JoshuaEN

6 ms·

1.
by JoshuaEN 1y ago
I don't think this is realistic in the default npm ecosystem where projects can have 1000s of dependencies (with the majority being transitive with fuzzy versions). Though pnpm does have a setting to help with this too: https:/&#
2.
by JoshuaEN 1y ago
There was an NPM RFC for this feature (though not as focused on supply chain attacks) in 2022, but the main response mirrored some of the other comments in here. "waiting a length of time doesn’t increase security, and if such a practi
3.
by JoshuaEN 2y ago
Rtings.com measures PWM frequency[1] as part of their reviews. 1. https://www.rtings.com/monitor/tests/motion/image-flicker
4.
by JoshuaEN 2y ago
The linked source this article was using states: "You might ask, maybe Hertz was charging Lee for having to top the Model 3's battery upon its return? According to the final receipt, the customer gave the Model 3 back to Hertz wit
5.
by JoshuaEN 3y ago
This was a month ago. Appears it was v0.13.0. Just for fun, since I still had it installed and haven't gotten around to cleaning up the remote data, I updated to latest (v0.14.1) and tried the restore tasks again. Both the single file
6.
by JoshuaEN 3y ago
This is my experience as well. Low quality junk is often not present, and if it does show up, it's two mouse clicks to never see that domain again. Also the ability to promote high quality domains helps even more with this (though i ha
7.
by JoshuaEN 3y ago
This has been my experience too with Kopia. I tried to restore a ~200 GB file (stored remotely on a Hetzner Storage Box), and it failed (or at least did not finish after being left for ~20 hours; there was also no progress indicator or stat
8.
by JoshuaEN 3y ago
You can get by without owning a car in Philadelphia too. There are pain points, but it is possible.
9.
by JoshuaEN 3y ago
What's the point in being "hungry"? To fill the pockets of some soulless corporation and hope they'll pass down some scraps while making record profits? I have worked at the same place for 5 years; worked hard, continuou
10.
by JoshuaEN 3y ago
Because the initial "hi" forces a context switch which the recipient (after reading and replying) has to either: Sit idle while the sender writes their actual question, or try to context switch back for a tiny amount of time. 10:3
11.
by JoshuaEN 3y ago
JP Morgan is not a local lawn care service, they have the funds to not make mistakes like this. Larger companies should be held to a higher standard because their actions have a wider impact.
12.
by JoshuaEN 3y ago
Most of my job as a software developer is communicating with other people (stakeholders, peers, management), including written (pr comments, emails to various people, Teams chats, design documents) and vocal. Even writing code is ultimately
13.
by JoshuaEN 3y ago
To me, reading HN or some other site (and replying), playing online games with strangers (and no voice chat or really the need to communicate at all), etc... are largely just ways to pass time and relax. I never really thought of it as bein
14.
by JoshuaEN 3y ago
"Not being rewarded with money seems to be the common theme here, but financial incentives are tricky to get correct" Giving pay raises which exceed inflation for someone who meets expectations (in anonymous peer reviews) is trick
15.
by JoshuaEN 3y ago
I'm not sure it is a dark pattern, but at first glance (to me) it reads a bit like the "Allow all" and "Reject all" buttons just toggle the options, and then one needs to press "Confirm my choices", partic
16.
by JoshuaEN 3y ago
I have definitely gotten infinite one-click captchas from Turnstile (because of being on a VPN I guess), I have also gotten non-infinite but multiple one-click captchas. If they are not going to let me past, I wish they would at least come
17.
by JoshuaEN 3y ago
It seems like this is more favorable to those being laid off, effectively being paid to look for a new job.
18.
by JoshuaEN 4y ago
Not passwords, but the hackers have some unencrypted data because LastPass did not encrypt all vault data client-side: "The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which i
19.
by JoshuaEN 4y ago
If you just want comments (and trailing commas), there is also this: https://www.npmjs.com/package/jsonc-parser
20.
by JoshuaEN 8y ago
> If you don't store PII, you don't have to do any work. Done. If you need to have PII for your webapp to function, you barely have to do any work besides giving the that care people their rights A server 'processing'
21.
by JoshuaEN 8y ago
Icons take up less space on the screen, which is useful if you are using a smaller browser window (or a phone screen).
22.
by JoshuaEN 9y ago
Just to be clear, a credit freeze does not stop prescreened credit offers either [0]. [0] https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...
23.
by JoshuaEN 9y ago
It's worth noting, as far as I can tell, that product offering ("Lock & Alert") is not (legally) the same as a credit freeze. Which means they aren't legally bound not to release your credit report to whomever they w
24.
by JoshuaEN 9y ago
This vote seems like the best chance of maintaining NN at the national level. Congress ultimately directly serve at the pleasure of their constituents, unlike the FCC commissioners. Point being, the time leading up to this vote is probably