K0nserv

59 ms·

631.
by K0nserv 10y ago
You can pass arguments so `goops app tests` only adds files in app and tests
632.
by K0nserv 10y ago
I think that's an unfair characterisation of git. Pretty much everything you can read online recommends against force pushing and it's definitely not part of any workflow recommended to beginners. Even with a force pushed branch w
633.
by K0nserv 10y ago
Interesting, I tend to recommend people who want to use a UI tool to first learn how to use git from the CLI because many times UI tools are leaky abstraction and sometimes they are flat out wrong and rename concepts. This sounds like it&#x
634.
by K0nserv 10y ago
Definitely, don't force push unless you know what you are doing and the implications of force pushing. On the other hand don't blindly listen to people who tell you that force pushing is bad and should always be avoided
635.
by K0nserv 10y ago
My number one git tip for day to day use rather than specific scenarios is setting up aliases for everything. Along with the ones provided by the git oh-my-zh plugin I have these[0]. Some examples + gco - git checkout + ga - git add + gc -
636.
by K0nserv 10y ago
I moved from Stockholm to Edinburgh about a year ago and I definitely use cash a lot more here. Sure contactless is more widespread, but a lot of places don't accept cards or have a minimum spend amount for card transactions. When I li
637.
by K0nserv 10y ago
John uses Deck[0] for Daring Fireball 0: http://decknetwork.net/
638.
by K0nserv 10y ago
The main value is escaping the constraints on plugins and gems you are able to use with Jekyll on GitHub pages. Don't remember of the top of my head but I believe it's pretty limited.
639.
by K0nserv 10y ago
I'm the author of "One Cent Blog" thanks for the mention glad it helped you. One interesting difference between the approach described in my blog post(or any other static method) is that you are not relying on a server or a d
640.
by K0nserv 10y ago
Don't rely on obscurity and obfuscation. Instead build your API in such a way that handing someone the complete documentation would have no negative impact. Assume the client is always compromised. My $0.02
641.
by K0nserv 10y ago
I had a quick look at the 1Password chrome extension source and it seems to me like they are using window.URL[0]. See this pastebin[1] for the function I believe is determining the url of the active tab and if it has a valid hostname. There
642.
by K0nserv 10y ago
It's true that not all companies pay bug bounties and you might very well be right that paying them, especially if they are much lower than other companies that operate bug bounties, might have a worse affect on public opinion then not
643.
by K0nserv 10y ago
I think it's a bit of bucket A and bit of bucket B. Still even if one accept the definition you put forth the argument that having such low bounties makes LastPass look bad/like they're not caring is still valid.
644.
by K0nserv 10y ago
An attacker could fool the extension to autofill a form on a domain they control with credentials from another domain and send the credentials to their server.
645.
by K0nserv 10y ago
I agree with the cohort theory, but to me it's not so much about the risk of someone selling an exploit on the black market, all though it's still a risk. To me it's more about how it reflects on a company where security is k
646.
by K0nserv 10y ago
The concern with the low payout is that it's supposed to be a way to compensate white hat hackers and dissuaded them from going to the black market with security problems like this. Given the business that LastPass is in wouldn't
647.
by K0nserv 10y ago
Not using `document.location.host` stood out to me too. I think the takeaway here is don't use regex unless you absolutely have to and don't use it to parse things that have rigorous standards describing them. Emails, phone number
648.
by K0nserv 10y ago
Agreed the CloudFlare analytics are good enough
649.
by K0nserv 10y ago
Wasn't aware of that one, glad to see new ones keep cropping up. Thanks for the kind words
650.
by K0nserv 10y ago
Thanks and you are absolutely right about the list links not feeling very clickable. I'll add some hover effect to make it more clear. Thanks for the feedback.
651.
by K0nserv 10y ago
Thanks, I've gotten rid of the CloudFlare email-obfuscation wasn't aware that was enabled. It's now 100% JS free which is nice. I actually recently got rid of GA because I didn't want to have to add JS to implement a coo
652.
by K0nserv 10y ago
I noticed this too, it's easy to fall into the trap of subtlety when designing. Subtle often ends up as low contrast which can definitely hurt accessibility. I think the first body color #555 was nice and it gets a good accessibility s
653.
by K0nserv 10y ago
Lovely! Definitely like the style here and the focus on content first. Like other people have said it's similar to Motherfucking Website[1], and a Better Motherfucking Website[2]. I'll need to start including this when I link to t
654.
by K0nserv 10y ago
See above about cost and labour required. If you stick with the github.io domain you still have free SSL termination.
655.
by K0nserv 10y ago
> ... and there is no possibility of ever having proper TLS, with or without CloudFlare. That alone disqualifies it as "best". It simply doesn't meet minimum requirements. I'd argue that using CloudFront for SSL termi
656.
by K0nserv 10y ago
I've had pretty bad experiences with cloudfront but might be interesting. How does the free SSL work?
657.
by K0nserv 10y ago
> You can't, at least not without using a different service that works exactly like CloudFlare (which would obviously defeat the point). You probably shouldn't be hosting your site on S3 to begin with (this isn't what it&#
658.
by K0nserv 10y ago
My follow up questions on this is. I run my website from S3 behind CloudFlare. How can I achieve free SSL without involving my own servers to terminate SSL and having to maintain and rotate certificates say using Let's Encrypt?
659.
by K0nserv 10y ago
Pretty surprising to see Alamofire above AFNetworking given that AFNetworking is the Objective-C variant and Alamofire is for Swift. That almost seems to indicate that there are more Swift apps in the top 200 then Objective-C apps. Of cours
660.
by K0nserv 10y ago
Cool, I love fractals and Mandlebrot. During Uni I too wrote a JS based generator[0]. It was pretty nice, but horribly slow. Prompted by the poor performance in JS I built a C++, OpenCL version[1]. Seeing the difference in performance was q

More ›