lilyball

36 ms·

481.
by lilyball 5y ago
This is exactly the problem. The regex issue isn’t that it’s not efficient, it’s that it’s wrong. Using this tool to generate code in a problem area you are not qualified to double-check and validate yourself is dangerous.
482.
by lilyball 5y ago
I just took another look at the article and it appears I misunderstood what it was saying. I thought it was saying automation of Finder granted access to other users' files. This is not the case. It was talking about accessing other us
483.
by lilyball 5y ago
Finder doesn’t run as sudo though. TCC is layered on top of Unix file permissions. It prohibits access to files, it doesn’t open a hole through pre-existing protections. Basically, it acts as a sandbox rule. Sandboxing your app doesn’t allo
484.
by lilyball 5y ago
Besides providing a standard set of behaviors so people don’t accidentally mishandle idempotency in their hand-rolled attempt, it also allows networking frameworks to build in support for this in a generic fashion (if there’s any particular
485.
by lilyball 5y ago
That seems like the obvious behavior, but this draft says the server MUST return a conflict error, which means this behavior is not permissible.
486.
by lilyball 5y ago
Question: this says a duplicate request MUST respond with the previous result on retry. Doesn’t this run the risk of returning bad data to the client in the event that the API result includes the “current state” of some resource? And by tha
487.
by lilyball 5y ago
The “Concurrent Request” part concerns me. Just because the server thinks the original request is still going on doesn’t mean the client does. Example: Client issues a request with a 10 second timeout. Network conditions are such that the r
488.
by lilyball 5y ago
How does granting automation access to Finder allow other users to access Alice’s data? TCC doesn’t negate standard Unix file permissions, and other users couldnt read Alice’s data before TCC. And the standard user directories (such as Desk
489.
by lilyball 5y ago
Why stop there? Why not delete your test methods too and just test in production? Mocks are just test code, same as your test functions. And they’re necessary fur unit tests. If the thing you’re testing talks to another component without a
490.
by lilyball 5y ago
I would really love to know why "Amvoom" could declare to Amazon that they own "Acme Klein Bottle" when "Acme Klein Bottle" has nothing to do with the "Amvoom" trademark. Can they just declare they ow
491.
by lilyball 5y ago
`git blame` is not the tool you use to see if a file changed. It’s the tool you use to view per-line changes. If you want to see historic changes you just view the log, which is unaffected by this.
492.
by lilyball 5y ago
It sounds like the real advice here is “have a strong coding style guide that is rigorously enforced so nobody ever has to go make style fixes to existing code”.
493.
by lilyball 5y ago
No. Means tests only exclude those who need it. The fact that some people will get money who didn't truly need it doesn't harm anyone, and it's far better for some people to get a benefit they don't need than for people
494.
by lilyball 5y ago
Nobody is being harmed by having unpaid rent paid off. The people who haven't paid their rent have done so by and large because they couldn't afford it, not because they just chose not to. Paying off their rent helps those people,
495.
by lilyball 5y ago
When the author started introducing all the calculations to figure out if the printed version would round up, my first thought was, why not just look at the printed version? Print it as %.1f, then chop off anything past the period and re-pa
496.
by lilyball 5y ago
New APIs introduced in betas often don’t have documentation until later. When working with beta APIs, read the header.
497.
by lilyball 5y ago
Wide-area DNS-SD exists too, it’s not just for mDNS, so if this was built on a DNS-SD infrastructure then supporting devices off the LAN would be as simple as just offering a wide-area service enumeration and browsing domain.
498.
by lilyball 5y ago
Could your mouse have had built-in scroll acceleration?
499.
by lilyball 5y ago
When a “page” of search results consists of 1 ad and 1 result, it’s really not very meaningful to talk about “pages”.
500.
by lilyball 5y ago
Nancy Pelosi’s story is her husband does the stock trading without her involvement (or even her knowledge prior to her regular reports to Congress about trading activity). If true (and assuming she’s not giving privileged info to her husban
501.
by lilyball 5y ago
Deep nesting suggests that you need to break parts out into their own views (or pull logic out into their own functions). Like the close box in that file, it’s a great candidate for turning into its own view, or at least moving it’s action
502.
by lilyball 5y ago
Really the problem is so much logic is being done inline with the view hierarchy. Like the close button action, it’s a big chunk of code and means I couldn’t even tell it was the close button until I scrolled further down. Actions like that
503.
by lilyball 5y ago
Patreon probably gets by because a lot of Patreon rewards are physical items, or other services performed by the creator where Patreon (and by extension Apple) cannot guarantee will be received. Meanwhile an app whose subscription model is
504.
by lilyball 5y ago
Doesn’t that mean the cert is already invalid by the time certbot notices, so you already have an outage? And if certbot is running daily then that outage could be up to 24 hours.
505.
by lilyball 5y ago
It would be nice if there was a notification saying the person transferred to a new phone but kept the safety number. This way you can choose your level of paranoia. And there could be a setting to suppress this message (on the receiver). B
506.
by lilyball 5y ago
How can they guarantee end-to-end encryption when someone could be looking over your shoulder as you type your message? Same answer. They don’t control the input, they just keep it safe once it’s in transit.
507.
by lilyball 5y ago
I am fascinated by his use of backslash-escaping the tweet EOD to signify that it's being followed by another one.
508.
by lilyball 5y ago
I’m not sure what you’re trying to imply. The fact that it’s the anniversary would easily explain why they’re making sure it’s censored properly in China, the human error is that it’s being censored outside of China.
509.
by lilyball 5y ago
It's per _iteration_? That was not clear. Parent comment said "execution", not "iteration". I interpreted that as per execution of the program.
510.
by lilyball 5y ago
I doubt that’s why. Modern hash tables typically include a random factor in the hashing to prevent bucketing from being predictable, so attackers can’t craft malicious input that causes every value to be put in the same bucket as a form of

More ›