News for hackers. Stuff that matters.

seekayel

It is a good demonstration of how security is a community problem and is limited by the weakest link in the chain.
Re:Unhinged Engineering on Friday November 04, 2022 @01:33PM (#33470616)
Are you suggesting with 'Anti-conveyor belt' and 'Reverse QA bottleneck' that the only one testing the code is the person who wrote it? That seems off in my opinion.

Also, does your QA team cycle through the dev side to write tests?

With 6) does that mean squash merge? rebase? otherwise how do you enforce?

Also how do you ensure you deploy something that is tested, vs creating a new version of the code at the time of merge?

Amazing! Do you have any plans to go beyond strawberry picking?
Re:Show HN: Internet Fight Club on Thursday April 07, 2022 @10:13AM (#30944682)
Needs a time suck warning :)

Also, what/how do I use the stickers? Do I give them to other people I am watching fight?

Show HN: Full Stack Serverless Apps

https://app.cyclic.sh

## tldrYou can deploy javascript apps on Cyclic after logging in with GH. Quick starts: <https://docs.cyclic.sh/docs/overview/starters>## DescriptionAt my last job I saw new developers struggle to get experiments and POCs from their local to live in the cloud. As we continue to expand the software development profession, more developers will need this same help. So we built cyclic.sh. Our...

( Read More... | no comments | 5 points | on HN )
Re:Protect Against Subdomain Takeover on Tuesday March 22, 2022 @09:24AM (#30765770)
I wonder if anyone has experience with this, or if the take overs are probable?

Ask HN: What is the best way to discover NPM packages?

What is the best way to discover npm packages?All of the ways I've found seem very manual and imprecise. Any recommendations or improvements? Here is what I try:Process: - Google "npm for feature" check search suggest and results - Check https://snyk.io/advisor/ for similar results and quality score of packages - google search "package vs ..." and see what comes up - Check packages used in open...

( Read More... | 1 comment | 3 points | on HN )
Re:AWS S3: Sometimes you should press the $100k button on Thursday February 17, 2022 @09:48AM (#30373588)
How I read the article, nothing happened. I think it is a cautionary tale of why you should probably bite the bullet and press the button instead of doing the "easier" thing which ends up being harder and more expensive in the end.
Re:Show HN: AskPaulGraham on Thursday January 20, 2022 @02:56PM (#30013877)
Thanks for wasting 30mins of my day ... haha fun times!
Re:AWS Tools Suck on Friday December 17, 2021 @06:32AM (#29590818)
I've opened pull requests that haven't been touched by AWS for ~9 months (comments or other). Been told (through a back channel) that the team didn't have the capacity to review all the PRs.

So "it depends"

Older »