to set it up properly.
Re:Ask HN: What's the best SaaS starter kit for indie makers?
on Friday March 15, 2024 @03:55AM (#39713104)
If you are working with or building an API, Treblle has a really good free tier, plus completely free apps (no login required) - API Insights and Aspen API testing.
Ask HN: Why do standards change (and when)?
I would say AI is on its way to become a standard way of doing things in many verticals and fields.It's not there yet, it will take some time. We as a society are kind of still figuring the damned thing out. There are some obvious benefits, there's politics, morals, economics involved here... What exactly will become the "standard" no one really knows. Exciting times.But, let's talk about...
Re:Ask HN: YouTube/Podcast Recommendations
on Wednesday March 13, 2024 @12:19PM (#39693451)
Might be obvious, but the Aquired guys are really good story tellers about big companies, not just tech. The podcasts where they covered Nvidia were really good. I also enjoyed the Cosnole Wars, Nintendo, Nike and NFL episodes.
Re:Any resources or advice for someone new to API design?
on Wednesday March 13, 2024 @09:59AM (#39691289)
What kind of API are you looking to craft?
Re:
on Friday December 08, 2023 @10:43AM (#38570351)
Learn how people are building APIs and what the trends are for 2024, from the new Anatomy of an API report. It covers insights from over 1 billion requests across 10,000 production APIs about four core topics: API design, performance, security, and the overall API economy.
Some Key Findings: - AI APIs doubled in 2023 - Most API requests are made mid week - Every fifth endpoint on an API is a zombie endpoint
Ask HN: What factors influence your decision to experiment with a new tool?
I am talking specifically dev tool. Here are some options, but please feel free to add and comment. I put symbols you can use to cast a vote. Of course, I acknowledge that it is possible that multiple options might apply to you.(+) It needs to be recommended by a fellow dev (*) It needs to look and feel cool (website + product) (#) I need reassurances about security (is it safe to add it to my...
API Security Is a Hot Topic for 2023
Re:My learnings: How to talk to developers
on Tuesday February 07, 2023 @04:00PM (#34699559)
Not sure how would you push a Dev tool through "the business side".
Sure you can go top of funnel, still, these people are usually technical, and if they're not, they will most probably push it down the funnel so it'll end up in the Devs lap anyway.
What happens then is the Dev (most probably) will not trust it be lcause he has no reason to.
However, if the communications from that company came to him directly or indirectly through some good "problem-silving" content, then that's a different story.
Very hard to do though. Covering the top and bottom of the funnel is no easy task.
My learnings: How to talk to developers
How to communicate your product to developers? You need to build trust! This means, no features and no benefits!You do not build trust by giving them:1) You have these issues + my product solves them (Insert Features)Developers, engineers and other team members get these kinds of claims all the time and they simply just don't build trust and they are so over-used that they don't spark any...
Show HN: A boilerplate for your next TypeScript based API
Re:Show HN: Vento, Screen Recorder that lets you rewind and re-record ...
on Tuesday January 17, 2023 @03:57AM (#34410480)
Looks pretty easy and straight forward to use.
I myself use my phone for filming videos (over OBS), so I probably won't use it. I will recommend it to some of my fellow videomakers that could benefit from it, though.
API Monitoring with Treblle
Re:API Monitoring with Treblle
on Monday January 16, 2023 @06:09AM (#34399438)
An overview of API monitoring & observability with Treblle. How to set it up and what can you get out of it?
Ask HN: What Marketing Skill to Learn First?
I'm inclined to say - learn how to define an ICP (ideal customer profile).(Although, in these neck of the woods probably the first thing would be - How NOT to bore developers xD)Anyway, if you are building a product, you might find it useful to do the ICP first.When you have that down and mastered you can take your journey in so many directions and succeed fairly fast.Some of the directions you...
Re:Ask HN: Do you try dev tools recommended on TikTok and Instagram?
on Thursday January 12, 2023 @06:42AM (#34352118)
Tech Twitter is still very strong IMO.
But yeah, I get that probably the most relevant stuff you could find are sites like this.
There is some useful info you can find on IndieHackers, GitHub, Stack Overflow, etc depending on what you are looking for exactly.
Ask HN: Do you try dev tools recommended on TikTok and Instagram?
The influencer market is vast. My kind of opinion is that probably Twitter is still the strongest one in terms of tech influencers, however, you can't deny the reach of TikTok, Instagram stories, and reels as well as youtube shorts.What's your opinion on short-form video content? How do you consume it? For fun, or do you actually end up trying some of the recommendations these influencers dish...
Re:Ask HN: Strategies for working with engineers that are too smart?
on Thursday January 12, 2023 @05:54AM (#34351780)
Could you maybe use their energy for something else? Try to refocus them by giving them other "important" stuff to work on?
Aret hey competitive? Can you maybe set out daily, weekly and/or monthly goals for them to reach (on tasks you need them to do). If they are that good and they do it all in an houre, cool, let them be free and watch Netflix or something xD
As long as the work is done (which is your goal) all is well...
It's hard to give advice since it is probably one of those "you have to be there to understand it completely", but hopefully some of this jibber-jabber helps.
But at the end of day if they're not a good fit for the work you need them to do, maybe they need to go. Maybe they'll find something their suites them better and maybe you can find people that suit you better.
Long term, everyone is happier.
If you are actively trying to find solutions to improve productivity and nothing works, maybe it's not you, it's them.
If there are still things you haven't tried, try and see what happens.
Using Response Codes: REST vs. GraphQL
It feels like people are fairly confused about the numbers and some are saying, its easier in GraphQL. What a lot of people misunderstand about the 200 jokes about GraphQL is, 200 OK with a Graph QL API means, the server was able to process your request without exploding.With GraphQL you have interfaces and you have union types where you can be very explicit about what kind of response you...
Re:Microservices Are a Big Ball of Mud
on Wednesday January 11, 2023 @10:01AM (#34339161)
Trying to keep it simple (to a degree). First of all, I would say that its OK to still have a monolith and even build a whole product as a monolith and break it down as the need for microservices arises.
My understanding of whether or not you should take a monolith and cut it into pieces is that it depends on what you want to achieve.
Every monolith is specific, or are they? Without knowing what your product does I bet you have an API, a UI layer or two, some business logic and maybe throw emailing or a payment service. Well, guess what? We all have those!
How to decide. For myself, I’ve tried to boil it down to 3 questions:
1. Will I need to scale this part of the monolith more (often) than others? 2. Does this part of the monolith handle an entire process on its own from start to finish? 3. Does this part of the monolith require a lot of different code or resources than the other parts?
The questions are simple. They aren't philosophical. They don’t have a hidden meaning. Rather, a series of simple booleans. If something needs to be a microservice it'll most likely hit 3 out of 3 of those.
REST vs. GraphQL vs. tRPC (audio discussion)
Re:Show HN: Laravel API Boilerplate
on Friday January 06, 2023 @11:10AM (#34276409)
Awesome. If you need any assistance feel free to ask :)