Nathaniel Talbott

Client calls RedCorner, complaining that their dev agency screwed them (again) Oshri Cohen gets in the case and determines that the dev agency is in fact acting unethically trying to charge the client for bugs and code design flaws. (They were charging incorrect amounts on the credit card) I work with one of their internal devs, for which we will transition all work because of the very simple philosophy that my father taught me: “no trust no business”. We solve the problem in about 1 hour instead of the 40 hours quoted by the dev agency. Yeah, that’s the power of having an FCTO who can represent you, saved my client $4,800 in an hour. There are plenty of good dev shops that care about their clients, but that’s maybe 0.05% of the market, the rest don’t know what they are doing and will play games for the sake of profitability. DM me for - assistance - representation (I can get on a call with an hours notice) - quote review - project review - sanity check (no you are not the crazy one, but maybe… I promise I won’t be lying to you if you are)

22

6 Comments

SCA tools lack a standard for what should constitute a single alert. Dependabot issues one alert per affected package specification file, plus one additional alert if the vulnerability affects at least one indirect dependency in a lock file, as far as I can tell. NPM, who can really tell? 🤷 At Coana, we never generate more than one alert per scanned project per CVE. I am not sure which approach is best. Dependabot's method is related to the number of fixes you need to apply, but is that the right way to count? 🤔

5

🐰 Bencher v0.4.7 Released 🎉 This release comes with new and improved Pull Request comments! - If there are no Thresholds set, you now get a ⚠️ warning - If an Alert is generated, you now get a separate 🚨 Alerts table - All benchmark results are now under a details tag to keep the comment concise - The comment tag has been improved to update the same comment even after a rebase or base branch change https://lnkd.in/ehe5hHfT

2

1 Comment

"One of the things we don’t want to happen when we take a biometric test is we don’t want there to be any intermediary because the data can be stolen, so we rely on only browsers with end-to-end encryption. In Africa, because people are data-conscious, they use a lot of browsers that have proxies. The browser sends a user's site to another server which compresses and sends it back to the user as a light page.  The problem with that is that you can’t do end-to-end encryption. There are a lot of browsers like this which are good for saving data but not for running verification processes." Insightful conversation with Sylvia Brune of pawaPass https://lnkd.in/eCXMpqDD

16

Added two new options to the FREE Webpage to markdown tool: https://lnkd.in/g8a2BtVz - Render JavaScript - Residential IP Also the rate limit message will now be shown if you're over the rate limit.

1

Which is exactly why the decisions around what to change and more importantly why you want it change it is rooted in the NON-technical side. Without a code linked specification these decisions will gradually move away from the non-technical stakeholders and towards the technical side who can only rely on the assumption of alignment.

9

Infrequent intricate initiatives where imperfection imposes immense implications or DNS and Other Taxes A quick reference for the next time you're setting up DNS after a long time of not thinking about it. https://lnkd.in/eysVDGdT

3

2 Comments

Shopify product tag question - by default, the logic used for filtering is OR. We're interested to see if anyone has got this working with AND. Here's an example from a support request: "Let's say I have a general collection page of "Men's" and they want to filter "Jackets" and "Pants". Currently if I attempt to filter, it'll search for products that have both tags "Jackets" and "Pants", which obviously no available products would show. Instead, I want it to filter any products that have either "Jackets" or "Pants" in tandem." https://lnkd.in/gDHtMQbt We're not looking for an app solution here, more keen to find out if anyone has a code workaround.

