itwasntandy

9 ms·

1.
by itwasntandy 1y ago
Thank you Nick. As a recurse alum (s14 batch 2) I loved reading this. I loved my time at recurse and learned lots. This highlight from the post really resonates: “ Real growth happens at the boundary of what you can do and what you can alm
2.
by itwasntandy 4y ago
I wasn’t talking about food safety. The lice from the farmed fish devastate the wild salmon populations, so ecologically they are awful. That to me is a pretty clear reason to avoid farmed salmon.
3.
by itwasntandy 4y ago
Keep reading. For example: > A recent study in British Columbia links the spread of parasitic sea lice from river salmon farms to wild pink salmon in the same river
4.
by itwasntandy 7y ago
Sure. Our numbers are smaller, as our org is much smaller but I think they hold up. We have under 100 engineers at BuzzFeed, so for us we reduce time spent supporting applications by a single percentage is almost equivalent to having an ext
5.
by itwasntandy 7y ago
I am part of the team that worked on this project. AMA
6.
Continuous Deployments at BuzzFeed(tech.buzzfeed.com)
3 points by itwasntandy 7y ago|3 comments
7.
by itwasntandy 7y ago
This is somewhat intentional I think to guide you toward buying Enterprise edition, which since 11G includes plan baselines ( see https://docs.oracle.com/cd/B28359_01/server.111/b28274/optpl... ) - which
8.
by itwasntandy 7y ago
BuzzFeed | Principal SWE, Core Infra | London and New York | Onsite Full time | https://boards.greenhouse.io/buzzfeed/jobs/1895087?gh_jid=18... BuzzFeed | SWE, Core Infra | San Francisco | Onsite Full time | htt
9.
by itwasntandy 7y ago
Indeed. And considering the hundreds of millions[1] of people who pass through london’s stations each year, that would means hundreds of thousands of false positives. [1] https://en.m.wikipedia.org/wiki/List_of_busiest_
10.
by itwasntandy 7y ago
While I agree with the aspiration, I don’t see how it’s possible to use facial recognition to flag “america’s Most wanted” or to look for missing children without mass surveillance though? It only works if it scans _everyone_ . Additionally
11.
by itwasntandy 8y ago
Read “never let me go” by Kazuo Ishiguro, or actually even watch the movie that was made of it (same title) That illustrates fairly well why having an underclass who provides healthy organs to the rich is a utterly barbaric idea.
12.
by itwasntandy 8y ago
That is insane that that is the case here in the US. ( and I just checked as I could not believe it). In Europe it’s different - https://ec.europa.eu/agriculture/organic/eu-policy/eu-rules-... “When the anima
13.
by itwasntandy 8y ago
My own experience ( North east US) has been somewhat different recently. Yes routes from Apple maps, may appear longer or more convoluted at first glance. However after using it ( due to CarPlay) for a while on routes I had previously regul
14.
by itwasntandy 8y ago
That's configurable - https://docs.aws.amazon.com/elasticloadbalancing/latest/appl... - default `HealthyThresholdCount` is 5 and `HealthCheckIntervalSeconds` is 30 seconds. We adjust those down - somewhere 10
15.
by itwasntandy 8y ago
I miss Boundary. Their traffic flow monitoring with per second granularity was utterly amazing. It had almost no overhead, it gave the equivalent of netflow data for instances in EC2, way before AWS gave VPC flow logs. It was incredible. Al
16.
by itwasntandy 8y ago
Indeed. I saw a brilliant presentation in 2012 by Michael Mitzenmacher from Harvard on verifiable computing in the cloud. It was based on this paper: https://arxiv.org/pdf/1202.1350v3.pdf
17.
by itwasntandy 8y ago
Maybe - we've not tried it, but I just asked Justin who architected sso, and he suggested that maybe https://github.com/buzzfeed/sso/blob/master/internal/proxy/o... could be used. However
18.
by itwasntandy 8y ago
Golang is pretty beloved at BuzzFeed. It’s one of our two standard languages - the other being Python - and whilst the vast majority of our services are Python, Golang is being used for growing and significant number too. Touching on my fir
19.
by itwasntandy 8y ago
It’s not. We acknowledge that in our blog post, and our approach was definitely influenced by the BeyondCorp philosophy. However google IAP requires that your infrastructure is all in Google cloud. Whilst we do use GCP, most of BuzzFeed’s i
20.
by itwasntandy 8y ago
We did talk in the blog article about engaging with Security Innovation too.
21.
by itwasntandy 8y ago
Right now we have a dependency on Google as an OAuth2 provider, as that's what we use internally at BuzzFeed. However we've designed sso to allow us to easily add other providers. For example, there's this task ( https:&#x2F
22.
by itwasntandy 8y ago
thank you - We know from our own experience using other open source projects that having documentation, and guides to get started really helps. We know there is more to do there too (some of the feedback in this HN post has helped highlight
23.
by itwasntandy 8y ago
Hey, there were a few reasons behind this. - ease of migration was a big one, we had 100+ instances of bitly's oauth2_proxy, and were able to seamlessly migrate them to this, without any changes to the services being protected. - ease
24.
by itwasntandy 8y ago
That is understood, and is always why we engaged with some of the top researchers who contribute to our bug bounty program, from the start with this project. For example offering increased bounties during certain windows, or providing early
25.
by itwasntandy 8y ago
I’ll correct my post above. I meant to say `mobile devices`, not `mobile browsers` . My bad. The other reason, which I didn’t mention above, but is talked about in the blog post, is we decided to use bitly’s oauth2_proxy as a basis for our
26.
by itwasntandy 8y ago
Great question. We found that SAML doesn’t typically have great support on mobile devices [edit: had originally written browser here, hence the comments below], and since BuzzFeed has many remote employees around the world, we needed to sup
27.
by itwasntandy 8y ago
Yes, as mentioned in the blog post, we worked with Security Innovation to do a week long security assessment with full access to source code, design documents and endpoints. We also have a long term consulting arrangement with a widely resp
28.
by itwasntandy 8y ago
GitHub repo: https://github.com/buzzfeed/sso This is our identity aware proxy, which we've been using internally for a year. The blog post explains our motivations behind creating it, and open-sourcing it. It&#x27
29.
Show HN: BuzzFeed open source SSO(tech.buzzfeed.com)
166 points by itwasntandy 8y ago|36 comments
30.
by itwasntandy 8y ago
Weird thing is it just a few months ago that AWS contributed what I would consider a pretty significant feature to Redis - encryption in transit: https://aws.amazon.com/blogs/opensource/open-sourcing-encryp... Whi

More ›