The point is that we've been able to trust SSL to protect us on open networks. We might not trust the owner of the infrastructure, but SSL meant that we could tell when our request had been tampered with. That's no longer the case.
187 karma · joined November 12, 2010
Previously co-founder @ Huzza.io (live streaming for creatives) - acquired by Kickstarter.
http://www.twitter.com/nickste
The point is that we've been able to trust SSL to protect us on open networks. We might not trust the owner of the infrastructure, but SSL meant that we could tell when our request had been tampered with. That's no longer the case.
Developer runs `pip install ruff` with pip < 26.2.2 on a public wifi network at their local coffee shop. Wifi network is spoofed, forwards all traffic except pip. Intercepts the pip requests and returns a malicious package. Machine is instantly compromised.
So any local development environment is also very susceptible to this kind of attack until pip, certifi, node, etc. get upgraded.
We've got good tools for finding this kind of issue CI/CD and our cloud environments. But good luck finding and patching every virtual environment on your local machine.
You can check it out with: pip install safety && safety init
From the EventBridge perspective, we like CloudEvents and I expect that in future we will look to add support for it as an alternative to our existing envelope.
[1] https://jalopnik.com/engineering-firm-that-said-tesla-model-...
"What if we could use data, to build the perfect snowboard?"
"In the average Silicon Valley tech company, 95% of time is wasted building tech products"
The company I work for is currently building a corporate travel booking system. There are hundreds of competitors out there, but all of them approach the problem from a financial system integration perspective. We try and take the "consumer" approach and apply it to a corporate environment - building products that look like a consumer product, but has all the backend functionality that a corporate would need.
So far it seems to be working!
While this is definitely a valid criticism, I'd urge you to read this post: http://posts.richoakley.com/post/rocket-internet-respect which argues that we, as entrepreneurs, have a lot to learn from the way Rocket has managed to execute so phenomenally well in each of the developing markets it has targeted.
Especially given a few recent posts on HN detailing failed attempts at startups, I think the above post highlights the importance of being able to consistently execute in a business.
Looking forward to seeing the product!
I especially like the example of Chikoo - a type of fruit, but also the name of someone's dog. By Google knowing that you and your family have a bunch of photos with Chikoo in the caption, it will show you those pictures instead of the fruit.
My dog's name is Milo: http://www.google.co.za/search?q=milo
I've been teaching my father in law how to use the Bloomberg app on his iPad and this was one of his biggest stumbling blocks - he just couldnt work out why the keyboard wouldn't appear.
With the adoption of these types of devices moving to include the "non-tech savvy" population, who aren't as quick to work out unclear UI, we start to see how small UI choices can have a dramatic effect on usability.
Facebook has gone some of the way to doing this, with me being able to remove access to apps I've previously given access to; however, I'd like to be able to upload customize custom documents, such as my passport or proof of residence, and then be able to share them with specific companies.
It seems like TrustFabric may go some of the to enabling the above?
What alternatives would HN recommend over 99designs? We've got our own coders, so need nothing more than an actual design/layout.