Issue #503

5 April 2024


Issue #503
pointer.io


Friday 5nd April’s issue is presented by Doppler

Unf*ck Your Secrets With Doppler


Doppler is a developer-first security platform that empowers teams to manage, orchestrate, & govern secrets at scale.


Our cloud-native platform automates rotations, enforces granular access controls, and utilizes industry-leading encryption to secure your data.


Join 41,000+ companies who trust Doppler.

15 Principles For Managing Up

— Wes Kao


tl;dr: Wes gives phrases of how to verbalize each: (1) Embrace managing up. (2) Focus on the punchline. (3) Show your thought process. (4) Flag potential issues. (5) Bring solutions, not complaints. (6) Use information hierarchy. (7) Keep your manager in the loop. (8) Are you being micromanaged, or do you need to communicate better? (9) Over-communication might be the right amount. (10) Proactively assert what to do. (11) Don’t only ask questions. Share your point of view too. (12) Anticipate questions. (13) Know when to get out. (14) Be explicit about what you need. (15) Expect to manage up forever. 


Leadership Management

Fear Makes You A Worse Programmer

— Julia Evans


tl;dr: (1) Fear can make you overly conservative as a programmer, afraid to make important changes. This leads to worse software in the long run. (2) Better tools and processes reduce fear to make changes e.g. version control, automated testing. (3) How an organization reacts to mistakes is critical i.e. blameless postmortems. (4) Some fears spread to others if not addressed. (5) Fear creates "local maximums" - it prevents you from making big improvements and keeps you stuck in a suboptimal state.


CareerAdvice

Improving Code Reviews With Storytelling

— Chandler Mayo, Nic Manoogian


tl;dr: At Doppler, we've enhanced our code reviews by weaving storytelling into git history, making reviews insightful and efficient. This approach, focusing on clear commit narratives, not only speeds up reviews but also fosters a culture of clarity, learning, and collaboration within our team.


Promoted by Doppler

Management CodeReview

Leadership And Willpower

— Mike Fisher


tl;dr: Mikes discusses the concept of a Level 5 leader: “They defy conventional expectations. They are a paradox in that they are humble yet determined and modest yet fearless. This potent blend fuels their ability to inspire unwavering dedication in their teams towards a shared vision. Their quiet confidence and strong convictions propel them to elevate organizations from good to great.” He discusses how we can build our willpower by regulrly doing difficult things.


Leadership Management


"Start with the end in mind."


— Stephen Covey


Using GitHub Copilot In Your IDE: Tips, Tricks, And Best Practices


tl;dr: 15 tips include: (1) Open your relevant files. (2) Provide a top-level comment. (3) Set includes and references. (4) Meaningful names matter. (5) Provide specific and well-scoped function comments. (6) Provide sample code. (7) Inline chat with GitHub Copilot. (8) Remove irrelevant requests. (9) Navigate through your conversation. (10) Use the @workspace agent.  


Productivity AI

Understanding DynamoDB Secondary Indexes

— Alex DeBrie


tl;dr: Indexes are a crucial part of proper data modeling for all databases, and DynamoDB is no exception. Alex DeBrie, author of The DynamoDB Book, explains the problems secondary indexes solve, how to use them effectively, and how to choose between secondary indexes and alternatives like Rockset.


Promoted by Rockset

Database DynamoDB

Prefer Narrow Assertions In Unit Tests

— Kai Kent


tl;dr: “Broad assertions should only be used for unit tests that care about all of the implicitly tested behaviors, which should be a small minority of unit tests. Prefer to have at most one such test that checks for full equality of a complex object for the common case, and use narrow assertions for all other cases.” Examples are provided in this article. 


Tests

How LedgerStore Supports Trillions Of Indexes At Uber

— Kaushik Devarajaiah


tl;dr: “LedgerStore is an immutable storage solution at Uber that provides verifiable data completeness and correctness guarantees to ensure data integrity for these transactions... This blog covers the significance of LedgerStore indexing and its architecture, which powers trillions of indexes, with a petabyte-scale index storage footprint.” 


Database Architecture

What We Know About The xz Utils Backdoor That Almost Infected The World

— Dan Goodin


tl;dr: “A lone Microsoft developer rocked the world when he revealed a backdoor had been intentionally planted in xz Utils, an open source data compression utility available on almost all installations of Linux and other Unix-like operating systems. The person or people behind this project likely spent years on it. They were likely very close to seeing the backdoor update merged into Debian and Red Hat, the two biggest distributions of Linux, when an eagle-eyed software developer spotted something fishy.”


Security News

Most Popular From Last Issue

Notable Links


Codel: Agent that performs tasks using terminal, browser, and editor.


HeyForm: OS form builder.


Jpegli: New JPEG coding library.


OpenUI: Describe UI and see it rendered live.


Xzbot: Notes, honeypot, and demo for the xz backdoor.


Click the below and shoot me an email!


1 = Didn't enjoy it all // 5 = Really enjoyed it


12345