Viewing profile — nick-garfield

Nick here, one of the developers behind Feather. When we set out to build an auth API, one of the first big challenges was just wrapping our heads around all the various acronyms a…

wow, just reading that term "line of business" makes me anxious. I used to work on a global payments platform that supported "multiple LOBs", and it was a nightmare of ifs and swit…

If you're in the "talking with customers" phase, you should also check out "The Mom Test" by Rob Fitzpatrick. http :// momtestbook .com (EDIT: I just noticed this is an http site..…

My friend and I got really frustrated with existing authentication providers like Auth0, so we decided to create API called Feather to make it easier to add authentication to our w…

Hmm that's a bit disappointing.. I feel like Ive and Cook could be wrong on this one. If desktop/mobile is an appropriate parallel, then it seems like they've decided to undercut t…

This was an amazing post! 100% spot on that the external distractors are easier to manage than the internal ones. A buzzing phone, tempting social media websites, and loud rooms al…

This is interesting.. I've never heard of the term "tacit knowledge" before, but it makes a lot of sense to me. It particularly reminds me of my experience being on-call at my last…

What do you mean by DNS-based PKI? That sounds interesting, but I can't quite visualize what that is.

Yeah this is really interesting. The "velocity" of upvotes/comments seems to be more important than the actual raw count.

I'm sure you're right that people occasionally leverage a friend network to upvote content to the front-page. I get the sense this happens a lot on Product Hunt. But I know for a f…

woah, this is crazy! The flamewar detector (# comments > upvotes) is pretty funny

Haha good point

As the title states.. Is the HN ranking algorithm based purely on a post/comment's upvotes and engagement, or is the author's karma points an input into the algorithm as well?

I've got to recommend refactoringui.com. They sell a (rather expensive) book on web/mobile app design that explains how to build your design system and use it to create great looki…

Definitely! And it depends on what key you're storing, but if you use AWS Secrets Manager, you can setup automatic key rotation to run periodically.

Am I understanding the article right: the endpoint would accept any email address and generate a valid JWT without verifying the caller owned the email address? If so, what extra v…

> No one should be using JWT What??

AFAIK Firebase doesn't actually offer any real authorization do they? It was some time ago I last built a project with them, but I remember having to create a custom "roles" attrib…