hdhzy

14 ms·

91.
by hdhzy 9y ago
Async await while looking nice compared to bare callbacks and Promises are still not without drawbacks. For example one cannot use await inside nested callback so it's in async functions it's necessary to use for-of and avoid forE
92.
by hdhzy 9y ago
Pragmatic and simple. Thanks for taking time to describe it!
93.
by hdhzy 9y ago
Was it something like exporting PR history to a file and then signing (X.509/PGP)? Thanks for answers, it looks like a nice, lightweight auditable system.
94.
by hdhzy 9y ago
Interesting. How did you do signed code reviews?
95.
by hdhzy 9y ago
Github pushes topic branches to production and if they don't cause troubles then merges to master. The idea is that good state is defined as works in production not just passed CI tests .
96.
by hdhzy 9y ago
I wonder if they considered git appraise [0] as it allows offline work and synchronization due to underlying transport (git). [0]: https://github.com/google/git-appraise
97.
by hdhzy 9y ago
Yes, it's the most annoying thing I've seen on the web since <marquee>. Scrolling long fragments of code always takes me to another page when I'm reading. Who thought it was a good idea?!
98.
by hdhzy 9y ago
> Firefox on android still feels significantly more sluggish than chrome. Interesting because for me it's the exact opposite: Firefox is fast but when I need to open Chrome (webview or full) it's a slow and painful process (tes
99.
by hdhzy 9y ago
This is excellent news! Now I wish AWS Lambda and alternatives also supported Service Worker API (Google Cloud Functions has express like API).
100.
by hdhzy 9y ago
Not to mention Firefox for Android that supports extensions (uBlock etc.).
101.
by hdhzy 9y ago
The amount that the miner can claim is hardcoded in the client, something like "if block no < X you can create out of thin air only N coins". After some time N will be zero and the incentive for the miner will come purely from
102.
by hdhzy 9y ago
Refresh is not solely used to fetch latest data but also to reset the webapp, bringing it to clean state. Believe it or not our apps have a lot of undefined states.
103.
by hdhzy 9y ago
> BTW, that draft cites Keybase as a motivation for their approach Yes, I know. Without Keybase this draft would probably never exist in the first place :) > I couldn't find it in the doc, is there a story for revocations? Yes, i
104.
by hdhzy 9y ago
Mining is just finding a combination of values that the hash of them will have a number of zeros in it. (intentionally brute force problem) Public key crypto is used to confirm that the coins can move from one account to another, or to be m
105.
by hdhzy 9y ago
Excellent summary of your vision. > (1) (...) Whether you're following a famous developer or you're looking up your own sibling, odds are in 2017 you know a public definition of them: a Twitter account, Reddit account, Facebook
106.
by hdhzy 9y ago
What about XMPP with OMEMO? I know it's not the latest hype but has decentralized usernames.
107.
by hdhzy 9y ago
Clearly you're not the target market for Signal but there are many encrypted messangers out there for you.
108.
by hdhzy 9y ago
Nice. Exactly what I was looking for yesterday, thanks!
109.
by hdhzy 9y ago
Is stream proxy with SNI supported by open source version of Nginx? I can't find any documentation on how to route TCP traffic based on SNI but I know haproxy can use SNI and ALPN for that.
110.
by hdhzy 9y ago
Thanks! Are there any based on .NET Core? Not that I have anything against Mono but I'd like to get setup similar to what is described in the article.
111.
by hdhzy 9y ago
Is there a recommended Docker base image that I can use to run F# web services?
112.
by hdhzy 9y ago
For anyone interested in the design and functioning of Intel's security components there is a book freely available by one to the lead engineers here: https://link.springer.com/book/10.1007/978-1-4302-6572-6
113.
by hdhzy 9y ago
> Don’t use phone numbers, use usernames! As it turns out, that is far more private and secure. It is. But it's not convenient. Everyone has contact list with numbers and people want to talk to their friends immediately not call the
114.
by hdhzy 9y ago
The key is created by Intel during CPU manufacturing process. Of course it's not trustless but it shortens the list of companies you have to trust. Running remote software and attestation that it indeed is what you think without trusti
115.
by hdhzy 9y ago
Uhm, changing published commits is not recommended in git, maybe except private repos or branches. Could you point to specific workflows that encourage this?
116.
by hdhzy 9y ago
Excellent summary. Thanks a lot!
117.
by hdhzy 9y ago
Sound cool. Could you give a high level view on how does this exactly work? (I've skimmed the page) I assume the ENVKEY is some sort of ID or part of OpenPGP decryption key. Where does the actual config come from? Is it stored in encry
118.
by hdhzy 9y ago
> Also, it would be helpful if PCIe, HDMI, USB, Thunderbolt, etc. drivers ask permission of the user before automatically connecting devices inserted into PCs... Thunderbolt 3 does exactly this (at least on Windows). When connected to ne
119.
by hdhzy 9y ago
Even if they were completely open source how would you verify that they are using the same software on their servers? That the hardware is not compromised? Audit reports? How trustworthy are they if Symantec was able to provide good reports
120.
by hdhzy 9y ago
If one's threat model includes state actors that target that person then all regular methods are useless. The best we can do is to protect against passive attacks and that's where PGP, double ratchet schemes, Tor etc come in handy

More ›