Category Archives: Kerika

Posts about Kerika, the company and its people

Designed for, and built by remote teams

Our development team in India is under a national lock-down due to Covid-19, and we had been worried about a loss of productivity.

After a week of lock-down we have been checking with each person, and it turns out there was no cause for worry, especially from those who had the foresight to grab an extra monitor before leaving their office.

In fact, we expect that our team will ask for work-from-home as a regular work model even after the virus is gone.

Kerika is designed for, and built by remote teams!

Try to help the Government, get slapped.

Kerika has been a sponsor of the Lean Transformation Conference every year, since the very first conference. In addition to contributing sponsor fees, our founder and CEO, Arun Kumar, has given a presentation each year, on different topics related to the conference.

At the last conference (in October 2019), Arun gave a talk on Virtual Teams: what’s different about a virtual team vs. a traditional collocated team, and how a virtual team can be very successful if it adopts the right processes and tools. A total of 117 people attended, and 55% of them rated the presentation as “Very Useful” or “Extremely Useful”.

Kerika also paid for a professional videographer to film the presentation so it could be made available online for others.

The topic of Virtual Teams is particularly important today because the Covid-19 virus has hit the state of Washington hardest (in the US), and everyone, including the government employees are scrambling to adjust to telework.

You might think that the video would be particularly helpful to the state right now, since it covered precisely those topics that the state (and much of the world) is grappling with today:

The video that was…

Imagine our surprise then to receive, out of the blue, this takedown notice:

The video that wasn’t…

So the video is gone. A small business tried to help the state of Washington, but won’t try again.

Guarding against XSS code injection

We had posted earlier about making sure that (malicious) users cannot inject code into Kerika, in any of the areas where user input is possible.

Here’s the complete list of user actions that we are checking for XSS injecton now:

  1. Board Name
  2. Board Description
  3. Template Name
  4. Template Description
  5. Tag Name
  6. Card Attachment Name
  7. Board Attachment Name
  8. Card Chat
  9. Board Chat
  10. Column Name
  11. Task Name/Detail
  12. Canvas Text
  13. Canvas Attachment Name
  14. Canvas Shape/Object Name
  15. Account Name
  16. Account Billing Information
  17. User’s Name