Ayesh

57 ms·

631.
by Ayesh 6y ago
PHP as a language had inherently insecure designs such as register_globals and RCE in unserialize(). When working on reviews, it's often as easy as grepping for "unserialize" and working your way from there for an easy bounty
632.
by Ayesh 6y ago
All my projects require PHP 7.4, and it's such a joy to write the modern almost-strict typed, namespaced, and code that is often inter-operable, tested with a nice testing framework, and managed with an excellent dependency manager. I
633.
by Ayesh 6y ago
Aw yes, the Ubuntu style.
634.
by Ayesh 6y ago
I'm starting to like slashes in branch names. They are so easy to visually grasp a list of branches. Do you recall any of the problems you had? I'm frequently using checkout/rebase/merge workflow and never had any proble
635.
by Ayesh 6y ago
SUGGESTING I see seeking freelancer:work ratio is about 1:5, and that says something in these difficult times. I have been a freelancer all my life (27M), and one thing I continue to improve is working on my own side projects. It is difficu
636.
by Ayesh 7y ago
But it's run governed by ICANN, so they might bend your way if you got the $$$, and millions of it.
637.
by Ayesh 7y ago
> They are just developer tools A CA is a CA. A developer tool would be you signing certificates with your own private CA. LetsEncrypt is often better as they support must-staple, CT timestamps in certificates themselves, and ECDSA leaf
638.
by Ayesh 7y ago
Shitpost: https://bugzilla.mozilla.org/show_bug.cgi?id=647959 Running a CA is not easy, and getting your root certificates included in trusted roots is even harder. For the technical aspects of it, you will need an HSM for
639.
by Ayesh 7y ago
Bitbucket offered free repos before Gitlab, but Gitlab did an amazing job making it affordable and as good as githubs offerings. It's always pleasantly surprisingly to go to Gitlab and see how much they continue to improve.
640.
by Ayesh 7y ago
I'm sure GitHub lands a lot more Enterprise customers compared to Gitlab, but for individual users who use organizations to have a separation in repos, and smaller teams, this price change is very convincing to move to GitHub even for
641.
by Ayesh 7y ago
Not for the technical aspects, but I'm fond of TransferWise an Signal. Even within Microsoft, their WSL, and new terminal are well-received in open source communities.
642.
by Ayesh 7y ago
They do, even at $4/mo/user plan.
643.
by Ayesh 7y ago
Coming from Travis CI and GitLab CI, GitHub Actions was very intuitive and I had it running in the very first take. The concept of actions is new, but it is brilliant compared to traditional approach of doing everything inside the CI jobs,
644.
by Ayesh 7y ago
I'm fairly well-versed in DNS, and aware of Handshake protocol as well, but I have absolutely no idea what DNS.live is about.
645.
by Ayesh 7y ago
If you reach 10K in payments, it means there's a good level of trust between two parties, at which point even the 5% charge is not necessary. Their messaging and time tracking tools are mediocre at best, and they certainly aren't
646.
by Ayesh 7y ago
I suppose being a European company, there are more regulations at play. Payoneer is US based. Skrill is UK based, and I don't think they have prepaid debit cards? Even if they do, nobody should use them. They were moneybookers once, an
647.
by Ayesh 7y ago
Yes, the 20% definitely raises eyebrows. Uber charges 20%< Booking.com 15%, and Airbnb 5+10%, just to put a comparison. I no longer use Upwork, and the "loss" is only one of the reasons. But it's probably the best way to f
648.
by Ayesh 7y ago
I'm genuinely looking forward to a day that we can do this. Digitally transfer money between each other. Right now, you are probably losing more money that Ttansferwise because it costs a considerable amount of money to convert them to
649.
by Ayesh 7y ago
A million dependencies sound horribly excessive, even by JS standards.
650.
by Ayesh 7y ago
This is cool, thanks for sharing. Parsing a PDF file is in that list that nobody wants to write themselves. Next to writing a YAML parser.
651.
by Ayesh 7y ago
I see. I always have this idea in my head, to start a service and get people to put my script on their web sites, and pull a grand scam one day by changing the script to do something malicious on those poor sites that didn't add SRI.
652.
by Ayesh 7y ago
Plausible was hovering less than 50 users on its own web site, and I wouldn't risk sending my visitors to this relatively new web service either. Analytics requires a lot of trust to not screw you up. It's a third party script tha
653.
by Ayesh 7y ago
Did you mean XSS?
654.
by Ayesh 7y ago
I'm working on https://php.watch . It's a blog/tracker type web site where I post about latest PHP news, and upcoming changes in an organized way. I started it 2 years ago, but it's only 3 months back since I
655.
by Ayesh 7y ago
That's the whole point of the video. He talks about APIs, how fragile they can be, some of his earlier work, and how he uses a script to update the video title.
656.
by Ayesh 7y ago
Gamification with locations can go a long way. Pre-Swamp 4sq, Pokemon Go, and even Google Maps Timeline is addicting. I try to de-Google myself a lot, but at the same time, I find myself perfecting my Google maps timeline so I know the plac
657.
by Ayesh 7y ago
Haha, thank you. This one is hilarious!
658.
by Ayesh 7y ago
hCaptcha is annoying! Even when I'm not logged into Google, I rarely get a captcha when I click "I'm not a robot". With the new captcha, I get promoted 100% of the time. I'm glad Google is out of the picture (althou
659.
by Ayesh 7y ago
How would this help? You have to pass captcha to access pages that CF is proxying. You cannot block hcaptcha and continue to access the sites.
660.
by Ayesh 7y ago
> But at virtually no additional cost. Bigger RSA keys are expensive to compute: $: openssl speed rsa sign verify sign/s verify/s rsa 512 bits 0.000075s 0.000006s 13249.7 179054.0 rsa 10

More ›