Security Notice on CCS / CVE-2014-0224
On June 5 another vulnerability in OpenSSL, ChangeCipherSpec (CCS) Injection Vulnerability, was announced. Released as CVE-2014-0224, the advisory warns that nearly all versions of OpenSSL are vulnerable to man-in-the-middle (MITM) attacks. After learning about the CVE-2014-0224 vulnerability, the Wealthfront team immediately deployed an updated OpenSSL library on all customer-facing servers. Further Resources for ChangeCipherSpec Help… Read more
My First Weeks at Wealthfront
I am rounding out my first couple weeks as a new employee at Wealthfront and at this point have full confidence that I chose the right opportunity for my first full time position after graduation. Aside from product, overall engineering mindset and culture were my top priorities and Wealthfront has exceeded my expectations on both… Read more
Marketside chats #5: Market making
This article will focus on the role of a market maker (MM) in the securities (financial instruments) markets. Let us start by talking about some other well-known markets. Role of intermediaries Some markets have no intermediaries: open-air farmers’ markets involve fruit & vegetable sellers selling directly to the buyers. Some markets have intermediaries, but those… Read more
Automating JavaScript Code Quality Checks
At Wealthfront, we’re big advocates for automation. In general, automation saves time and ensures consistency. One of the things we want to ensure is the quality of our JavaScript code. This is particularly important for JavaScript, given its weirdness. While this task can’t be fully automated, there’s some low hanging fruit available by automating linting… Read more
Security Notice on Heartbleed / CVE-2014-0160
The Internet community learned on April 7 about the OpenSSL vulnerability CVE-2014-0160, known colloquially as Heartbleed. Many security professionals remember similar vulnerabilities in SSH, BIND, and Sendmail that pried open large chunks of the Internet Infrastructure. Heartbleed is a similar type of vulnerability, as detailed on the Heartbleed website. We join financial institutions across the… Read more
Tracking Down a Crash in iOS
One of the iOS black arts is hunting down the cause of a crash report. At the best of times they’re vague and indicative of the final point of failure; rarely do they ever identify the actual root cause in any enlightening way. So let’s take a look at a stack trace from one of… Read more