michaelw

6 ms·

1.
Xkcd Simulation for Real Packages(nesbitt.io)
2 points by michaelw 7mo ago|0 comments
2.
by michaelw 7mo ago
Similar to LinkedIn's "verified" process, Porkbun uses a 3rd party: veriff.com. https://www.veriff.com/privacy-notice . It appears that Veriff's data retention is set by their customers (in this case Pork
3.
Hyrum's Tests(github.com)
2 points by michaelw 8mo ago|1 comments
4.
by michaelw 8mo ago
From Hyrum's Law to AI generated unit tests to automatically validate implicit dependency contracts.
5.
by michaelw 1y ago
Oh this brings back some fun memories. I worked with QNX for the ICON computer at Cemcorp and ESP Educational Software Products. The OS was so clean but it lacked a lot of basic tooling. Back then there was no GUI or even a graphics library
6.
by michaelw 1y ago
Please see my other reply about network costs. Bandwidth is a real cost that does not currently show up on the balance sheet because of Fastly's generous donations. That said, I would love to see more organizations implement private st
7.
by michaelw 1y ago
If the costs were all bandwidth related I would agree. Most open source package managers benefit from Fastly's generous donation of credits. Even if one ignores the single-provider-point-of-failure risk, the reality is that the develop
8.
by michaelw 1y ago
Original joint statement on the OpenSSF blog: https://openssf.org/blog/2025/09/23/open-infrastructure-is-n...
9.
Open Infrastructure Is Not Free: A Joint Statement on Sustainable Stewardship(openssf.org)
20 points by michaelw 1y ago|7 comments
10.
by michaelw 1y ago
Package managers are the app stores of software development. They are essential to the developer workflow and are key points of leverage with regard to supply chain security. They will be even more critical as AI-based development expands.
11.
by michaelw 3y ago
Host your own dependencies folks! There are three major types of risk in software supply chain: - Correctness. Does the source have flaws (or backdoors) that allow it to be exploited. - Integrity. Was it tampered with from source to b
12.
by michaelw 5y ago
Here's a simple way to think about fuzzing. If you're not fuzzing your interface to find vulnerabilities, someone else is.
13.
by michaelw 9y ago
I didn't see anything about the many benefits that are not typically considered income by the IRS. Most notably, health insurance represents a significant extra cost that makes that 18% advantage look a little smaller. Add in 401K reti
14.
by michaelw 9y ago
This is simply not true. In fact, working at Google will expose you to all kinds of interesting ideas and problems. Many of those problems will just sit there because Google can't prioritize them right now.
15.
by michaelw 9y ago
Let's count all the reasons not to leave: 1) If you don't have an amazing idea now, leaving won't make it easier. If anything it will be worse since you won't be constantly exposed to real-life problems. 2) Building grea
16.
by michaelw 11y ago
You can do some pretty cool stuff when you're an MVNO. No need for custom dialers (which wouldn't be much fun on iOS anyways). The system uses inbound calls, calling history and contacts to learn how to handle outbound call. User
17.
by michaelw 11y ago
A white label uber like app for use by municipal taxi authorities. There's no need to throw the baby (taxi regulation) out with the bath water (getting a taxi is usually inconvenient).
18.
by michaelw 12y ago
The author of this article is http://en.wikipedia.org/wiki/Bob_Kohn "Bob Kohn is the founder, Chairman and CEO of RoyaltyShare, Inc., an outsourced royalty processing solution for the music, book publishing, b
19.
by michaelw 13y ago
A good move by Fluke. The Fluke product retails for 10x the price but it's still a nice gesture.
20.
by michaelw 13y ago
http://en.wikipedia.org/wiki/Full_disclosure_(mailing_list) Full disclosure is a lightly moderated security mailing list generally used for discussion about information security and disclosure of vulnerabiliti
21.
by michaelw 13y ago
Take a look at flexbox. http://css-tricks.com/snippets/css/a-guide-to-flexbox/
22.
by michaelw 13y ago
While I agree with what SICP says, the function in this case isn't really a function. It's not something a caller will ever invoke explicitly. It exists to provide a closure that can be initialized with the injected parameters.
23.
by michaelw 13y ago
This has less to do with Angular and more to do with Javascript's general inability to express a useful DSL for anything. I think your ad hominem and somewhat hyperbolic complaint would be more credible if you supplied more concrete ex
24.
by michaelw 13y ago
There are two things I know to be true about humans. 1- Humans think they are good at risk assessment 2- Humans are very bad at risk assessment In particular, humans suck at dealing with very big or very small numbers.
25.
by michaelw 13y ago
Let's look at DSLs that which they were DSLs. To be kind we'll limit ourselves to javascript. On the building side we have Grunt and the less popular but still useful Jake. Ember's property system is a DSL. Angular's DI
26.
by michaelw 13y ago
I like these questions but they feel like a review of "Javascript: The Good Parts." Still, there's no doubt that someone who does well with these questions is going to have excellent javascript-fu. My first concern when hiri
27.
by michaelw 13y ago
Waze uses Bing maps on the backend. Wanna bet that "look forward to working with them in our ongoing effort to make a comprehensive, accurate and useful map of the world." means converting to use Google maps?
28.
by michaelw 13y ago
I use http://plnkr.co and apart from the outrageous amounts of memory it can consume it's pretty good. Features I like about Plunker: - Multiple files - Great code editor (ACE) - Streaming collaboration mode (so others can follow al
29.
by michaelw 13y ago
Sigh. What I wrote about the Google i/o fail applies just fine here. http://www.michaelw.net/google-io-fail/ This is a classic case of optimizing the wrong problem. The notion of first-come first-served makes almost no sense in an oversub
30.
by michaelw 13y ago
$routeProvider and $location are special in that can be injected into .config. It may be that they are actually implemented as special constants. I do not believe that non constant providers can be injected. Do you have a fiddle or plunk

More ›