kevincox

41 ms·

751.
by kevincox 2y ago
I think they mean run a VM with one container inside. So you do get strong isolation. This is similar to how managed container IaaS works. They launch a VM and run your container in it. It is extra complexity but has a few advantages. 1. Pe
752.
by kevincox 2y ago
> you'd think they'd figure it out. Cost of sending spam: Effectively zero. Cost of pissing off inactive user: Essentially zero. Cost of convincing inactive user to come back: Positive. Add in a bunch of other factors like some
753.
by kevincox 2y ago
Half presses aren't counted as part of the record (it is a whole) but do matter when doing multiple levels in sequence as you can often not spend an extra one if you had a "half" from the one before.
754.
by kevincox 2y ago
Automatic saving seems like the best option. Then you can always just re-open the tab. Undo is better than confirmation.
755.
by kevincox 2y ago
I think the biggest issue with storing large "blobs" in the DB is that you often want a different backup strategy. The DB is a mutating file so you will want to do some form of incremental backup but blobs are often unchanging. So
756.
by kevincox 2y ago
The db size generally won't shrink under default settings, but the space will be reused.
757.
by kevincox 2y ago
Personally I have been using https://www.appmaildev.com/en/dkim most frequently as it allows direct input rather than sending mail which is often more convenient (ex: I am looking at a failing message). My only complai
758.
by kevincox 2y ago
It definitely depends on the domain. In embedded programming you can often know that your n is small for your algorithms. If you are making a desktop app or web service it is very important to prepare for people using your service in unexpe
759.
by kevincox 2y ago
I will ask all of those questions. But I don't expect perfect answers. You should at least know what big O is. I would really like it if you can tell an O(n^2) algorithm from a linear one. (That is often really important in real-world
760.
by kevincox 2y ago
I recommend reading https://developer.mozilla.org/en-US/docs/Web/CSS/:visited > For privacy reasons, the styles that can be modified using this selector are very limited
761.
by kevincox 2y ago
This is what I am doing (business to consumer) and I am quite happy with it. I am maybe a bit too generous with the free credits (many people can use the service lightly for over a year on the trial) but I like that they get the exact exper
762.
by kevincox 2y ago
Do tabs that are unloaded keep much state? My understanding was that they basically loaded as if a fresh navigation except for some extra form field preservation. Or is the active state serialized to disk somehow?
763.
by kevincox 2y ago
Many web crawlers (including Google IIUC) will subscribe to the feeds. But I think they just use it as a way to efficiently discover new pages rather than directly surfacing the results in search. So likely since the posts don't have a
764.
by kevincox 2y ago
The URLs also don't need to exist as an HTML webpage. They just need to be unique (ideally globally unique). urn:uuid: is always a good option but using URLs under a prefix you control is just an easy way to get a globally unique ID. (
765.
by kevincox 2y ago
> I like to scroll back and see clusters of tabs from months ago—it's like a trip down memory lane on whatever I was doing/learning about/thinking about Sounds like something that browser history was designed for. Maybe it
766.
by kevincox 2y ago
I think this should be the main response. If the fees were charged to the customer they would be able to make an informed choice. But as it is the fees are already included in the price, so you are just losing if you don't use the cred
767.
by kevincox 2y ago
I doubt there is much difference to this tracking vs credit and debit cards. Really unless you are paying with case I think your transaction history is being sold.
768.
by kevincox 2y ago
I don't think the exploit in that case was re-encoding. What happened is an image with very large dimensions was uploaded. When this was decoded into a raw pixel buffer on the client it used tons of memory. It was effectively a zip bom
769.
by kevincox 2y ago
I would encourage not directly using the user-uploaded images. But uploading directly to S3 is probably fine. I just wouldn't use the raw file. 1. Re-encoding the image is a good idea to make it harder to distribute exploits. For examp
770.
by kevincox 2y ago
I would love to see some sort of PAKE integrated into browsers and regular form input fields. Browsers would very strongly encourage randomly generating passwords on signup and not allow the site access to them. Users would also be discou
771.
by kevincox 2y ago
I think we need to simplify for broad audiences (I realized this post is aimed at technical people). The beginning and end of the list should be "use a password manager". Other things are also great, but this first step is huge an
772.
by kevincox 2y ago
Location: Toronto, Canada Remote: Small preference for yes. Willing to Relocate: Probably not. Technologies: Rust, TypeScript, C++, Python, HTML, Git, much more. Résumé/CV: https://kevincox.ca/resume/ Senior devel
773.
by kevincox 2y ago
It's actually more complicated. With HTTP you don't know requests can be coalesced until you receive the response headers with the Cache-Control and Vary. So if your website takes a few seconds to respond most CDNs will send every
774.
by kevincox 2y ago
I don't see how the request size to mastodon is at all relevant to the resulting traffic.
775.
by kevincox 2y ago
It really doesn't work well by default. It won't cache HTML and it will serve up CAPTCHAs to subresources like JS and IMG that can't be completed by users as well as RSS feeds so that people can't subscribe. The defaults
776.
by kevincox 2y ago
Switching to a different backend seems overly dramatic. But configuring some caching seems like a pretty obvious improvement.
777.
by kevincox 2y ago
I really want mobile networks to accept their role as dumb data pipes. I should be able to just provide a password or certificate and connect. No IEMI, no SIM. And while we are at it stop tunneling my data back "home" when I trave
778.
by kevincox 2y ago
This is my problem. I am happy to pay more for a product that will be durable, reliable and last longer. But finding this (if it exists) is impossible. You try to look at old companies with strong reputations but across the board they have
779.
by kevincox 2y ago
> One could say, "run0" is closer to behaviour of "ssh" than to "sudo", in many ways. This is an interesting offhand comment. You could implement a very similar tool by SSHing to localhost.
780.
by kevincox 2y ago
I think this is in part people's memory. People will often just mention a ticket by ID and lots of in the people in the room seem to know what they are talking about. I find it nearly impossible to remember associations between "r

More ›