Published in DailyJS·Jan 19, 2018Getting started with Hapi 17Hapi 17 was recently released, and brings an exciting change — in an effort to drive adoption of async/await, the entire codebase replaced callbacks with the newer language feature. This makes for some changes to how you configure your application. …Java Script5 min read
Nov 14, 2016Which Auth?We like to shorten long words. It saves us a little time talking, or a little time typing, and in meetings we can sound like we’re a real big shot because we use the shortened form. However, there are times when this predilection for brevity can harm us and the…Application Security3 min read
Aug 17, 2016Introducing hasdepDependency management is a thankless task, and one that can easily get out of control in a modern JavaScript project. …Java Script2 min read
Mar 14, 2016UX for the EngineersFirstly, this was a tricky one to title. To clear up any confusion, and perhaps save you some time, this is not about helping engineers understand User Experience (UX). This piece is about spending a little time on your developer-facing software to make it friendly to the end-user: the engineer. …Java Script4 min read
Feb 25, 2016Broken Window Theory and Git ReposI recently contributed to a repository that had a well established CHANGELOG, Migration Guide and README. The circumstances of the contribution arose from an urgent need for a fix that was impacting multiple consumers, so I was in a rush and had a tight deadline, but I took the extra few moments to update all three documents because they existed and were so well maintained, I wasn’t going to be the one who cut corners and ruined it.Web Development1 min read
Nov 13, 2015Barebones Application Security — Denial of ServiceSo far we’ve tackled Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF),SQL Injection (SQLi) and Spammers. If you missed any, start with the introduction to get caught up. Lastly, we’ll look at an operational issue, Denial of Service (DoS), a variant of which is Distributed Denial of Service (DDos). What? An attempt…Security4 min read
Nov 9, 2015Barebones Application Security — SpammersSo far we’ve tackled Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF) and SQL Injection (SQLi). If you missed any, start with the introduction to get caught up. Next, we’ll look at the threat of unsolicited mail. What? Those nasty people that send you emails suggesting you need online dating sites, prescription…Application Security4 min read
Oct 27, 2015Valuable lessons I’ve learned as a software engineerI made a request on Twitter earlier today, offering to answer questions from new or junior engineers coming in to the industry. My reasoning was that over the years I’ve had the good fortune to have had many great engineers and managers to learn from, and I want to be…Programming6 min read
Oct 26, 2015What advice would I give my younger self?I made a request on Twitter earlier today, offering to answer questions from new or junior engineers coming in to the industry. My reasoning was that over the years I’ve had the good fortune to have had many great engineers and managers to learn from, and I want to be…Life3 min read
Oct 26, 2015Barebones Application Security — SQL Injection (SQLi)We’re roughly halfway through this series on basic security steps for Startups to take. After introducing the series, we covered Cross Site Scripting (XSS) and then Cross Site Request Forgery (CSRF). SQLi — SQL Injection What? SQL injection vulnerabilities allow an attacker to modify a SQL query in your app to perform an unintended and…Security4 min read
