joshka

18 ms·

361.
by joshka 2y ago
One of my biggest regrets in life was throwing away in a house move my tickets / flyers / poster collection from many years of gigs I attended. Probably a banker's box full of random things. I wish I hadn't done that. An
362.
by joshka 2y ago
How about over 60? That's more likely to have a positive effect on society
363.
by joshka 2y ago
I can't get the xyzzy cheat[1] to work. How am I going to tell if there is a bomb or not? [1]: https://minesweepergame.com/history/xyzzy.php
364.
by joshka 2y ago
Summer1975! would be equally likely to be checked by a password sprayer. It has the same number of hits on HIBP, and falls into a category where heuristic password guess algorithms would generally group them as being the same thing.
365.
by joshka 2y ago
The measure of uniqueness is effectively entropy (entropy = log base 2 of the number of possible passwords). Ease of use is just unnecessary (for entropy purposes) padding on top of that (constraints on symbol sets, order, etc). The necessa
366.
by joshka 2y ago
> AFAIK basically all the auth attacks we see today are from password re-use https://haveibeenpwned.com/Passwords says Summer2024! has been seen in two breaches, which means even if it weren't being brute forced it&
367.
by joshka 2y ago
There's a discussion happening in a new Rust config management crate at https://github.com/cbeck88/conf-rs/discussions/1 about a similar sort of ideal.
368.
by joshka 2y ago
How would you do this without it?
369.
by joshka 2y ago
Neat!
370.
by joshka 2y ago
Gobang seems stagnated (no PRs merged since last year), which is a shame.
371.
by joshka 2y ago
Ratatui maintainer here. I'd agree with all of the above points. The lack of opinionated approach stems from Ratatui being not a framework, but a library (you call us, we don't call you), and not having any of the event/input
372.
by joshka 2y ago
As a general rule (for established libraries at least), the docs for rust crates stored on https://docs.rs are pretty good. This comes from having docs being built-in to the tooling, so it's really easy to deliver docs in a
373.
by joshka 2y ago
You can still do that in rust if you want / need to: https://play.rust-lang.org/?version=stable&mode=debug&editio... fn main() { match process(&[0x34, 0x32]) { Ok(n) => println!
374.
by joshka 2y ago
The easiest counterpoint to this is to think about a HTTP request. If your library is called by one route, and is known to fail in certain circumstances, this failure should not bring down the entire system. A well designed library should g
375.
by joshka 2y ago
I was also confused by this as a commit id is deterministic. I suspect that the OP may be confused about how git hashes are computed. But thinking deeper, given that the hash is computed from a small amount of entropy (the commit time), plu
376.
by joshka 2y ago
In the last example, the call to openoptions can be replaced with the simpler File::create(), which opens the file in write mode, creates it if it doesn't exist and truncates it if it does. The weird iteration can be replaced with Iter
377.
by joshka 2y ago
I don't see why this can't be solved (approximated) recursively. If I know the EV of 1 and 2 choices, then the 3 number situation is the same as whatever weight I assign to choosing the first number multipled by Ballmer's str
378.
by joshka 2y ago
As a more backend focused dev (though one who's touched a bunch of different JS / CSS frameworks over the years), seeing Pico in this article seemed pretty nice in comparison to what I've seen in the past. What are some of th
379.
by joshka 2y ago
Many of the questions about TOTP lengths / timing / storage are covered in the Security Considerations part of the RFC[1]. This is written in fairly plain language. The meta answer is if you're implementing a security protoco
380.
by joshka 2y ago
Oddly, BofA actually has mechanisms in place to allow non-credential sharing access to external services. Try linking a paypal account and you'll get a prompt from a Bank of America system that allows paypal to access all your banking
381.
by joshka 2y ago
Do you have token counts / cost breakdown for using groq models for this? Something I'd really love to see as an open source library maintainer is something of an amalgam of: - current source - git commit history plus historical s
382.
by joshka 2y ago
Whenever I accidentally visit a light mode site I get an immediate small but annoying stabbing pain that feels like it comes from behind my eyeballs. This is empirical evidence that light mode is harmful to me at least for that small moment
383.
by joshka 2y ago
Pour one out for those using composite keys :D
384.
by joshka 2y ago
dupe https://news.ycombinator.com/item?id=41329713
385.
by joshka 2y ago
I see that's tui-rs based - check out Ratatui as a maintained fork. https://github.com/pierreyoda/hncli/issues/1
386.
by joshka 2y ago
I recall seeing a omz (IIRC) plugin that reminds you of aliases that match the commands that you just ran. I had this turned on, but it got too annoying :)
387.
by joshka 2y ago
Updates can be easily disabled: https://github.com/ohmyzsh/ohmyzsh?tab=readme-ov-file#gettin... I'm pretty sure that omz is not running their own webserver (correct me if I'm wrong here). It is just doing a g
388.
by joshka 2y ago
I feel like I've probably seen both sides of all the anti-patterns listed and a few more to boot. A lot of these have some natural root causes. These apply pretty generally to both reviewer and reviewee. - not enough context (why is th
389.
by joshka 2y ago
Low effort article. "Backfires" in this context is that people wrote things on twitter. Nothing else is claimed to have happened.
390.
by joshka 2y ago
Take a look at the articles on Valhalla's site. They're another goldmine https://valhalladsp.com/learn/

More ›