deckard1

65 ms·

451.
by deckard1 5y ago
if the exploit is in your web app, then you're already too late. Security is about layering. Which is why postgres/mysql have users and permissions. One thing I typically do is prevent DELETE statements from the web app db user. Y
452.
by deckard1 5y ago
for what it's worth, YouTube still uses 11 character base64 strings for their video ids, which are assumed to be 64-bit ints. They also allow unlisted videos, which people usually take to mean "semi-private". It's an int
453.
by deckard1 5y ago
This is true of anything you find on github as well. Open source works on the idea that "given enough eyeballs, all bugs are shallow." The thing people forget is the "enough eyeballs" part. As if people are sitting aroun
454.
by deckard1 5y ago
> do due to real or perceived tax complications? You can go back to Adam Smith complaining about this in The Wealth of Nations. The tax burdens and complexity have only increased since then. The trouble today is that the tax/legal w
455.
by deckard1 5y ago
bignum as the default integer is quite common in lots of languages[1]. Notably, Lisp, Scheme, Erlang, Python. Scheme is a bit interesting in that they have a "numeric tower", which contains rationals and even complex numbers (impl
456.
by deckard1 5y ago
Every time someone pops up with one of those "Google destroyed my business and won't respond" type problems I'm always reminded of the movie Brazil. Just read the automated messages Google sends out sometime and the call
457.
by deckard1 5y ago
Minority Report came out in 2002. I remember people were talking about the targeted advertising going on in the movie. Two years later Facebook came out along with their pitch deck[1]. Now that movie seems quaint. Developers and entrepreneu
458.
by deckard1 5y ago
Whenever I read about LSP I'm reminded of Jonathan Blow's talk Preventing the Collapse of Civilization where he talks about LSP and how it turns your single app into a fragile distributed system[1]. The sheer complexity of going f
459.
by deckard1 5y ago
If you're doing a lot of modifications to a filesystem or a database, one pattern I've used and liked in the past is to have your code simply dump out the commands to run. Usually to stdout and you save it as a script. That way
460.
by deckard1 5y ago
This is really just a problem for spammers going out and either buying mailing lists that haven't been validated or scraping the web for email addresses. In the case of the spammer, they would probably care a lot more about their bounc
461.
by deckard1 5y ago
yeah, and that's a hill I'm willing to die on. Imagine the average non-technical person talking to some customer service agent on the phone and having to figure out if her email is JANEWATSON@gmail.com, JaneWatson@gmail.com, janew
462.
by deckard1 5y ago
Fun fact: Python and QBasic both came out in 1991. Though QuickBASIC is a few years older. > should the missing characters be tabs or spaces then? I'm not sure what QBasic does. But it's irrelevant since they control the format
463.
by deckard1 5y ago
as I said > Of course, this is not universal and only works with monospace fonts in certain languages. But even then, monospace didn't go away. Most developers are working with code in monospace right now.
464.
by deckard1 5y ago
Regarding the vertical cursor movement, back in the day there was an alternative behavior. You can see this in QuickBASIC/QBasic[1]. Here, Microsoft treated the entire screen as a grid. I always thought that was a great UI. It hides th
465.
by deckard1 5y ago
you go to Picasso with a piece of blank ordinary paper. The paper says "Guernica" on it. You get his signature. There is a notary with you and it is notarized. That's an NFT. You now have a signed piece of paper that refers t
466.
by deckard1 5y ago
I'm not holding my breath. The Linux Standard Base is 20 years old now. That was supposed to get us there. If Canonical and Red Hat cared, they'd probably go through the Linux Foundation instead of creating competitors to AppImage
467.
by deckard1 5y ago
It means going from: Frontend > React > [state management library of choice] to Frontend > Data Layer > View Layer (React) This is MVC, no? That's basically the diagram for MVC on the Wikipedia page.
468.
by deckard1 5y ago
This was a major plot point of the Godfather. Don Corleone wants to stay out of drugs to keep their reputation with police and politicians.
469.
by deckard1 5y ago
I mean. Yes and no. Someone doing some CRUD apps at some car insurance firm just to put dinner on the table is completely fine. But then you have Theranos and WeWork and all of that late '90s dot-com crap. Most of those companies had n
470.
by deckard1 5y ago
Based on what they show so far[1], I'm not really convinced tasks are the solution. The UI they present seems really clunky for 2021. > He means we need something richer, that we should be collecting information by “task” or another
471.
by deckard1 5y ago
What's been interesting to me is that during tech interviews, we eagerly have applicants roll their own sorting, or searching, or caching. But you never have questions about crypto or auth. Why one and not the other? Are both not cri
472.
by deckard1 5y ago
Matt Levine already pointed out the environmental hypocrisy of Tesla. To which I quoted 15 days ago... https://news.ycombinator.com/item?id=26973193 > -2 points by deckard1 15 days ago nice.
473.
by deckard1 5y ago
> suddenly disbelieved in the dollar you can disbelieve in the dollar. But you can't disbelieve in the Secret Service/US military showing up and kicking your ass
474.
by deckard1 5y ago
Yep. All big projects started as small projects. The hard part is justifying the time spent on a project. You often start a project and feel like it's not the best use of your time. That you may be the only one to use the project or fi
475.
by deckard1 5y ago
Web 2.0 enabling web apps was always a myth. There have been web "apps" since the 1990s with CGI. XMLHttpRequest merely allowed for the moving of some of that logic to the client side. In that respect, we've been working arou
476.
by deckard1 5y ago
Canvas still sucks for rendering fonts. Getting accurate font metrics is still hacky[1] and more advanced methods are still experimental[2]. Though I'm sure with Google Docs moving to canvas, some of this will be expedited. But it&#x27
477.
by deckard1 5y ago
The only time I've ever seen real-time Google Docs collaboration has been during meetings which should have been an email. Total waste of everyone's time. Not to mention the horrible UX of people constantly moving their cursor aro
478.
by deckard1 5y ago
irony really is dead. The creator of git still uses the Linux Kernel Mailing List. Though I can certainly think of a dozen other ways to communicate that aren't GitHub or Slack.
479.
by deckard1 5y ago
it's insane Github reports PR stats. I always knew this would happen. But never so publicly. You just assume that your management is looking at it constantly and basing their decisions on it. Because why wouldn't they. Their entir
480.
by deckard1 5y ago
I'm surprised this article is referring to it as "Corporate Memphis", when Memphis was already commercialized heavily in the 1980s. Every mall in America looked like that. What we have today I would think would be more like n

More ›