bpicolo

72 ms·

391.
by bpicolo 6y ago
I definitely don't understand the demand for soggy fries and burgers at 60% upcharge, but to each their own ;)
392.
by bpicolo 6y ago
Managing an enterprise doing it at scale requires a larger-than-small percentage of revenue. Catch 22. Also note that plenty of delivery workers have, historically, been paid under-the-table. Can't get away with that if you're ube
393.
by bpicolo 6y ago
I imagine mostly because deploying to the cloud is slow - it would be the new waiting for compiling. A fast-paced edit-compile-debug cycle is a huge development productivity benefit, and doing it via unit/integration tests and what hav
394.
by bpicolo 6y ago
Perfect context - thanks! That said, hopefully that doesn't start a new cat and mouse game for ad networks? hah
395.
by bpicolo 6y ago
> relies on third-party cookies for authentication A lot of websites depends on this via auth0, cloud identity, cognito... and the experience becomes subtly broken in a way that you need to be extremely technically savvy (a developer tha
396.
by bpicolo 6y ago
> Total Cookie Protection makes a limited exception for cross-site cookies when they are needed for non-tracking purposes, such as those used by popular third-party login providers How does this work out? Say I want to launch a new popul
397.
by bpicolo 6y ago
Or say 15,000 cards. Crypto operations in modern times are not subtle. Margins are razor thin, so it's all about scale and efficiency
398.
by bpicolo 6y ago
I think you are probably overestimating how enterprise does tech. Subcontracting, consultancies are the name of the game
399.
by bpicolo 6y ago
> so I’m not subsidizing Comma customers Is this a thing outside of a tiny subset of hackerspace?
400.
by bpicolo 6y ago
Yep, queries
401.
by bpicolo 6y ago
Huh, I worked on a site with a similar issue in ~2019. A massive flood of traffic for a single site from Indian mobile apps (~15kqps at peak iirc). I think it ended up being a sort of mobile-based botnet with a bizarre target, which luckily
402.
by bpicolo 6y ago
As the others said - XSS. Stored XSS can still be a vulnerability with secure cookies, but locally stored tokens are a dramatically easier thing to take advantage of as an attacker, as they can just exfiltrate the token and hit your APIs wi
403.
by bpicolo 6y ago
Glad you chose cookies for this versus localstorage JWT tokens. Kudos for that.
404.
by bpicolo 6y ago
They may want to add an option to have all the context in a single column, centered. This is hard to use on wide screens right now - it's kind of like watching a tennis match
405.
by bpicolo 6y ago
cpython startup time might account for a good fraction of that
406.
by bpicolo 6y ago
ToS terms can't permit you to break the law, in either case. Same as contracts.
407.
by bpicolo 6y ago
I do - it's a market with existing players that are extremely challenging (or impossible) to integrate with successfully. More players in the space could be a large benefit.
408.
by bpicolo 6y ago
Any plans to introduce APS services for Life insurance carriers, by chance?
409.
by bpicolo 6y ago
I'm under the impression that order books tend to be hard to scale horizontally, because they have tremendous atomicity requirement. Can anybody chime in whether these systems, today, tend to be on distributed infra versus e.g. mainfra
410.
by bpicolo 6y ago
What hard wood do they have other than the basic acacia pieces?
411.
by bpicolo 6y ago
> no other competitor has the ability to replicate Except Amazon, and Microsoft, and Nintendo, and Sony, and Vale, and Epic, and ... What am I missing? What's interesting about their purchaser data?
412.
by bpicolo 6y ago
To be fair, sometimes you need bad practice to make things possible to do. Plaid takes your bank username and password to scrape pages because it’s the only choice to make the tech. Flouting the rules is the basis for a lot of successful bu
413.
by bpicolo 6y ago
> Clients are initialised with Key & ID - We advocate for keys to not be hardcoded They're public facing (used by clients), so it doesn't really matter if they're hardcoded or not. I can rip them out of the dom/ap
414.
by bpicolo 6y ago
Kind of ironic when the party in question is trying to cancel one of the laws that allows providers to be neutral in the first place
415.
by bpicolo 6y ago
Giving frontend clients the keys to the castle to send text messages and make calls on your app's behalf seems like a bad time waiting to happen. How are you thinking about the security aspect? I see the word "Security focused&qu
416.
by bpicolo 6y ago
Thanks for the link - I've had trouble finding pretty much exactly this in the Go ecosystem after a few brief looks, and codegen is really the only sensible way to do openapi in go. I wouldn't be surprised to use this soon
417.
by bpicolo 6y ago
Defining them all on a single server struct means once you're past a handful you start having a hard-as-heck to organize folder of handlers (or a bunch of massive code files). How are folk managing Go endpoint as apps scale across numb
418.
by bpicolo 6y ago
Heroku has been the dream all along. I'm very spike on fast-compiling, statically typed monoliths for orgs of most sizes - especially for product-shaped companies versus infrastructure. Once you go distributed, so much becomes somuch h
419.
by bpicolo 6y ago
> Looks like having 20,000 idle clients connected to a server sits at only 380MB and Erlang is at 737MB. That's with Go, versus with anycable itself. Anycable-go looks like 798?
420.
by bpicolo 6y ago
> , also daylight savings time I've never once heard the former colloquially

More ›