Ntagg's comments

On: GitHub Report Card

[Ntagg]

I'm a Technical Product Manager at GitHub. I just took a look at this (pretty cool, maybe we should have deeper user metrics...). I saw a couple of comments about the 'write access' so I just figured I'd chime in and point out that it's a required scope to get all of the private contrib info out of the API. I definitely encourage people to be mindful of what access they grant, but for what it's worth I did it :)

[koolba → Ntagg]

> I definitely encourage people to be mindful of what access they grant, but for what it's worth I did it :)

So you gave write access to what presumably are private company repos so that you could view a pretty report card about your commit activity?

That doesn't speak very well (to me) of the security practices espoused by your employer.

[Ntagg → koolba]

Ah, good question! No, I did not request access to the GitHub private org.

[eriknstr → Ntagg]

6 months down the line: GitHub discovers a security breach, tracks it down to an advanced persistent threat that involved the attackers getting their conditionally malicious app front paged on HN which led to GH staff being baited into allowing said app write access on GH proprietary repos. Just kidding :p

[Ntagg → eriknstr]

Heh. Yeah, I responded to clarify that I did not grant access to that Org.

[rickyc091 → Ntagg]

While you're here and we're talking about granting private access to third party organizations... I've actually brought this up on several support request. I have several organizations authorized under my account which were active before the third party access was disabled by default.

The problem is I can't simply tell the company to disable third party access since it would revoke all the SSH keys across the board. Imagine the nightmare, support requests and coordination that would take to things back to normal. The other nuclear option is if I leave the organization before granting access to third party apps. It's been very frustrating for me as I'm hesitant to authorize third party apps since I can't pick and choose organization access on an individual level.

[throwanem → Ntagg]

> it's a required scope to get all of the private contrib info out of the API

Is there a technical reason why that's so, or is it just an artifact of the way GitHub's OAuth scheme is set up? I can't think offhand of a reason why it should be the former, but my experience with GitHub private repos is somewhat seldom, so it's quite probable it is necessary for a reason of which I'm unaware.

[tomschlick → throwanem]

The new Integrations api they announced at their conference should allow way more granular control. Still in beta though AFAIK.

https://developer.github.com/early-access/integrations/

[gjtorikian → tomschlick]

You are totally correct.

[wildpeaks → throwanem]

I wonder too, especially considering it's possible to have collaborators with read-only access to private repos.

[tbarbugli → Ntagg]

Why should I be mindful when someone from Github (the company where I host lot of code) does not?

[Ntagg → tbarbugli]

I replied to a couple other people, but to be clear, I didn't grant access to the GitHub Org. I only granted access to my own private repos (personal, non-work projects). I actually don't even have the ability to grant any permissions on the GitHub org :)

On: Pre-branded domain names for startups

[Ntagg]

Good tip. I really like bustaname.com Their second tab is like wordoid, but they have other tools too.

On: Help My newsletters are flagged as spam.

[Ntagg]

Do you have reverse dns records set up?

On: Learn Python The Hard Way 2nd Edition Released

[Ntagg]

Zed, are you going to be writing any other books for Python, like Python 3 or more advanced topics? Maybe "Advanced Python the Hard Way?"

[zedshaw → Ntagg]

Nope, I'm not writing any more Python books, instead I'm writing a book on C.

[Troll_Whisperer → zedshaw]

If you're open to suggestions, I and I'm sure lots of others would love to see one for objective C.

[codebsd → zedshaw]

Cool...when's that coming out?

On: Learn Python The Hard Way 2nd Edition Released

[Ntagg]

LPTHW starts to get more complicated around exercise 30.

On: Learn Python The Hard Way 2nd Edition Released

[Ntagg]

The course is on sale at AppSumo: http://www.appsumo.com/learn-python-promo/?act=dealtwt (referral code comes from the original source -- does not belong to me)

The course includes video lectures and a Q&A feature. I have not taken the course, but I really liked the first edition book.

On: Learn Python The Hard Way 2nd Edition Released

[Ntagg]

I can't tell either. You can review the new edition in HTML for free here: http://learnpythonthehardway.org/book/

On: Google Displaying Ad Click Count [Image]

[Ntagg]

It's a pretty interesting idea, I haven't seen this before.

On: Ask HN: What startups have you bought things from?

[Ntagg]

Adgrok, monthly subscription, and they've been great (my only affiliation is as a customer).

On: Google rolls out Social Search globally

[Ntagg]

I'm sure they've realized the real benefit here is that people will search Google, rather than typing in a domain, which leads to incremental traffic/searches/ad impressions.