jimmychangas

Honest question: what, in you opinion, is the state-of-the-art approach? Something like BeyondCorp?

Exactly. Comparing open source to begging on the street? Yeah, sure, pretty accurate comparison if you are living in a parallel universe where street beggars run the world's infrastructure.

I guess it is pointless to argue about what topics are the most relevant. This "vital articles" list seems completely arbitraty and, frankly, not very important.

The author has a point, but one of the defining characteristics of HN (in my opinion) is that sometimes comments are more valuable than the actual link.

Some HN comments are incredibly insightful and well informed, and some threads have real historical value (i.e. the original Dropbox and Redis posts).

Does someone keep an archive of legendary HN comments that you could share?

The default cross-origin blocking behavior is useful for many things, such prevention of data exfiltration via XSS vulnerabilties. CORS is a way to relax this behavior.

I read the PDF version and donated 10 dollars a few months ago. The book is worth more than that, but given the numbers he expose I didn't even feel guilty.

> UX should be a mindset, not a step in the process

Every specialist in every branch of software engineering thinks like that. Designers, architects, testers, compliance people, everyone seems to think the software development process should be framed according to their priorities. Who knows, maybe this is a healthy way to establish a balance of power.

Care to elaborate? Do you mean S3 VPC Endpoints? Because this could screw many in-VPC Lambdas that need S3.

They were very open about the reasons, they are simple and make total sense. I like the new brand.

You are right, thank you for your reply. The "user behavior is non-linear" and "optimization yealds diminishing returns" are powerful insights.

Better yet, the things you listed are qualities. They encompass every feature in the product. I think parent is generalizing too much on his assumption that only mature companies should spend time in optimization. Early stage startups can sometimes make mistakes, and optimizing early on can help them save the precious resources needed for them to survive another six months.

Can you elaborate on what do you think would be a good solution to this problem? In my opinion, having big central sources of libraries makes it easier for security scanning services to operate. Companies hosting libraries locally (e.g. with Sinopia, Nexus, Artifactory) have to proactively monitor them, but most commonly will let them frozen at a specific version and miss all security patches.

Kotlin is great, but I think the "it" syntax was derived from Groovy.