9dev

17 ms·

271.
by 9dev 3mo ago
The gall of one of the best-compensated people on the planet acting like they had no place else to go. Well, Mister Ivory Tower, I've got news for you: Having a conscience doesn't come for free. You'll be fine with a low
272.
by 9dev 3mo ago
Can't we even write a short text like this without LLMs anymore, not even when it's really important, when it's about humans against the inhumane ?
273.
by 9dev 3mo ago
https://xkcd.com/927/
274.
by 9dev 3mo ago
Only for complex requests, and even then - a naive implementation of a web application that executes actions on GET requests might do the same for a HEAD request too.
275.
by 9dev 3mo ago
> Who said anything about authentication? That's the thing. If you're logged in to good.com (with a session cookie), then go to evil.com and it has an AJAX call to good.com, it'll carry your cookie. Thus - authentication.
276.
by 9dev 3mo ago
You can do whatever you want with your browser client. You just cannot create a website that will make the browser clients of other people send authenticated requests from JavaScript to my site if I don’t want that.
277.
by 9dev 3mo ago
But it isn't the 90s anymore. Billions of people are using the internet, doing everything from voting to shopping to managing their stock portfolio. There are valid reasons why we have security protocols. And aside from that - it&#x2
278.
by 9dev 3mo ago
Even if that was the case - which it isn't - the aggregator data isn't keyed by the user in question. That is highly illegal pretty much everywhere and would get you in a lot of trouble. You can't "just" find out wh
279.
by 9dev 3mo ago
It's astounding how willingly people give up their agency. Dystopic sci-fi novels turn out to be bogus, because nobody will rebel against the machines if it prints funny progress indicator words to the terminal
280.
by 9dev 3mo ago
> […] the browser prevents itself from making the call. That's not strictly correct, by the way. The request is made, but the JavaScript code on Domain A is not allowed to read the response. This matters when a request is destruct
281.
by 9dev 3mo ago
> If you want to do anything interesting […] you have to run your own browser This is usually a sign you don't really understand what you're doing.
282.
by 9dev 3mo ago
> Browsers enforce it, but it can be turned off and nobody expects it to be implemented by a simple REST client application. No, you're missing the point. Normal people using normal browsers with default settings have CORS enabled.
283.
by 9dev 3mo ago
I'm pretty sure Pandora's box has already been opened. The youth spending hours on TikTok every day is not going to go back to early days of Facebook on their own.
284.
by 9dev 3mo ago
OT, but man, this is a beautifully designed website. The progress indicator on the left is particularly clever.
285.
by 9dev 3mo ago
I'm all in favour of the EU finally emancipating itself from American tech companies, but trying to recreate Social Media, just in a European way, is the worst possible way to go. We need less Social Media, not an inferior clone of T
286.
by 9dev 3mo ago
well, and I dislike that people feel the need to desperately label themselves with some affliction. At some point you're just pretty close to the center of the bell curve.
287.
by 9dev 3mo ago
Sure, if you keep the eyes in the back of your head peeled, you’ll be fine
288.
by 9dev 3mo ago
why do you consider yourself an introvert if you enjoy chatting with everyone and everything?
289.
by 9dev 3mo ago
I cycle every day, and sound is definitely important; you need to plan ahead when you hear an ambulance approaching, for example. Plus, your brain processes things you see much better if there's a sound it can correlate the movement
290.
by 9dev 3mo ago
Noise cancellation headphones that will block out loud things or ambulances approaching you, sitting exposed on a motor strapped to two wheels at a high speed? Yes. That is different from driving in a Lexus.
291.
by 9dev 3mo ago
While you're at it, bug them a bit to finally add support for MCP servers in Copilot. I'm on an Odyssey to find a way for our customers to use our MCP within their Copilot environment…
292.
by 9dev 3mo ago
Aside from that, MCPs also allow connecting an external platform without a runtime environment. Every time this topic comes up, engineers act like Claude Code was the only application for AI agents, while there's tons of use cases in o
293.
by 9dev 3mo ago
The main point of consideration here probably was how to avoid conflicts with URLs of existing sites, not exactly people who aren't able to serve an endpoint with a dot within its path...
294.
by 9dev 3mo ago
After some consideration, I also applied this convention to every site I build - including content negotiation: Clients can either send an Accept header with their preference, or append an explicit extension (.md|.markdown for Markdown, .js
295.
by 9dev 3mo ago
and why don't we just follow decades of conventions and add a --verbose/-v flag to display all the gobbledegook if you really want to, but hide it by default? As far as I remember, the guidance has always been "only print som
296.
by 9dev 3mo ago
Yes, that’s pretty much literally what’s happening with a lot of industrial plants or pig farms, for example. Note that I didn’t endorse this stance, but it’s very much the calculation made in many cases.
297.
by 9dev 3mo ago
A tiny, tiny fraction of sites and apps offer Sign in with Apple. Every single service with user accounts under the sun allows signing up with a Hide My Email address. That random online shop you order something from once? The IT forum that
298.
by 9dev 3mo ago
No, that's beside the point. The vast majority of users do not care about this at all, while those that do care never see it due to their blockers. From the point of someone carelessly offering a convenience feature with tracking cap
299.
by 9dev 3mo ago
Did the RFC editor get a makeover recently? It looks familiar, but also kinda… polished. Neat.
300.
by 9dev 3mo ago
That was always opt-in from the sites, and many never bothered - me included, because I refuse to pay Apple $99 per year for the privilege to offer easier authentication to their users.

More ›