franky47

40 ms·

451.
by franky47 6y ago
My first child was born a month ago mid-lockdown, so I have experienced both sides. I concur.
452.
Betting with Time(tomhirst.com)
2 points by franky47 6y ago|0 comments
453.
What Is the Jamstack in 2021?(remotesynthesis.com)
3 points by franky47 6y ago|0 comments
454.
by franky47 6y ago
'tis the season to be jolly. Happy holidays to all, and especially open-source contributors.
455.
by franky47 6y ago
Personally, my build logs are either handled by GitHub actions or other PaaS (Vercel, Clever Cloud), I'm not sure how I would connect them to another service via an NPM package.
456.
by franky47 6y ago
Another interesting method, overkill for most applications but absolutely required for end-to-end encrypted apps where no password must be sent to the server (eg: password managers): the Secure Remote Password (SRP) protocol[1]. It's a
457.
by franky47 6y ago
The live-typing feature reminds me of Google Wave (RIP). Wave also had infinite reply nesting capabilities, which led to highly digressive multi-branched conversations, the closest experience to real life discussion I have had to date. Howe
458.
by franky47 6y ago
While not technically related, this reminds me of Keybase's cryptographic coin flip: https://keybase.io/blog/cryptographic-coin-flipping
459.
by franky47 6y ago
That was my initial thought as well. I wrote about how to use Shamir's Secret Sharing (with a similar Horcrux analogy) to reset master passwords for end-to-end encrypted applications (such as password managers): https://fran
460.
What’s The Point of Free If You Have Nothing to Sell(jakobgreenfeld.com)
1 points by franky47 6y ago|0 comments
461.
by franky47 6y ago
Yes I thought of that for my analytics SaaS (to calculate weekly reports), the issue is that the image has to be decrypted on the Docker host before execution, which requires it having access to the key somehow, breaking the end-to-end encr
462.
by franky47 6y ago
That would be feasible with homomorphic encryption, however current implementations are very far from practical applications (extreme resource consumption, terrible performance).
463.
by franky47 6y ago
I asked myself a similar question for web analytics a year ago [1]: how to provide a service without having access to the underlying data. It requires shifting the processing onto the client side, so it limits what you can do, but it's
464.
by franky47 6y ago
The title can be misleading, I read it as "the last thing you should make is your monolith", which gives a very different perspective on the whole article.
465.
by franky47 6y ago
Regarding locationiq, you could provide an option when sharing to disable geocoding. There are many cases (eg: when hiking in the wild) where it provides little value. This could be done in a querystring argument in the shared URL hash: &am
466.
by franky47 6y ago
I was using carbon.sh to generate those images, but recently I've switched to CodeSnap [1], a VS Code extension that does the same thing without leaving the editor. [1] https://marketplace.visualstudio.com/items?itemNam
467.
by franky47 6y ago
A tip to help with "separation of concerns" and access management on devices: get two password managers. Put toxic social accounts on one, and anything non-addictive onto the other (or split as desired). When you feel that doomscr
468.
by franky47 6y ago
This kind of encryption-at-rest scheme becomes an absolute necessity when cryptographic secrets have to be stored, such as 2FA TOTP secret keys or recovery codes. Encrypting the email addresses and any Personally Identifiable Information on
469.
by franky47 6y ago
FWIW, CloudFlare can inject a cf_ipcountry header that does that. User-agent parsing is unfortunately more complex, with lots of false readings (not counting bots & crawlers).
470.
by franky47 6y ago
> If you track a user, you have to get his consent before doing it This would mean any server-side analytics (looking at access logs, which include IP address and user-agent) cannot be used for analytics or tracking, since there is no wa
471.
by franky47 6y ago
Another interesting approach is the one used in ProtonMail, using the SessionVars trick by Thomas Frank. It combines in-memory storage for XSS safety, and a combination of SessionStorage and `window.name` to split the token into secret rand
472.
by franky47 6y ago
Slack, using the RSS integration. I have a channel dedicated to social watch, mostly HN through hnrss [1], and a channel for blogs and more article-shaped content. I only use Slack as a "new article notification" system though, th
473.
by franky47 6y ago
Only in some: the fact that the type system can know everything it needs to generate runtime code, but chooses not to do so, is kind of frustrating sometimes.
474.
by franky47 6y ago
True, for immediate things having this ability is a godsend. But as software and bugs "dry up", it can get just as hard to chisel out as physical material.
475.
by franky47 6y ago
Add me too. Somehow the joy of seeing things being built from raw materials in the real world equates that of complex software being created out of nothing. But the finite element of the real world has that extra satisfying element: no depe
476.
by franky47 6y ago
It may do that, but the fact remains that it uses cookies to do so, which European users have a right to object to under GDPR.
477.
by franky47 6y ago
Interestingly, this website does use cookies (the digital ones) but fails to report them. For example, Stripe is loaded early on and uses tracking cookies, which are not necessary until a visitor decides to donate.
478.
by franky47 6y ago
Also, adding this log to the commit message itself, to preserve context for future developers reaching that code. Duplication might be necessary for discovery depending on the tools used. https://dhwthompson.com/2019/my
479.
by franky47 6y ago
I see this feature more as MySpace for developers, where everyone will bring their own personality with custom scripts and integrations.
480.
by franky47 6y ago
HN thread for the OpenOffice story: https://news.ycombinator.com/item?id=8171956

More ›