22 March 2022

45 links · Tuesday

Updated Okta Statement on LAPSUS$

The Okta service has not been breached and remains fully operational. There are no corrective actions that need to be taken by our customers.  In Jan...

Painting - The Tolkien Estate

Tolkien was an accomplished amateur artist who painted for pleasure and relaxation. He excelled at landscapes and often drew inspiration from his own stories. He illustrated many scenes from The Silmarillion, The Hobbit and The Lord of the Rings, sometimes dra…

Cloudflare’s investigation of the January 2022 Okta compromise

Today at 03:30 UTC we learnt of a compromise of Okta. We use Okta internally for employee identity as part of our authentication stack. We have investigated this compromise carefully and do not believe we have been compromised as a result

Get updates on the health of your origin where you need them

We are thrilled to announce Health Checks availability within Cloudlare’s centralized Notification tab, available to all Pro, Business, and Enterprise customers. Now, you can get critical alerts on the health of your origin without checking your inbox!

Lanai, the mystery CPU architecture in LLVM

Disclaimer: I have had access to some confidential information about some of the matter discussed in this page. However, everything written here is derived form publicly available sources, and references to these sources are also provided.

Microservices: Why Are We Doing This?

I’ve written something like this before on my old (defunct) blog before, but new thoughts and realizations required that I revisit it. The topic? Microservices. The trend to build every single application as a series of tiny web services that talk to each othe…

Hooks Considered Harmful

React hooks changed radically how we build frontend applications allowing engineers to separate stateful logic from rendering. However, under a seemingly simple API there are some aspects of React hooks that are the source of bugs and performance issues. In th…

Password Purgatory

Password Purgatory is an intentionally infuriating API to request inane and ultimately unachievable password criteria intended to deliberately frustrate the user. Regardless of the password used, it will always be rejected hence subjecting the user to "purgato…

Error handling across different languages

I’ve tried Go in the past, and the least I could say is that I was not enthusiastic about it. Chief among my griefs was how the language handled errors, or more precisely, what mechanism it provided developers with to manage them. In this post, I’d like to des…

Building Your Own Nodemon

Hot reloading source code after changes is an essential DX feature. This is a solved issue in frontend development, with tools like webpack and Vite, but not so straightforward when it comes to Node.js.

SendilKumarN

Zig is a general-purpose language that will eventually replace C.

Non-dotcom domains hurt startups

What do "zillow", "trulia", "figma", "mercari", "strava", "zapier", and "spotify" have in common? Twenty minutes ago a VC emailed me: Hey Darren - wanted to ask you if you'd heard of {company}.ai? We're looking at their round. I spent a few minutes scratchin…

How To Criticize Coworkers

I originally wrote this as a doc, and did a talk w/ slides in Fall 2020 at Convoy. This is very focused on how to work in a software engineering team (surprise! that’s most of what I know about!) but I’ve had friends say they’ve shown this to their partners,..…

Hacks can be Good Code Too

Writing code is, like everything in life, all about making tradeoffs. Code can be quick to write, but at the same time unreadable; it can be fast, but hard to maintain; and it can be flexible, but overly complex. Each of these factors are worth considering whe…

Penny Wise and Cloud Foolish

The two iron rules of cloud pricing introduced by AWS are: Prices never go up1. We will absolutely soak you on data transfer charges. Last week Google Cloud published a post explaining how they we

Plain Text Sports

Instant live sports scores, play-by-play, and box scores