Mischiefblog
I make apps for other people

n-Commandments of Identity Security

Posted by Chris Jones
On May 3rd, 2012 at 09:01

Permalink | Trackback | Links In |

Comments Off
Posted in Tech
  1. Thou shalt encrypt all external communications with thy users
  2. Thou shalt encrypt some internal communications on behalf of they users
  3. Thou shalt keep thy passwords and thy email addresses in distinct and separate stores, as if they were credit card numbers
  4. Thou shalt require encrypted communication with client keys to retrieve passwords and email addresses
  5. Thou shalt never accept an unhashed or plaintext password and thy client will never send one
  6. Thou shalt treat users as salted hashes and never have immediate identification of any user or user action in thy systems
  7. Thy password and username systems shall be accessible only by API or service call and shall be implemented as separate, distinct, and secured networks, achieving defense in depth
  8. Email campaigns shall be built on salted hashes and only the emailer shall have access to user names and email addresses
  9. Customer service systems shall be able to construct salted hashes from user information but shall not keep copies of user names, email addresses, or passwords
  10. Thou shalt disable all default user ids, passwords, keys, and conveniences for thy databases, management systems, and third party tools
  11. Thou shalt never need to send an email to thy customers informing them that their private information has been accessed

In defense of Pair Programming

Posted by Chris Jones
On March 18th, 2012 at 08:42

Permalink | Trackback | Links In |

Comments Off
Posted in Tech, Work

A TechCrunch opinion piece posted yesterday, “Pair Programming Considered Extremely Beneficial,” was very complimentary about Pair Programming, a practice in which two developers work together to build software, one driving (typing) and the other navigating (describing what needs to be done). The author even included an amusing anecdote about Guy Steele pairing with Richard Stallman and how intense that experience was.

Since starting work at Overstock in 2010, I’ve had the opportunity to pair on a lot of user stories. Depending on the team lead pairing was either more or less the norm (less on my current team) but the company does have an inviolable rule when pairing must take place: when you’re working on financially impacting code. I’d extend that to say that you should pair on anything that impacts your core business and could cause the company to lose or have to restate revenue.
(more…)

Avoid my house tomorrow night, children,…

Posted by Chris Jones
On October 31st, 2011 at 02:03

Permalink | Trackback | Links In |

Comments Off
Posted in General

Avoid my house tomorrow night, children, for I will not be handing out chocolate. Enjoy your organic fruit snacks!

Moo hoo ha ha!

Hartford St, Salt Lake City, Utah

Home-made banana bread! I underestimated…

Posted by Chris Jones
On October 31st, 2011 at 00:53

Permalink | Trackback | Links In |

Comments Off
Posted in General

Home-made banana bread! I underestimated how much the raw dough would expand but it's still super yummy.

Hartford St, Salt Lake City, Utah

LMAX developed a 6 million TPS retail processor…

Posted by Chris Jones
On October 30th, 2011 at 18:48

Permalink | Trackback | Links In |

Comments Off
Posted in General

LMAX developed a 6 million TPS retail processor that runs on a single node. How?
* Using the correct data structures for the task at hand (don't use an ArrayList if you should be using a LinkedList)
* Developing data structures that take advantage of the JVM (i.e., a HashMap backed by primitive long type keys)
* Keeping the working state in memory (recovery via replay)
* Abandoning existing transactional software paradigms (actors, relational databases and transactions, queues, etc.)
* Concurrent unmarshallers and marshallers using a circular list of ring to provide natural ordering and locking (Disruptors, or a multicast graph of queues for parallel consumption)
* Designing business processes to output intermediate results when external resources are required (additional lookups, verifications, etc.)
* Performance testing and tuning with the real machine's performance in mind, not assumed performance

The LMAX Architecture

The LMAX Architecture. LMAX is a new retail financial trading platform. As a result it has to process many trades with low latency. The system is built on the JVM platform and centers on a Business Lo…

Non-blocking Node.js Here’s another one…

Posted by Chris Jones
On October 30th, 2011 at 17:50

Permalink | Trackback | Links In |

Comments Off
Posted in General

Non-blocking Node.js

Here's another one for the development toolbox: a collection of best practices and notes for non-blocking node.js development.

Node.js research Introduction Hi, I'm Ryan Wilcox. I've been

Hi, I'm Ryan Wilcox. I've been programming for about 15 years on various things, and been around the block a few times. I've done classic Mac OS applications, cross-platform applications i…

Why we think there’s a multiverse http://…

Posted by Chris Jones
On October 30th, 2011 at 14:17

Permalink | Trackback | Links In |

Comments Off
Posted in Google Plus Posts

Why we think there's a multiverse

http://scienceblogs.com/startswithabang/2011/10/why_we_think_theres_a_multiver.php

I found the short description of the conversion of high vacuum energy into particles and radiation to be enlightening. I'd be interested in seeing this expanded to cover current theories with cosmic strings and universes with different cosmological constants and laws of physics. Also, given that the universe was superimposed onto other possible quantum states, does that imply that there are essentially an infinite number of similar universes within a multiverse for each universe's inflationary periods?

Why we think there's a Multiverse, not just our Universe : Starts With A Bang

"Every true, eternal problem is an equally true, eternal fault; every answer an atonement, every realisation an improvement." -Otto Weininger The best measurements of the distant Universe — out beyon…

379 S Main St, Salt Lake City, Utah

379 S Main St, Salt Lake City, Utah

Everything I Ever Learned About JVM Performance…

Posted by Chris Jones
On October 29th, 2011 at 15:33

Permalink | Trackback | Links In |

Comments Off
Posted in Google Plus Posts

Everything I Ever Learned About JVM Performance Tuning @ Twitter

This is worth keeping in the back of the toolbox. It's not very applicable to the work I'm doing today, but for anyone working with persistent, heavily trafficked JVM services this could be very valuable. I wish I'd know about slab allocation when I was working on Amazon Plogs.

Everything I Ever Learned About JVM Performance Tuning @Twitter

Summarizes about a year worth of experiences and case studies in performance tuning the JVM for various services at Twitter.

I heard a funny story from Jonathan Johnson…

Posted by Chris Jones
On October 29th, 2011 at 01:32

Permalink | Trackback | Links In |

Comments Off
Posted in Google Plus Posts

I heard a funny story from Jonathan Johnson and Patrick Byrne at today's company stand-up. Patrick was in San Francisco being deposed by attorneys for Goldman Sachs and was asked about his public statements and writings about corruption in the U.S. financial system. The lawyers finally got to Patrick's letter to the editors in response to the Wall Street Journal editorial "Do Nudists Run Wall Street?" in which Patrick wrote, "I also think that if this nation ever grasps how its savings have been looted through this mechanism, a few million Americans are going to show up at the corner of Wall and Broad with pitchforks and nooses." ( http://online.wsj.com/article/SB114558723216732121.html )

As if on cue, while waiting for Patrick's response, a bullhorn sounded from 24 floors below the posh law office: the San Francisco wing of the Occupy Wall Street movement was on the march. Jonathan told the lawyers, "Your jury pool has arrived."

Here's the Naked Truth About Overstock.com

Superman is such a Mary Sue.

Posted by Chris Jones
On October 28th, 2011 at 03:28

Permalink | Trackback | Links In |

Comments Off
Posted in Google Plus Posts

Superman is such a Mary Sue.

Hartford St, Salt Lake City, Utah