acoard

27 ms·

211.
by acoard 6y ago
>I think we can kind of view obscurity in the same way. It's a way to signal to a predator that we're a hard target and that they should give up. This has it completely backwards. Security through obscurity's goal is not t
212.
by acoard 6y ago
Zuckerberg has always been obsessed with power. He was leading all-hands meetings by having the teams shout "Domination!"[0][1] He's always been obsessed with Roman Emperors too, particularly Augustus (though as a Romanophil
213.
by acoard 6y ago
Can you share a bit more about this? I'm interested in setting this up myself. A link the docker image or name I can google? To be clear, you store all your code on Gitlab's servers (i.e. not self-hosting git instance) but jus
214.
by acoard 6y ago
The first thing to do is answer what's your threat vector? What are you trying to protect against? And the second thing is answer and what are you willing to give up? The best way is, of course, to not use technology. But that's
215.
by acoard 6y ago
>Cunningham's Law states "the best way to get the right answer on the internet is not to ask a question; it's to post the wrong answer."[0] Also I'd like to point out that you incorrectly stated it was an &quot
216.
by acoard 6y ago
Just create a `vendor/` folder and an exclude rule to your linters. Or for Unity include your `Assets/Scripts` folder, whichever fits better. >Besides Git is ill-suited for vendoring. VCS is ill suited for vendoring, but is t
217.
by acoard 6y ago
Can you list some examples? The more the better. Much appreciated.
218.
by acoard 6y ago
That's the idea. Quakers will never take up arms. In both world wars they would actively help in peaceful ways (helping widows, sending care packages to POWs, etc), but their actions remain peaceful. >Early Quakers were among the
219.
by acoard 6y ago
>That's what "zero tolerance" means: no excuses, not even "someone tricked me." That doesn't necessarily follow, as it depends on exactly what they have zero tolerance for. They say they have zero tolerance
220.
by acoard 6y ago
Even better, you can run these in Docker as non-root. Security wise, while this wouldn't make your app itself more secure, it would insulate your host OS from getting infected. I just checked and they even have one-liner Docker c
221.
by acoard 7y ago
>But what’s the alternative? Local development with syncing back to a server? I'd say this is a perfectly fine solution for a lot of cases. Not all, of course, like your iPad one sounds a great fit for mosh (and I'm gonna try
222.
by acoard 7y ago
You're not wrong, but this is plaintext in its purest form. It's literally just plaintext wrapped in a <pre> tag. They don't use any CSS on the site, besides the very infrequent `style` tag. This is more common with t
223.
by acoard 7y ago
VS Code has incredibly good "remote" debugging setups. [0] You can install a VS Code "server" on e.g. your Linux developer machine, then connect to it via your VS Code "client" on your iPad. You get local inte
224.
by acoard 7y ago
>Every website could try 0-days exploits or drive-by downloads That's an unfair comparison. Any piece of software could try and 0day you. The point is that in a permission-based system, the permissions for browser extensions are in
225.
by acoard 7y ago
It's not unsurprising. Web development happens practically exclusively on desktop/laptops.
226.
by acoard 7y ago
>Once there's another option, Reddit is going to rather quickly become a ghost town. One can hope, but if Reddit really is taking their lessons from FB then they'll buy up the nascent competition and strangle the market.
227.
by acoard 7y ago
Can you provide some evidence or reading on this? I understand A/B typically measures _conversions_, but couldn't you have quantifiable proxies for usability? For example, things like form abandonment and time-to-complete a task.
228.
by acoard 7y ago
https://chrome.google.com/webstore/detail/old-reddit-redirec... Redirect extension to always get old.reddit.com. I've been using it for years without issue. It's one of the very few extensions I have t
229.
by acoard 7y ago
You can pass null, undefined, or remove the property. JSON Schema – a whole topic unto itself – gives you further control over locking down how this can be represented (e.g. field MUST be present but can be string matching this regex or nul
230.
by acoard 7y ago
What laptop is this? A Lenovo?
231.
by acoard 7y ago
>There's three options: All your options assume a perfectly rational world. The world we have now is not one of those 3 options, but it exists. Things are often internally contradictory.
232.
by acoard 8y ago
It's a false equivalency. Having high prices advertised transparently is not the same as what Unity has done.
233.
by acoard 8y ago
I've often heard this (or a similar?) distinction as "man-hours" vs "calendar time"
234.
by acoard 8y ago
>and I can validate the request based on the origin Are you talking about the HTTP referer? That's easily spoofable and can't be relied on server-side. The same-origin policy and all the CORS security is implemented in the bro
235.
by acoard 8y ago
>If PiHole is malicious, there is already an attacker on your network In contrast, UXSS provides an attacker on your network that already has access to everything inside your browser. That's banking, email, keylogging credit card nu
236.
by acoard 8y ago
Your post made me checkout now.sh which does look really cool, but it really is a poor example here. * It's a SaaS with monthly fees. * now itself doesn't support self-hosting (i.e. the `now` binary will always use the now.sh back
237.
by acoard 8y ago
Approx how many users?
238.
by acoard 8y ago
Not OP, but guessing it's things like having Python 2 instead of Python 3 installed out of the box. It took them forever to update to Git version > 2.0.0 too.
239.
by acoard 8y ago
The "circumvent" part is that Facebook's content isn't indexable by Google. For example, a website review on Yelp winds up on Google, but a review from Facebook won't show up. Insofar as they're creating conte
240.
by acoard 8y ago
With monopoly cases, it's all about market share. In the late 90s, Windows had 95%+ of the market[0]. I believe (but may be mistaken) that the legal threshold often used is 75%. Apple isn't there, but Windows certainly was. [0]

More ›