Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
jarrett
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
56 ms
·
451.
▲
by
jarrett
14y ago
Fortunately the anti-fraud solutions out there are pretty effective, which helps control the damage a stolen card can do. In my experience, not reliably. For example, I've known people who gave their credit card info to a seemingly legit
452.
▲
by
jarrett
14y ago
Yes, but imagine you can use it at the grocery store or a restaurant. Also, PayPal has a questionable reputation, so I wouldn't want to rely on them for all my day-to-day transactions.
453.
▲
by
jarrett
14y ago
To expand upon the author's idea, the problem is not just that credit card data is reusable, but that possession of credit card data amounts to permission to charge any arbitrary amount to it . Not legal permission, mind you, but permiss
454.
▲
by
jarrett
14y ago
While I entirely agree in principle with the idea that laws cannot solve all problems, I must disagree that we should aim for a society where any one person can understand all the laws. Our society is extremely complex. There are many many
455.
▲
by
jarrett
14y ago
> Eh, I don't know, Twitter bootstrap users don't appear to agree.. I know it's fallen out of favor for DHH Yeah, that's all I mean. I agree that it hasn't necessarily gone away in the larger sphere. Just that the Rails community has mo
456.
▲
by
jarrett
14y ago
> When using migrations, the schema is written to that file. You can also run rake db:schema:dump at any time. So it works great with a legacy database. You don't need to run any migrations for this to work.
457.
▲
by
jarrett
14y ago
> canonical definition of a model's database schema...I'm still not sure where to look for this in Rails. db/schema.rb has that. > Using Less's `less.watch()` functionality, which enables live updating in the browser based on change
458.
▲
by
jarrett
14y ago
Well, true, but we all must prioritize. Working time is limited. "Be proficient in both" is not necessarily practical for everyone. It may not be for the OP. Also, it's conceivable that if you split your time amongst different frameworks, y
459.
▲
by
jarrett
14y ago
Yep! Rails has a lightweight, API-oriented flavor. But even without the HTML templates--even if you're just serving up JSON or XML or whatever--you're still stuck with one language on the client and another on the server. What I'm really cu
460.
▲
by
jarrett
14y ago
Let's look at some metrics of maturity and community size. Django and Rails are almost the same age. Rails is only a year older, which doesn't mean much after so many years have passed. The numbers of Google search results for "Python Djang
461.
▲
by
jarrett
14y ago
Now that is really cool. You've convinced me that this could be a viable and practical approach to handling highly stageful programs in an FP context. One question though: Does memory/storage become an issue if you're keeping track of value
462.
▲
by
jarrett
14y ago
> If you mix FP and OO you'll often end up with terrible FP which simply reproduces the "old" approach: lots of mutable stuff everywhere. What I'm suggesting is that mutable state isn't inherently bad. It's entirely possible that we wil
463.
▲
by
jarrett
14y ago
To me, the future will most likely be languages that allows both functional and OO styles to interoperate. Programmers will pick the style or mix of styles most appropriate to the particular sub-problem they're solving. We already do this w
464.
▲
by
jarrett
14y ago
You're right--the third is the worst by far. And this proves that you can't trust a pre-installed, commercial browser until it has been thoroughly audited by independent researchers.
465.
▲
by
jarrett
14y ago
No, an ordinary proxy cannot do that. HTTPS is supposed to be end-to-end. I.e. the communications can only be decrypted by the two endpoints. One of the main reasons for signed SSL certificates is to prevent a middleman from masquerading as
466.
▲
by
jarrett
14y ago
If you read the page source, you can see how easy it is to write your own chat bot for this app. Just paste the code back in to your JS console (which may not like newlines, FYI). I won't tell you which chat bot was mine :)
467.
▲
by
jarrett
14y ago
It's even easier. You can set your name arbitrarily using the public API, e.g. rename('whatever');. Names don't have to be unique.
468.
▲
by
jarrett
14y ago
Agreed. Although certain actions would seem to be pretty black and white. Wiping a device is high-risk, and should obviously require a strong password. Downloading a free app is low risk (unless I'm missing something important about the per
469.
▲
by
jarrett
14y ago
Yeah, it probably wouldn't be honored unless the company did something to indicate they sanctioned your actions. Your second scenario, in which the company leaves it up for a year, may go a little ways towards creating apparent authority. H
470.
▲
by
jarrett
14y ago
That's a very difficult question of fact, and one which I think could easily be a central if this went to trial.
471.
▲
by
jarrett
14y ago
Very good points, and well researched. "It's highly unlikely a judge is going to find you have the same rights as the open source license, unless you were actually relying on all of those rights. You certainly would not be able to sublicens
472.
▲
by
jarrett
14y ago
It's highly questionable whether a company has the legal authority to retroactively revoke an open source license. The legal doctrine of promissory estoppel is generally considered to protect open source licensees. If you license something
473.
▲
by
jarrett
14y ago
Does that mean Bcrypt is extremely suspect? If so, then we have a real communication problem, because lots of people who claim to know crypto sing Bcrypt's praises.
474.
▲
by
jarrett
14y ago
Quite a few of the replies to acabal's comment amount to "yes, it's hard, suck it up and learn it." But the crypto community has told us time and again that we shouldn't be trying to learn the fine details of crypto. If we are, it's a war
475.
▲
by
jarrett
14y ago
Yes, the dynamic he's creating is different from what we experience with security cameras for at least two reasons: He's getting into people's personal space, and he's clearly focusing on individual people. But what if he did neither of the
476.
▲
by
jarrett
14y ago
I just completed a small side project: A little Ruby gem on Github. And when I say completed, I mean it. It's launched, in use in the wild, and not taking up my time. I started the project last week and finished it over the weekend. I hav
477.
▲
by
jarrett
14y ago
Granted, but does the hover URL do much to protect you from offensive content? It sounds like you're a technically sophisticated person who's worried about being pranked by other technically sophisticated people. Therefore, I assume they ar
478.
▲
by
jarrett
14y ago
While linking is the foundation of the web, I would say that the web has grown far beyond its foundations. Nowadays, web technologies are not just a way to share a set of linked documents. They're a platform for app development. The browser
479.
▲
by
jarrett
14y ago
Agreed. The ability to do something other than what the href implies is a small part of JavaScript's bigger purpose: To extend the capabilities of web pages beyond the basic functionality of a browser. It's what makes the browser more than
480.
▲
by
jarrett
14y ago
The term "trolling," as the folks I know use it, doesn't refer to stuff intended to cause harm or grief. Rather, it usually refers to something that would cause fleeting annoyance, or perhaps an eye roll. Or something designed to stir up a
More ›