1

1 Comment

There's so much gold in this video by Rand Fishkin that I thought it might be worthwhile to share some key takeaways based on the recent Google Search API docs leak. Full article with the full video here: https://lnkd.in/gvv62aHb

5

🚨 New video alert! I just published a short video to accompany my blog post that introduces Swift's defer keyword. https://lnkd.in/en75V4-Q

3

4 Comments

🏎️💨 Making of a Ridiculously Fast™ API client in R. Why my package is **~17x faster** than the community alternatives that call the **exact same API endpoints**. 👇🏽**design choices matter** ✨ https://lnkd.in/ggi_2XyQ

129

2 Comments

How to Keep Your Custom Claims in Sync with Roles Stored in Firestore https://lnkd.in/gm2V54qg

16

TL:DR; I’m looking for a partner to lead Terminal7’s dev & community relations. One that groks youtube, reddit & discord and knows how to exit vim. I always wanted to be a one-man-band and as I’m tone deaf, a real band is out of the question.  What’s left for me is to design, develop and market the devtool I need. That was the plan for https://terminal7.dev and it has to change. Today is the 11111111₂ day since the black sabbath and it's time to acknowledge the war drains too much of my energy.  The sadness is deep and multi-layered: for the kidnapped and their families, for the fallen and for my country. It’s Israel’s darkest hour and our gov is not helping, quite the opposite. Even when one of my posts succeeded in sparking discussion on reddit and selling a few subscriptions, the energy boost lasted less than 8 hours. I was completely depleted when it was published that the hostages Yoram Metzger, Chaim Peri and Amiram Cooper and Nadav Poppelwell are dead. I’ve tried to mute the news feed, but it’s not practical nor moral. As an Israeli I feel obligated to read the stories of the fallen and listen to their grieving families.  Whatsmore, as a father to a 19 year old daughter-soldier I don’t need the news feed to remember the young soldiers held by Hamas: Agam, Daniellla, Karina, Liri & Na’ama. It feels like someone installed an engine of sorrow in my stomach. Sometimes it revs faster and sometimes slower, but it’s always there, draining my energy and happiness. I have little control over this engine of sorrow so I’m looking for a partner to help me keep the revs down.  A great communicator to lead Terminal7's marketing while focusing on community relations. The ideal candidate would have experience building and engaging communities, especially on platforms like YouTube, Reddit, and Discord. The position is flexible - it can be full or part time, hybrid or remote. You can be highly experienced or less so. In any case, the base salary will be modest with significant bonuses tied directly to revenue growth. If that sound right for you, please email your resume to benny@terminal7.dev

11

Branching and Merging is the first step to setting up a new repository, and many would argue one of the most important. It sets the tone for how you will handle your code commits and impacts much of the work you do down the road. Most people use a strategy that they know, without really considering other strategies, or which might be best for their current project. This four-part series on Branching and Merging will give you a great opportunity to consider other strategies and the benefits of each.

2

Progress = your QA release process growing from 15 minutes to 5 hours. A stat that’s both invigorating & frustrating at the same time. But I think the single best thing you can do to delight your customers is to personally guarantee “it just works”.

10

The most common complaint I hear about serverless is that it "is difficult to test". And this is where I most strongly disagree. In fact, I will try to prove that serverless actually is much easier to test and debug than the more common solution of using a container or a local server. Why do I say this? Simple: a serverless application is built out of isolated functions. Each function is a component, that receives an input and an output, and the services it uses are injected as arguments.   If anyone remembers the basics of the Spring Framework (which is an Inversion of Control, a testing framework at its core), the concept is the same, just at the infrastructure level. With this structure it is extremely easy to write tests: all you need to do is to pass arguments, and, if you are using external services, provide mocks for them. Serverless also makes it easy to write integration tests because the deployment is fast and can be integrated into the test code itself. However, in my experience. people who are used to building with containers are upset by this experience and complain that they "can't debug it". They expect to be able to start the server (which they cannot do with functions) and tweak with the application by interacting with it, often manually playing with the UI. The truth is that they are not used to writing tests at all . They don't do that, period. So they start the whole thing, interact with it often at the UI level and attach a debugger to find out what is wrong.  Of course this is a bad practice because you do not get a repeatable test suite, and what is worse, you have to test the whole thing instead of unit tests. Unit testing an entire server is much more harder than testing functions. So the truth is: is not that serverless is hard to test, it is that you usually do not write tests for your code at all.

22

3 Comments