That's Not a CSRF Attack
We run a vulnerability reporting program through HackerOne. Many reports we receive through this program are extremely valuable and this program is an important part of keeping Phabricator secure.
Advanced Internet Usage (Experts ONLY!)
Here is an advanced internet usage tip for extreme internet experts.
Write, Review, Merge, Publish: Phabricator Review Workflow
Users coming to Phabricator from other software (like GitHub or Gerrit) are sometimes tripped up by the sequencing of Phabricator's default review workflow in Differential.
Updates to Workboards: Dragging, Cover Photos and Points
Workboards now have some new features:
Clarifying Projects as a General Purpose Tool
In Phabricator, "Projects" are designed as a general purpose organization tool. We've made a number of small product and UI changes recently to reinforce this. These changes are primarily focused at new users, who sometimes find the behavior of projects confusing.
Projects in Policy Controls: No Longer Total Garbage
Projects shown in policy controls are now smarter, and will learn and remember the projects you select most frequently.
Autocompleting Usernames and Project Hashtags
After 2016 Week 4, we've added an autocomplete feature to make it easier to type usernames and project hashtags in comments. It looks like this:
Request for Cat Facts
After D15026 lands, we could really use some more cat facts to improve the product. Feel free to send revisions if you discover new facts about cats.
Reading and Writing Paths in Owners
Owners has new owners.search and owners.edit endpoints in HEAD, which you can use to read and write paths. For example, you could use them to synchronize package definitions from an external source.
Stripe CTF3
I recently participated in Stripe's CTF3, a programming challenge. This is the first time I've participated in Stripe's CTF, but I really enjoyed it. I thought the problems were very interesting and the technical aspects of the challenge were well executed.
Encouraging Open Source Etiquette
As a potential new contributor to an open source project, it can be very frustrating to submit an issue or pull request on GitHub and never hear back from the maintainer. This article briefly discusses the problem and proposes a tool which might improve the state of the world by making it easier for contributors to estimate what level of response they'll get from a project before they begin work.
Lessons from the 2013 NFL playoffs for companies
Here at Phacility, we're sort of big NFL fans. Sort of, in that one founder has season tickets for the 49ers already, two founders have season tickets at the new 49ers stadium for the 2014-2044 seasons, and Evan (founder three of three) has been known to say "Go local sports team!" when appropriate.
What is the value of code review anyway?
For many people, the value of code review is rather unclear. Since the value is not clear code review is often not done, skipped, or forgotten entirely in favor of more obviously important work items.
This is a personal blog for me.