Coinbase Engineering

AWS might be partly to blame, for not warning them, actively or passively, in my opinion. It might just be infrastructure as a service, but it seems that major cloud providers like AWS act as an IaaS provider when convenient, and a PaaS when convenient. They censor content all the time. I don't think it would be too much to ask to send an email when a big security change is made (the emails and audit log GitHub provides for its users are great). Plus their interfaces (UI and command line) are clunky. They should have a non-clunky dashboard of some sort where people can get a broad level overview of their security choices. I'm not talking legal blame for the past mistake, just that at some point in the near future their IAM interface should be fixed. For one thing it should be easy to give permissions to view the permissions without giving keys to the kingdom. For another thing, there's a mental overhead to working with multiple AWS accounts [1]. I get the impression that Google Cloud Platform is ahead right now (while lots of other Google properties are not, heh). Edit: the spyware company is absolutely to blame, but the complexity of AWS permissions including permission to view the permissions seems like a footgun to me. However, leaving open the admin site is something I wouldn't expect AWS to help with. https://engineering.coinbase.com/you-need-more-than-one-aws-account-aw…

There is an older post [1] describing how they do this, curious how much it changed since then. [1] https://engineering.coinbase.com/how-coinbase-builds-secure-infrastruc…

Build a financial exchange with Ruby on Rails, MongoDB, and Redis. What could go wrong? https://engineering.coinbase.com/november-29th-december-1st-post-morte…

This is (imo) the most correct response to this query. The idea behind the CT lists is that browsers will flip into a "if it's no publicly identifiable, it's not valid" mode. The Coinbase Engineering blog actually just put out an article on this very topic today - https://engineering.coinbase.com/moving-to-expect-ct-d0d26a07046d.

Most of the answers will be found here https://engineering.coinbase.com/how-coinbase-builds-secure-infrastruc…

Do you mean this one? https://engineering.coinbase.com/may-22-24-downtime-post-mortem-2031b4…

Coinbase | San Francisco, New York, London UK | Full-time | https://www.coinbase.com/careers Coinbase is a platform that facilitates the easy use of digital currency for consumers and merchants. This includes buying and selling of digital currency, secure storage in the cloud, and a suite of merchant tools. Moving and transacting financial assets safely is core to executing on our vision and building our brand of trust. We’re hiring for a range of positions and teams: * Senior backend/frontend/full stack engineers * iOS and Android mobile engineers * Interns * Engineering Managers Coinbase started as Rails app and is powered by many open source projects. We’re happy to contribute back to the community via the Coinbase Open Source Fund: https://engineering.coinbase.com/introducing-coinbase-open-source-fund… Please check our careers page for more details on the teams, requirements and apply for what excites you: https://www.coinbase.com/careers