Viewing profile — itwasntandy

Thank you Nick. As a recurse alum (s14 batch 2) I loved reading this. I loved my time at recurse and learned lots. This highlight from the post really resonates: “ Real growth happ…

I wasn’t talking about food safety. The lice from the farmed fish devastate the wild salmon populations, so ecologically they are awful. That to me is a pretty clear reason to avoi…

Keep reading. For example: > A recent study in British Columbia links the spread of parasitic sea lice from river salmon farms to wild pink salmon in the same river

Sure. Our numbers are smaller, as our org is much smaller but I think they hold up. We have under 100 engineers at BuzzFeed, so for us we reduce time spent supporting applications …

I am part of the team that worked on this project. AMA

This is somewhat intentional I think to guide you toward buying Enterprise edition, which since 11G includes plan baselines ( see https://docs.oracle.com/cd/B28359_01/server.111/b2…

BuzzFeed | Principal SWE, Core Infra | London and New York | Onsite Full time | https://boards.greenhouse.io/buzzfeed/jobs/1895087?gh_jid=18... BuzzFeed | SWE, Core Infra | San Fra…

Indeed. And considering the hundreds of millions[1] of people who pass through london’s stations each year, that would means hundreds of thousands of false positives. [1] https://e…

While I agree with the aspiration, I don’t see how it’s possible to use facial recognition to flag “america’s Most wanted” or to look for missing children without mass surveillance…

Read “never let me go” by Kazuo Ishiguro, or actually even watch the movie that was made of it (same title) That illustrates fairly well why having an underclass who provides healt…

That is insane that that is the case here in the US. ( and I just checked as I could not believe it). In Europe it’s different - https://ec.europa.eu/agriculture/organic/eu-policy/…

My own experience ( North east US) has been somewhat different recently. Yes routes from Apple maps, may appear longer or more convoluted at first glance. However after using it ( …

That's configurable - https://docs.aws.amazon.com/elasticloadbalancing/latest/appl... - default `HealthyThresholdCount` is 5 and `HealthCheckIntervalSeconds` is 30 seconds. We adju…

I miss Boundary. Their traffic flow monitoring with per second granularity was utterly amazing. It had almost no overhead, it gave the equivalent of netflow data for instances in E…

Indeed. I saw a brilliant presentation in 2012 by Michael Mitzenmacher from Harvard on verifiable computing in the cloud. It was based on this paper: https://arxiv.org/pdf/1202.135…

Maybe - we've not tried it, but I just asked Justin who architected sso, and he suggested that maybe https://github.com/buzzfeed/sso/blob/master/internal/proxy/o... could be used. …

Golang is pretty beloved at BuzzFeed. It’s one of our two standard languages - the other being Python - and whilst the vast majority of our services are Python, Golang is being use…

It’s not. We acknowledge that in our blog post, and our approach was definitely influenced by the BeyondCorp philosophy. However google IAP requires that your infrastructure is all…

We did talk in the blog article about engaging with Security Innovation too.

Right now we have a dependency on Google as an OAuth2 provider, as that's what we use internally at BuzzFeed. However we've designed sso to allow us to easily add other providers. …

thank you - We know from our own experience using other open source projects that having documentation, and guides to get started really helps. We know there is more to do there to…

Hey, there were a few reasons behind this. - ease of migration was a big one, we had 100+ instances of bitly's oauth2_proxy, and were able to seamlessly migrate them to this, witho…

That is understood, and is always why we engaged with some of the top researchers who contribute to our bug bounty program, from the start with this project. For example offering i…