anayar

Nah bc you're not swapping from CNAME > A records, which could have other random networking related impacts, especially if you're running a public API.

Worked for us on Cloudflare using the .dns Heroku target!

Following this. It's my experience that for all the rhetoric about VCs being ultra-helpful at the end of the day the success of any venture lies with the founders/operators - the VCs can merely allocate some time, monetary capital or social capital to push things in the right direction. But that can be a huge lever.

Good question here!

> What's the use of only putting on their marketing site? All their customer problems/bugs would be with the clients and the web app?

So you acknowledge that they're using it to solve customer problems and bugs :)?

> That's your excuse? Haven't you heard of artificial intelligence? It can move through thousands of recordings in minutes.

Doing what nefarious activity exactly? I'm not sure good sir, but if we want to make mountains out of molehills we're all free to do it... it's just an analytics tool like any other with the one caveat that they recreate the screen from DOM reconstruction instead of just sending over each and every click event like every other marketing tool (Heap, Segment, Intercom - you name it).

Sure, give users an opt out and respect that but otherwise the drama around this stuff is pretty wild.

You don't use the same argument when entering a grocery store - you're being tracked all over the place. Well, when you're on my website you're on my property and I'll respect the governing rules that say what I can and can't do without permission but hey, if you don't like it... leave?

Also to be clear, I don't think the Notion client itself uses it -- just the Notion marketing site.

Why just FullStory? There are tons and tons of apps that do this... https://www.g2.com/categories/session-replay

It's just session replay... in 2020... if we don't want to be tracked I think it's on us at this point to use a blocker.

As someone who runs a site that uses this, I can tell you with 100% certainty that without it we (a) would not be able to optimize user experience nearly as well, (b) would not be able to serve customer support tickets nearly as well and (c) would not be able to make product decisions at the velocity we want.

Not sure what folks are doing on sites like Notion, etc. that makes session replay so creepy but also do we really think companies and startups have time to sit and watch all the user sessions?

Seems like an unfair takedown to me.

This looks dope! I was never able to fully get into Roam so hopefully this is a bit easier and worth playing around with.

On an unrelated note, seeing this and "Tired of note-taking apps" on the front-page at the same time made me lol.

This is awesome, thanks for sharing that! Can I ask a quick prying question -- who writes these principles and who approves them over on your end?

Effectively trying to gauge - is it grassroots and from the ground up, implemented and vetted by the engineers or is it more top-down "we need a way to align engineering at scale" development?

Mostly wondering about adoption and imagining whether my approach of pushing this into our team is the way to go or if it's worth allowing a collective to determine the working principles. Sorry for all the questions, you sparked my curiosity :)

Cheers!

But even if you use a third party, tying identity in to your application almost always still has to be rolled on your own right? So no matter how bulletproof the 3rd party solution, it’s likely that a tremendous number of vulnerabilities on an application basis could come from faulty auth integrations as well

Phenomenal, many thanks!

But folks really cache auth related data? Isn’t that better handled purely through client <> server requests and handling caching for all UI or action based data?

Amen to red team tests!

This is an amazing list and incredibly helpful. Thank you so much!

Actually make that not really* a straight up NOT

HTML is a markup language, not really a programming language. So I'm going to say no but I'm sure there are those smarter than me who can be more definitive.