dperfect

26 ms·

181.
by dperfect 10y ago
Implicit grants are more dangerous for two reasons: (1) the process wherein the token is sent to the client can have serious security implications (especially for web apps) and (2) if your app communicates with any app-specific back end, th
182.
by dperfect 10y ago
Unfortunately, I've come across these kinds of issues first-hand in a number of existing projects. It usually comes down to the fact that a surprising number of back end implementations trust data from the client without verification.
183.
by dperfect 10y ago
Yeah - that works. I was more thinking of something in the main list view (possibly a closeup thumbnail or two of some notable visual details) to make those details more apparent when scrolling through many themes, but the click-to-zoom&#x2
184.
by dperfect 10y ago
I agree - this is better than most sites for browsing themes. However, I still find it hard to get a feel for a theme's style when a giant cover image makes up 90% of a screenshot for a theme. I understand that most modern themes are i
185.
by dperfect 10y ago
It's a bit overkill (that's what we do as engineers though, right?) - I have a Raspberry Pi attached to the back of each TV that receives input from a small Bluetooth keyboard/trackpad/remote and passes the input (over U
186.
by dperfect 10y ago
Kind of a late response, but here are the basics of my setup (maybe I'll publish some specifics in a gist at some point): - Hardware (which is dated now): Asus Z87 Pro with i7 4770, 16 GB Memory, 4x AMD Radeon 6450 cards (< $20&#x2F
187.
by dperfect 10y ago
I use a configuration like this (with Proxmox) to send content to the various TVs in my house (HDMI over Cat 5e). 4 cheap GPUs in the machine allow for up to 4 VMs running OS X (my preferred OS for media) to simultaneously play HD content,
188.
by dperfect 10y ago
I think you (and a few others here) are making the mistake of equating digital art with a need for high-end graphics cards . 99% of what most digital artists consider to be "digital art" does not require state-of-the-art GPUs.
189.
by dperfect 10y ago
On the pricing page: "545 domains available, yes sir." What does that mean? TLDs? Looks very nice in presentation/style. I'm not seeing what value the service provides over using a registrar directly. I've never had
190.
by dperfect 10y ago
It is quite impressive, but I'll honestly have a hard time getting excited about self-driving cars until I see a demo of driving at night in a snow storm (heck, even heavy rain would be nice to see) around road construction, poor signa
191.
by dperfect 10y ago
The problem really isn't a function of the number of tools and frameworks in existence, but rather in the distribution of popularity among them. Each ecosystem around a set of technologies essentially has its own "Herfindahl index
192.
by dperfect 10y ago
That's a fair point. Managing headphone battery life has been pretty easy for me, but of course not everyone is the same. Over-/around-/on-ear headphones tend to have pretty good batteries (the bigger size usually lends itsel
193.
by dperfect 10y ago
You're right - I was mistaken (and will update my comment); the iPhone doesn't support aptX. Admittedly, I use the headphones more often with my MBP, but I haven't noticed any quality degradation when using my phone (as long
194.
by dperfect 10y ago
Bluetooth audio is often criticized for inferior quality, but the truth is, many of the people I talk to just have experience with cheap (or older) Bluetooth audio devices - often with inferior hardware and poor audio codecs. I've ow
195.
by dperfect 10y ago
If that's true, then either the Library of Congress didn't get the memo (they very clearly specify that it's in the public domain), or this is somehow a case where "public domain" means something different from the
196.
by dperfect 10y ago
> ...did not release them into the public domain This is incorrect. According to the Library of Congress: "Ms. Highsmith has stipulated that her photographs are in the public domain." [1] [1] http://www.loc.gov/
197.
by dperfect 10y ago
The issue isn't really with Getty charging for those images. If they're in the public domain, then (as I understand it) the photographer has relinquished her copyright on the images. It's perfectly legal for other people to m
198.
by dperfect 10y ago
I actually agree with most of these - at least for early-stage startups. Using off-the-shelf tools has nothing to do with barriers to entry; if you're reinventing the wheel for things that aren't at the core of what differentiates
199.
by dperfect 10y ago
Of course it's a photo. All photography involves varying degrees of processing and subjectivity with respect to the information that is presented or discarded. Stacking may be somewhat less intuitive than a single frame, but conceptual
200.
by dperfect 10y ago
I understand the reluctance to add extra dependencies (especially environment-specific ones), but in the case of a typical Ruby app, it amounts to the 'aws-sdk' gem and 1 or 2 lines in an initializer. For my own purposes, I weighe
201.
by dperfect 10y ago
> ECS doesn't have a way to pass configuration to services I believe this is the recommended way: ECS container instances automatically get assigned an IAM role[1], with credentials accessible via instance metadata (169.254.169.254)
202.
by dperfect 10y ago
Are there any legal uses for this (in developed countries) - at least for someone who isn't a major telco?
203.
by dperfect 10y ago
Paw is really nice. I love that you can string together multiple requests with "dynamic values" (connecting the output from one request to the inputs of another, with transformations/functions/whatever). I use the comman
204.
by dperfect 10y ago
Perhaps it would be more accurate to say "humans have an innate means of determining confidence in a particular hypothesis based on perceived evidence". From an objective standpoint, evidence is either black or white. But for ou
205.
by dperfect 10y ago
From what I understand, the source often contains other files/scripts that are invoked by the Dockerfile, so that would be one example of potentially missing visibility.
206.
by dperfect 10y ago
Ah, that makes sense - thanks. Looks like many (most?) of the most popular images on Docker Hub are as you say - manually-pushed builds. A part of me wishes that more of them were automated, just to have more visibility into what exactly go
207.
by dperfect 10y ago
Why is the latest official GitLab CE docker image 7 months old[1]? Is that no longer a recommended install method? [1] https://hub.docker.com/r/gitlab/gitlab-ce/builds/ EDIT: Maybe I'm looking in th
208.
by dperfect 10y ago
humans.txt: everyone: don't poke around /admin don't look in /cgi-bin don't put javascript into the form fields don't make your username look like valid SQL users: don't try to access IDs
209.
by dperfect 11y ago
> ... and the payment processor sends a verification token to the vendor I would just add one more critical step: the vendor actually verifies the verification token rather than just checking that it exists (since the token is often pa
210.
by dperfect 11y ago
Looks like this is possible now on the Pi Zero (with some kernel tweaks): https://learn.adafruit.com/turning-your-raspberry-pi-zero-in...

More ›