ehutch79

31 ms·

421.
by ehutch79 4y ago
...I'm not sure that's something to be proud of.
422.
by ehutch79 4y ago
CSS doesn't need tooling though? It just works in the browser.
423.
by ehutch79 4y ago
Oh, the design system aspect of tailwind is GREAT. The idea of utility classes is super helpful. I was actually pretty into tailwind at first for these reasons. There were some issues, most of which were fixed with the JIT. That said, most
424.
by ehutch79 4y ago
Yeah, it's straight from the blog post for the 3.2 version
425.
by ehutch79 4y ago
But tailwind fans keep saying that you don't need to learn css. Even in the comments here, people have said they use tailwind so they don't have to learn css because they're not a designer. Also the biggest reason to use tail
426.
by ehutch79 4y ago
Then you're using the equivalent of bootstrap or bulma. You're not really doing anything benefiting from utility classes. And if you're going to use tailwind utility classes, they're mostly one for one with a single css
427.
by ehutch79 4y ago
supports-[backdrop-filter]:bg-black/25 Way easier and clearer than writing normal css
428.
by ehutch79 4y ago
So, to be clear, it is not possible to email a pdf on an iPad?
429.
by ehutch79 4y ago
Do you actually have issues attaching a pdf to email on iOS? There are plenty of apps to upload stuff to FTP. If this was an actual thing you used with any regularity, you'd have something installed already if files isn't connecti
430.
by ehutch79 4y ago
You don't get out much do you? Not if you consider that a hellscape.
431.
by ehutch79 4y ago
Good, keep them distracted and out of the way.
432.
by ehutch79 4y ago
Right, from what they're saying, they're pulling the key out of the claims to verify the token. No it doesn't make sense.
433.
by ehutch79 4y ago
I'm pretty sure he meant they were putting the private key in the jwt. People do some dumb stuff. And the dunning kruger effect is all too real.
434.
by ehutch79 4y ago
Because they got the code our of a reddit comment?
435.
by ehutch79 4y ago
To clarify, what I do for sso stuff, if I get the JWT, verify it, then generate a session_id to hand back to the frontend. I'm essentially using the JWT as a replacement for username/password when it comes from a sso provider. I c
436.
by ehutch79 4y ago
You're not wrong. I replied to a sibling comment. What I do is use the JWT from oauth or whatever sso, verify it, and log the user in as normal. Using the JWT as a replacement for a username/password. I can invalidate the session
437.
by ehutch79 4y ago
You're absolutely right, but then we reach the, "why are you using JWTs?" part of things. if you're issuing them for your own service because that's what some guy on reddit said you should be doing...
438.
by ehutch79 4y ago
Why in the fresh hells would you store a users password in plain text, in order to decrypt that key? Even if you didn't you still need to retrieve the user and password from some storage to validate the key, which invalidates the reaso
439.
by ehutch79 4y ago
There's nothing actually wrong with session ids in a cookie. It's that JWT was the new hotness and a buzzword. Now there's a lot of cargo culting around them. JWTs are a signed claim that your service can trust, and use for a
440.
by ehutch79 4y ago
The overwhelming majority of JWTs have an expires field. That's not the issue. The idea is that you have a disgruntled employee with a token that expires in 5-10 minutes. You don't have invalidation checks, so what damage can that
441.
by ehutch79 4y ago
And then most people hit the db anyways, since they use the jwt as a session cookie anyways.
442.
by ehutch79 4y ago
When you're a small team, possibly solo, having someone else deal with hardware is key. Focusing just on what you're working on is great.
443.
by ehutch79 4y ago
Then use a different language? I thought I said that?
444.
by ehutch79 4y ago
Network DB access is what I'm thinking about, not reading less than a K from on disk file. Also, any external API is an example. To answer your question; "it depends". Is pylints speed an issue? If not, then it's fine, i
445.
by ehutch79 4y ago
As someone who uses python in their day job, I agree with this. When you spend more time io bound, it’s not an issue. If your python code is choking on cpu time, a lower level language is probably more appropriate.
446.
by ehutch79 4y ago
How exactly is it spyware? When you say that, i'm expecting to hear about keystroke loggers, or hoovering up session cookies or something.
447.
by ehutch79 4y ago
A private company didn't 'build' the highways. (yes i'm sure a private company laid the asphalt, but at the direction of the government)
448.
by ehutch79 4y ago
Tailwind did not invent JIT. Tailwind had to come up with something, and that something is it's JIT compiler, because shipping 10mb to the browser in dev was untenable. Let alone the people that never setup purgecss and were shipping t
449.
by ehutch79 4y ago
I'm replying to you and YOUR post. Capitalization for emphasis. I was commenting on how you seemed to make yourself the arbiter of how much ram one could ever possibly use.
450.
by ehutch79 4y ago
You need some level of expertise to turn off selinux, or even know what it is. They know what they're doing enough to know the consequences if they can turn it off. By third party, i mean stuff not in the distro. It's extra effort

More ›