WingNews logo WingNews GitHub [2]

mikemaccana's comments

mikemaccana | 10 years ago | on: How to deploy your node app on Linux, 2016 edition

Totally agreed, there's certainly a place for tools that don't need DevOps skills, and many places - typically PaaS - that take care of this.

However many developers wish to have more control over their environment than what a PaaS provides, and a lot of the tools they'd use for that - Ansible, Docker, etc - require basic DevOps skills.

[replying from old account due to rate limit]

mikemaccana | 10 years ago | on: The Future of Node Is in Microsoft’s Fork

I'll be more direct at saying what the post can't say:

- Historically the V8 team simply did not care about node, and would introduce breaking changes that would come as a surprise to node core

- It's better now, and V8 folk are on one of the steering committees for node. Also Google Compute Engine team needs node to work so also brings in a real business case for the V8 team to care about node

- Chakra is also a pretty good contingency plan.

mikemaccana | 10 years ago | on: The Future of Node Is in Microsoft’s Fork

I was really slow on picking up Babel too. But I've been using Babel 5.x in production for six months without errors - main things were docs that referred to old versions of babel and babelify.

I needed to plug this in the package.json of my private modules:

    "browserify": {
        "transform": [
            "brfs",
            [
                "babelify",
                {
                    "presets": ["es2015"]
                }
            ]
        ]
    }

mikemaccana | 10 years ago | on: Install Win32 OpenSSH test release

> This "separate data from presentation" sounds like TCO-speak. Way too frequently referenced to be a genuine inspiration.

Huh? It's a very specific thing. When you run stuff on Powershell, you pipe it to 'select' or 'where' and pick fields, rather than running grep / sed / awk and inventing regexs to scrape stuff.

    ps | where {$_.StartTime -ge $1HourAgo}
Before accusing me of 'TCO speak' and being 'ungenuine' - for mentioning something that's a well known engineering concept, particularly in the Unix world (ever used TeX?), you could have done <1 minute of research.

mikemaccana | 10 years ago | on: Install Win32 OpenSSH test release

A half-bad Unix on top of Windows, with its own duplicate way of handling services, storage, users, permissions and everything else, is a pretty poor setup. Powershell (particularly the way it separates data from presentation) is one of the best shells on any OS. Being able to access it from Linux is a good thing.

mikemaccana | 10 years ago | on: What web developers should know about SSL

libtls is part of libressl: http://www.libressl.org/

> LibreSSL is composed of four parts:

> The openssl(1) utility, which provides tools for managing keys, certificates, etc. > libcrypto: a library of cryptography fundamentals > libssl: a TLS library, backwards-compatible with OpenSSL > libtls: a new TLS library, designed to make it easier to write foolproof applications

mikemaccana | 10 years ago | on: What web developers should know about SSL

EV is a standard for identity verification, rather than a product.

Our product is 40-100x faster validation for EV. If you think DV is fine for your app, that's awesome. But if you're thinking about getting an EV cert, we do in an average of 5 hours what others do in 7-10 days.

mikemaccana | 10 years ago | on: What web developers should know about SSL

A less common question we get, that a lot of web devs are interested in is 'How do I mitigate against MITM attacks'.

- As a browser, by using a default OS and watching the root CA store. You can control the key stores on most devices except iOS pretty easily: https://certsimple.com/blog/control-the-ssl-cas-your-browser...

- As a server, setting up key pinning (https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning) which throws up a browser warning if someone accesses your site with a new key.

page 1
more