Gasparila

5 ms·

1.
by Gasparila 5y ago
Thought exercise because I legitimately struggle with this. Is this fundamentally different than Costco using sales data to choose which Kirkland products to launch/sell? If so, how? If not, then why do we not pursue Costco with the sa
2.
by Gasparila 7y ago
The author has a long-form blog going into much of a similar topic: http://boringtechnology.club/ . Very nice read
3.
by Gasparila 7y ago
Matz (Ruby lead maintainer/original author) has said that Ruby 2.7 (coming out this Christmas) has JIT improments that make JIT neutral for Rails. The goal is to have it be net positive by Ruby 3.0 (Christmas 2020)
4.
by Gasparila 7y ago
The law has you pay taxes of 1% of gross revenue * percentage of global employees working in an SF office. Even if the headquarters moved (and I'd guess it is already a Delaware registered company legally), they'd still have to pa
5.
by Gasparila 7y ago
There's a .size that works for pretty much everything: if the relation isn't loaded then it will do select count(*), but for arrays and loaded associations it does length of an array
6.
by Gasparila 7y ago
One big reason to me: cookie security Currently all buckets share a domain and therefore share cookies. I've seen attacks (search for cookie bomb + fallback manifest) that leverage shared cookies to allow an attacker to exfiltrate data
7.
Uber plans to sell $10B in IPO at $90-$100B valuation(ca.finance.yahoo.com)
2 points by Gasparila 7y ago|1 comments
8.
by Gasparila 8y ago
I had one experience reporting a security vulnerability to United's bug bounty program and never want to do it again. I reported an issue to that I could reset anybody's MileagePlus number by only guessing a multiple choice securi
9.
by Gasparila 8y ago
Back of the envelope math for birthday paradox is root n. So in this case with ~50% probability you'll get a collision after 2^32 IDs (or after 4 seconds of 1 billion writes a second)
10.
Flexport to expand Chicago office, add tech jobs(chicagobusiness.com)
1 points by Gasparila 8y ago|0 comments
11.
by Gasparila 8y ago
I had one experience reporting a security vulnerability to a bug bounty program and never want to do it again. I reported an issue to United Airlines that I could reset anybody's MileagePlus number by only guessing their Security Quest
12.
by Gasparila 9y ago
Wow that's a lot of dilution for a late stage round. I feel bad for the employees that suddenly have their equity cut by 60%. If I'm doing my math right, ($865 MM pre-money) then it means even with the higher valuation preferred p
13.
by Gasparila 9y ago
This article (and others I have read disliking HPKP) generally take an all or nothing approach. That is to say, they see HPKP as either "pin the key of my certificate" or "don't use HPKP at all" In reality, you can
14.
Six Vulnerabilities from a Year of HackerOne(flexport.engineering)
11 points by Gasparila 9y ago|0 comments
15.
by Gasparila 9y ago
They still exist and (as far as I know) there are no plans to do anything about them. We (thankfully) were alerted to this issue by HackerOne before it was an issue, but this remains an absurdly easy attack vector...
16.
by Gasparila 9y ago
https://suclass.stanford.edu/courses/course-v1:Engineering+C... Free videos/slides for Stanford's introductory networking class (linked the Reed-Solomon video)
17.
How Flexport keeps its data secure(hackerone.com)
1 points by Gasparila 10y ago|0 comments
18.
Flexport (YC W14) raises $65M Series B(techcrunch.com)
99 points by Gasparila 10y ago|31 comments
19.
by Gasparila 10y ago
Each bitcoin can be theoretically split into 100 million Satoshis (the bitcoin equivalent of a penny I guess). The maximum number of bitcoin that can exist given the current system 21 million. Those multiplied together seem to me sufficient
20.
Flexport (YC W14) Regrets Taking Money from Peter Thiel(techcrunch.com)
1 points by Gasparila 10y ago|1 comments