Refresh token rotation isn’t bookkeeping.
When an attacker uses a token that’s already been rotated, there’s no benign explanation. Burn the family. Attacker’s out.
Full writeup, Access Tokens and Refresh Tokens: A Production Engineer’s Guide https://t.co/OfUb9vF08y
This 2 hour Stanford lecture on AI careers will teach you more about winning in the AI race than every piece of AI content you have scrolled past this year.
Bookmark this & give it 2 hours, no matter what. It'll be the most productive thing you could do this weekend.
The hard part isn’t the services — it’s knowing when to reach for each one. That’s what separates a list-memorizer from someone who can actually think through a system.
200+ AWS services. Maybe 12 actually matter.
Lambda, S3, DynamoDB, RDS/Aurora, SQS, SNS, VPC, API Gateway, CloudFront, IAM, ElastiCache, CloudWatch.
Master these and you can design most systems an interviewer will throw at you. The rest is context-dependent niche stuff.
To call yourself a “full-stack” developer in 2024, you must be able to:
- Build frontends
- Build backends
- Provision cloud infrastructure
- Handle UX in Figma
- Maintain efficient CI/CD pipelines
- Create 3D art in Blender
- Manage projects with Scrum
- Attend daily standup meetings without leaving the zone
- Make YouTube videos
- Train transformer models from scratch
- Code live on Twitch for 14 hours straight
- Run a side hustle with at least 10K MRR
- Tweet about cold plunges and fasting
- Beat the stock market with algotrading
- Deploy shit with Kubernetes
- Achieve the Ballmer Peak daily
- Invoke syscalls on Linux
- Optimize for ARM-based CPU architectures
- Publish research papers on quantum algorithms
- Maintain mental health while doing all of the above
Did I miss any?
It’s only when the day gets over that I realise what beautiful things I could have done with it.
The happiness I didn’t experience, the pain I didn’t endure but with just a fleeting hope that tomorrow I’ll be different.