Blog

Scan your projects for crossenv and other malicious npm packages

Dominik Kundel, writing for the Twilio Blog: On August 1st, Oscar Bolmsten tweeted about how he found a malicious npm package called crossenv that scans for environment variables and POSTs them to a server. This is particularly dangerous considering that you might have secret credentials for different services stored in your environment variables. Apparently it’s also not limited to just crossenv, but a series of packages — all of them are names of popular modules with small typos such as missing hyphens. Check your project for malicious packages These packages have been taken down by npm, but since credential theft happens

August 15, 2017

Larry Ellison: “When people start telling you that you’re crazy…”

Larry Ellison: When people start telling you that you’re crazy, you just might be on to the most important innovation in your life. This quote is from an speech Larry did back in 2016, but even a year later, it’s still something share worthy.

August 9, 2017

FreshBooks’ Mike McDerment says “building your own competitor” is effective way to solve business problems

Amira Zubairi, writing for BetaKit: At the latest FinTechTO, Mike McDerment, CEO and co-founder of FreshBooks, discussed the challenges teams face when re-platforming within a software company. He also offered tips on how entrepreneurs can successfully execute a redesign. McDerment kicked off his presentation by giving an overview of how he co-founded FreshBooks, a cloud-based accounting platform that allows users to send invoices, track time, manage receipts, expenses, and accept credit cards. McDerment said after raising a $30 million funding round back in July 2014, he began to think about how the company would keep up with technological changes over

August 3, 2017

Introducing outgoing webhooks

Today we’re announcing outgoing webhooks – a long awaited feature that will notify your websites and apps whenever data changes occur. This opens up a new range of possible integrations Adding outgoing webhooks means you can get notified directly in slack or elsewhere when new records are added, when records are updated or deleted. To create an outgoing webhook, just click webhooks in the dropdown: Then edit the form: Hit Save and when you save a new record with our API, we will send notifications to your webhook instantly. We’ve got some options for how we send the data, you

July 31, 2017

Jason Fried on One Door at a Time

Entrepreneurs are told to go big or go home. Stop obsessing over scale, and perfect the basics instead. [..] But now, entrepreneurship seems like a sport. And the score depends on scale. How big can you get? How fast can you get big? How much power can you amass in the shortest possible time? We’ve prided ourselves on staying mostly small, it lets us focus on things that might fall through the cracks other wise. Source: https://m.signalvnoise.com/one-door-at-a-time-d73d4385eb16?source=linkShare-92d0691b20d7-1500736062

July 22, 2017

Build a “Serverless” Live Blog System with Flybase, Twilio and StdLib

Flybase and Twilio work great together, we’ve posted several posts before about using these two services in one place, but what about if you want to go serverless? StdLib.com is excellent for that. In their own words, StdLib is essentially a package manager for APIs that’s built upon new “serverless” architecture, meaning you never have to worry about managing servers or allocating resources for scale. All you have to do is write a function or two (or three), deploy, and you’re done, and this is perfect for quickly building services with Flybase. We’ve covered building a Live Blogging tool before,

July 21, 2017

Building the Best Relationships We Can

Alison Groves: Maslow had it wrong. To get it right, we have to move social needs to the bottom of his pyramid. -Matthew Lieberman (Professor of Social Cognitive Neuroscience at UCLA and author of the book Social) Babies would die without their caregivers at birth. Study after study show the pain and ill we go through when we are isolated from others like us. As humans, we are wired to connect to one another. However, instead of connecting, we seem to be heading the opposite direction. On the streets and in restaurants people are looking at their phones instead of

July 19, 2017

AngelList launches Intros for Canada to give startups access to angels

AngelList has launched Intros for Canada to give more startups access to seed-stage funding through the network. Intros will work like the first AngelList product launched in 2010, where companies could apply to be introduced to a curated list of angels. “The Canadian market feels like the Valley 15 years ago. It is on the cusp of creating world-beating companies in AI, blockchain, and other technology fields,” said Naval Rakivant, co-founder of AngelList. “Angel investing is one of the best ways for me to recycle knowledge and give back to the ecosystem.” Interested companies must submit an application by August

July 5, 2017

Enough

DHH: The underpinning tenet of chasing exponential growth is that anything less than “all of it” is never enough. If there’s more possible, more out there, then it’s your gawd damn duty to hunt it down and make it yours. Such a pursuit is undoubtedly exciting in its Napoleonic grandeur. Why stop at making a dent in the universe, if you can bend it whole? Glory awaits only those who stand atop all others. Or at least so goes the virtue of conquerors. Dominators. WINNERS! It’s what we’re being sold over and over again as The Way. The path to

July 4, 2017

How to fix errors in production with GitHub and Sentry

Sometimes bugs slip through even the most diligent of code reviews. Putting out fires can disrupt your flow, forcing you to comb through logs and user-submitted screenshots. In the meantime, your users are left with an enigmatic 500 page. To help your team get from error to fix as efficiently as possible, try Sentry — an open source project under the BSD license. Sentry alerts you to the problematic line of code, pinpoints the commit and author likely responsible, and lets you resolve the error by including fixes ISSUE_ID in your commit message. It starts with an overlooked edge case