Viewing profile — michaelw

Similar to LinkedIn's "verified" process, Porkbun uses a 3rd party: veriff.com. https://www.veriff.com/privacy-notice . It appears that Veriff's data retention is set by their cust…

From Hyrum's Law to AI generated unit tests to automatically validate implicit dependency contracts.

Oh this brings back some fun memories. I worked with QNX for the ICON computer at Cemcorp and ESP Educational Software Products. The OS was so clean but it lacked a lot of basic to…

Please see my other reply about network costs. Bandwidth is a real cost that does not currently show up on the balance sheet because of Fastly's generous donations. That said, I wo…

If the costs were all bandwidth related I would agree. Most open source package managers benefit from Fastly's generous donation of credits. Even if one ignores the single-provider…

Original joint statement on the OpenSSF blog: https://openssf.org/blog/2025/09/23/open-infrastructure-is-n...

Package managers are the app stores of software development. They are essential to the developer workflow and are key points of leverage with regard to supply chain security. They …

Host your own dependencies folks! There are three major types of risk in software supply chain: - Correctness. Does the source have flaws (or backdoors) that allow it to be exploit…

Here's a simple way to think about fuzzing. If you're not fuzzing your interface to find vulnerabilities, someone else is.

I didn't see anything about the many benefits that are not typically considered income by the IRS. Most notably, health insurance represents a significant extra cost that makes tha…

This is simply not true. In fact, working at Google will expose you to all kinds of interesting ideas and problems. Many of those problems will just sit there because Google can't …

Let's count all the reasons not to leave: 1) If you don't have an amazing idea now, leaving won't make it easier. If anything it will be worse since you won't be constantly exposed…

You can do some pretty cool stuff when you're an MVNO. No need for custom dialers (which wouldn't be much fun on iOS anyways). The system uses inbound calls, calling history and co…

A white label uber like app for use by municipal taxi authorities. There's no need to throw the baby (taxi regulation) out with the bath water (getting a taxi is usually inconvenie…

The author of this article is http://en.wikipedia.org/wiki/Bob_Kohn "Bob Kohn is the founder, Chairman and CEO of RoyaltyShare, Inc., an outsourced royalty processing solution for …

A good move by Fluke. The Fluke product retails for 10x the price but it's still a nice gesture.

http://en.wikipedia.org/wiki/Full_disclosure_(mailing_list) Full disclosure is a lightly moderated security mailing list generally used for discussion about information security an…

Take a look at flexbox. http://css-tricks.com/snippets/css/a-guide-to-flexbox/

While I agree with what SICP says, the function in this case isn't really a function. It's not something a caller will ever invoke explicitly. It exists to provide a closure that c…

This has less to do with Angular and more to do with Javascript's general inability to express a useful DSL for anything. I think your ad hominem and somewhat hyperbolic complaint …

There are two things I know to be true about humans. 1- Humans think they are good at risk assessment 2- Humans are very bad at risk assessment In particular, humans suck at dealin…