This explains a lot, but thing it doesn't cover is why the patch for Rails ends the session when a CSRF token is missing. I'm guessing this is just extra paranoia, but it opens an obvious attack to log people out of a…
Here's a copy on the original author's personal site that doesn't require a login: http://algeri-wong.com/yishan/engineering-management-tools-a... The whole series is worth a read:…
Now that iOS 4.2 is out Typekit has changed how we support for iOS devices. We've stopped supporting iOS3 and earlier, which means users that haven't upgraded yet won't get browser crashes. There's more details at…
The "new school" is not about operations doing it all themselves, or about a new "devops" position that does both dev and ops. It's about greater cooperation between the team that's developing the application ("dev")…
We're not aware of any issues in Safari 5 - could you drop an email to support@typekit.com with an example URL showing the problems so we can look into it?
Performance. Embedding 18 fonts via CSS would add a lot of weight and the browsers (particularly mobile safari) don't cope too well when you embed too many fonts at once. (I work at Typekit)
All the time. For example, we switched from one video transcoding backend to another recently. Having a single config flag used to chose which codepath a video went through meant we could launch it for staff only at…
[I work at flickr and gave the presentation linked to above] You don't need to test every permutation. Pretty much all of the flags in the codebase are independent of each other - someone might be working on changes to…
(I work at flickr) The problem is finding all the places that the language has changed and all the places you relied on the old behavior. The documented stuff was easy to find, it was the undocumented (or unintended?)…
This explains a lot, but thing it doesn't cover is why the patch for Rails ends the session when a CSRF token is missing. I'm guessing this is just extra paranoia, but it opens an obvious attack to log people out of a…
Here's a copy on the original author's personal site that doesn't require a login: http://algeri-wong.com/yishan/engineering-management-tools-a... The whole series is worth a read:…
Now that iOS 4.2 is out Typekit has changed how we support for iOS devices. We've stopped supporting iOS3 and earlier, which means users that haven't upgraded yet won't get browser crashes. There's more details at…
The "new school" is not about operations doing it all themselves, or about a new "devops" position that does both dev and ops. It's about greater cooperation between the team that's developing the application ("dev")…
We're not aware of any issues in Safari 5 - could you drop an email to support@typekit.com with an example URL showing the problems so we can look into it?
Performance. Embedding 18 fonts via CSS would add a lot of weight and the browsers (particularly mobile safari) don't cope too well when you embed too many fonts at once. (I work at Typekit)
All the time. For example, we switched from one video transcoding backend to another recently. Having a single config flag used to chose which codepath a video went through meant we could launch it for staff only at…
[I work at flickr and gave the presentation linked to above] You don't need to test every permutation. Pretty much all of the flags in the codebase are independent of each other - someone might be working on changes to…
(I work at flickr) The problem is finding all the places that the language has changed and all the places you relied on the old behavior. The documented stuff was easy to find, it was the undocumented (or unintended?)…