Viewing profile — ShaneWilton

I'd imagine it isn't, at least depending on how you define API compatibility, and whether you're only looking at the API interfaces. Imagine two versions of a library that implemen…

A lot of people are commenting that SemVer doesn't work, because it's still at the mercy of humans choosing good version numbers. Elm's package manager, elm-package, actually tries…

I got my start with computers hacking ROBLOX as a kid! We probably met each other. I went by Shanethe13 / Aeacus back then. If that rings a bell, you should hit me up :) I actually…

Over the past few years there's been a few vulnerabilities in Git that result from an attacker injecting hooks into a repo. I wonder whether it'd be possible / worthwhile to disabl…

Most of the suggestions in this post are great, but as always, especially when security is involved, you need to assess your business needs yourself. The suggestion to use Content-…

I agree about using JWTs for authentication being a poor idea :) Ueberauth definitely isn't a turnkey solution, but I'm not convinced that turnkey solutions for authentication are …

We use Elixir at Tinfoil Security for our API Security Scanner, and it uses GenStage quite a bit under the hood. It's a big simplification, but we basically have a producer that em…

I've been coding Elixir professionally for a few years, and working in security for longer, and I recommend against using Coherence for anything but toy apps. It's a fairly full-fe…

I've found that it really varies based on the language and the tooling it offers. I code Erlang and Elixir on a daily basis, and I've never used such a full-featured debugging envi…

The main point of dependency injection isn't that you're passing collaborators into the constructor though -- that's just an implementation detail. It's about achieving inversion o…

What's a less abstract name for dependency injection?

My current personal site is like this! www.shanewilton.com

It's not a tutorial, per se, but Game Programming Patterns is a free online book that explores common design patterns in game development: http://gameprogrammingpatterns.com/ As a …

While I agree with you, it's important to note that the defining trait of Lisp isn't that it's a functional language. It can be functional, just as it can be object oriented or pro…

Lisp teaches you that there's always a better tool for the job than something that's already in your toolkit. More than any other language I've worked with, Lisp makes it incredibl…

DailyDrip has a really great, free episode on using Absinthe to make GraphQL servers: https://www.dailydrip.com/topics/elixirsips/drips/graphql-wi... In general, DailyDrip has some…

It's absolutely okay to be different. In fact, everybody is different, and that's one of the big problems with trying to slot people into one of two buckets.

The team seriously deserves it. For what it's worth, I think my above comment is my highest upvoted comment of all time. There's a lot of people out there who want Keybase to succe…

Everything you just said makes perfect sense. That being said, I think Keybase is one of the most important companies around right now. I would gladly pay $10/month, even if litera…

Only in the case of naive port knocking. You can always generate the knocking sequence with something like TOTP to avoid replay attacks, while also detecting attempts at replaying …

The benefit of port knocking is that it essentially gives you a channel to transmit a password over, without revealing the existence of the system that's being authenticated for. A…

Security through obscurity is a very misunderstood concept. It should never be used at the expense of proper security (i.e. rolling your own crypto), and you should always act unde…

In my experience, it's more important to know that something isn't a monoid / semilattice / The CRDTs linked by the parent are a great example. If you're working on an eventually c…