freeqaz

34 ms·

481.
by freeqaz 4y ago
This is how io.js got adoption back in the day, iirc. It was then mainlined back into Node. https://stackoverflow.com/questions/27309412/what-is-the-dif...
482.
by freeqaz 4y ago
Is it pretentious because he said he wrote the talk the night before? (It is Ryan Dahl giving the talk and he's pretty famous for writing Node.js originally.) It's interesting the goals that he outlines at 3:30. They feel like the
483.
Bun: A Complete Overhaul of the JavaScript Ecosystem(lunasec.io)
69 points by freeqaz 4y ago|25 comments
484.
by freeqaz 4y ago
My colleague was super excited about Bun and wrote this post based on his gripes with the JavaScript ecosystem + why he's excited for Bun to disrupt the current web tool chain. I figure maybe there are a few Node.js haters on HN (just
485.
by freeqaz 4y ago
Previous discussion about this tool: https://news.ycombinator.com/item?id=19517977
486.
Open Source tool that dumps infrastructure data into a graph database to query(github.com)
11 points by freeqaz 4y ago|1 comments
487.
Open Source Social bookmarks website for hackers(github.com)
2 points by freeqaz 4y ago|0 comments
488.
Open Source tool to convert yarn.lock to package-lock.json and vice versa(github.com)
1 points by freeqaz 4y ago|0 comments
489.
Vex: Permanently Silence False Positives with Vulnerability EXchange(lunasec.io)
1 points by freeqaz 4y ago|0 comments
490.
by freeqaz 4y ago
Ah, that's a very good point. They _did_ refund me so I guess they did satisfy their AirCover policy! I'm glad you noticed that detail. Thank you.
491.
by freeqaz 4y ago
They do not. I cited this exact policy and it fell on deaf ears. I couldn't believe it myself -- maybe I should write a dedicated post about the details just for visibility.
492.
by freeqaz 4y ago
The host had a family emergency and had to leave. Totally understandable, but Airbnb had no resolution for my friend.
493.
by freeqaz 4y ago
This is a common fraud method that I've read a few articles about over the years. I initially had sympathy for Airbnb in that it's much harder for them to deal when a host is a "bad actor", but that sympathy evaporated w
494.
by freeqaz 4y ago
Maybe this depends on regional policies? I just had an experience last month with a host canceling and they wouldn't give me a coupon for more then 30% of the value of the stay. But the stay that had been cancelled was a month-long and
495.
by freeqaz 4y ago
My recent experience with Airbnb rebooking another room is... do not rely on this. You should not rely on Airbnb for anything you must depend on. They're not a hotel and their support doesn't have control over the "supply&quo
496.
by freeqaz 4y ago
Do any Ruby devs have an idea about how widely exploitable this vulnerability is? The GitHub issue mentions that a file upload could trigger this. I'm guessing that's because the time zone is included in the "date modified&qu
497.
List of Hacker Search Engines(github.com)
4 points by freeqaz 4y ago|0 comments
498.
by freeqaz 4y ago
This post is amazing. Thank you. This captures my thoughts on this problem space very well! Security vs compliance is real. I love how you just map "compliance = security theater" because that is really the best way to describe it
499.
by freeqaz 4y ago
This is compliance vs security. Finding vulns checks a box for SOC2, but in reality detection is the easy part. Figuring out what to fix, based on real-world usage and risk, requires much more work and is often ignored. I'm sorry you&#
500.
by freeqaz 4y ago
Just to expand on this a bit: One of the largest fallouts from the Log4Shell vulnerability was that companies realized how hard it was to identify where they had log4j in their infrastructure in the first place. I've spoken with dozens
501.
by freeqaz 4y ago
The baguette bit is what made it "click" for me. Thank you!
502.
by freeqaz 4y ago
The simplest answer to this is Kirkland Signature. It's a very genius idea that Amazon is starting to copy now with AmazonBasics, but Costco has been doing it for years. This article explains it better than I can: https://ev
503.
by freeqaz 4y ago
For small projects, Keycloak is wayyyy too heavy for them. It requires multiple domains which makes sign outs hard... a OIDC server and client... it's a lot. It works well when you need to stitch together multiple services but otherwis
504.
by freeqaz 4y ago
I'm actually on the inverse side of this now: I find Passport to be a dumpster fire of complexity and foot guns while Ory Kratos[0] + Ory Oathkeeper[1] have been the simplest way to add Auth to a project now (even for an MVP). I'
505.
by freeqaz 4y ago
Maybe a silly question but how are Netflix employees faring with this change? I know that Netflix is famous for paying 99% cash. How does that work when the stock crashes 80%?
506.
by freeqaz 4y ago
This appears to have been hugged to death. Anybody got a link for an archived version?
507.
by freeqaz 4y ago
I've purchased this robot and installed this firmware on it. It definitely took about an hour and it was a little tedious with having the push the wires into the tiny pins (I had my orientation wrong for the pinout). That said, once it
508.
by freeqaz 4y ago
JWTs are frequently stored in LocalStorage which means that any XSS is able to leak the JWT. Cookies, on the other hand, can be configured to be HTTP-Only and inaccessible to JavaScript on the page. That prevents somebody with XSS from leak
509.
by freeqaz 4y ago
We've had a lot of success using the AWS CDK (our code[0]). We wrote a tonnn of stuff with Terraform back we were building a low-code platform, but it was a ton of work to manage. The AWS CDK has higher level "constructs"[1]
510.
by freeqaz 4y ago
I run an Open Source project[0] and I'm in a group with a bunch of other Open Source founders. I've spent a lot of time thinking about these types of problems and I've put down some of them into a post here[1]. My email is on

More ›