I'm wondering why storing creds in env variables as plain text is acceptable - e.g. they better be dynamically fetched from a secret manager with 2FA in the way
Well I'm glad they at least released a public postmortem on the incident. To be honest, I feel naive saying this, but having worked at a bunch of startups my whole life, I expected companies like CrowdStrike to do better than not testing it on their own machines before deploying an update without the ability to roll it back.
Someone who knows React can easily be using ReasonML. So to me, the question is, why not? You can get most of the features of ReasonML with 3rd party libs - TypeScript for type safety, Redux for state management, and Immutable. However, when I look at the build time comparison, I doubt you'd get something as fast with JavaScript, at least not today.
What are the challenges of migrating to https only protocol? I have done it before, not on wired.com scale though. We use AWS and it's not that difficult to start supporting https and have all http requests redirected to https. Can someone explain why it took them a year to do this?
I really like the direction this browser is going in. I noticed I cannot go back/next using a mouse or keyboard (though i can imagine one would be able to swipe to do that).