lyu07282

51 ms·

541.
by lyu07282 1y ago
I don't know why you are getting downvoted, you do have a point. Some of the comments appear knowing what CORS headers are, but neither their purpose nor how it relates to CSRF it seems, which is worrying. It's not meant as dispar
542.
by lyu07282 1y ago
How does that make sense if most EU corporations are using MS/Azure cloud/office/sharepoint solutions for everything? Are they just all in violation or what?
543.
by lyu07282 1y ago
Exactly you can also trigger forms for POST or DELETE etc. this is called CSRF if the endpoint doesn't validate some token in the request. CORS only protects against unauthorized xhr requests. All decades old OWASP basics really.
544.
by lyu07282 1y ago
Obviously to extort some licensing from companies. Perhaps that could finally lead to some welcome clarification of the AGPL in the courts. Never been tested before afaik
545.
by lyu07282 1y ago
It's odd that it's the UI they removed (which was always lacking features anyway, like lifecycle configuration) instead of replication support which feels more enterprisesque. It's also perhaps worth pointing out that they on
546.
by lyu07282 1y ago
Checkbox/Radio Card is a neat idea, but doesn't seem to work on mobile.
547.
by lyu07282 1y ago
But that already happened to lots of industries and lots of people, we never cared before about them, now it's us so we care, but nothing is different about us. Just learn to code!
548.
by lyu07282 1y ago
> Most of us are just watching to see if there still exists a rule of law at all. You are right! Thank God for the supreme court making everything he does legal. I was almost worried there being ruled by an illegal fascist dictator inste
549.
by lyu07282 1y ago
> Great managers improvise on feedback the way a jazz soloist riffs on a theme - always on, always smooth. That fluency only comes from thousands of hours of uncomfortable reps: hard conversations, careful wordsmithing, and the stress of
550.
by lyu07282 1y ago
I use JWT and a half dozen other standards, not by choice though, I wished I could do what you suggest it would simplify everything a ton, but I'm not going to roll my own multi-org/SSO/2FA auth platform. Needing those auth f
551.
by lyu07282 1y ago
> fairly popular position even outside of traditionally leftist politics Only leftist politics will actually be able to address the issues. Of course people will just mindlessly scream "sOcIaLiSm!" at anything and everyone, but
552.
by lyu07282 1y ago
Isn't that what OIDC/JWKS is? That also uses PKI to verify JWT with public keys.
553.
by lyu07282 1y ago
I find that hard to believe, I also don't think LLMs provide the value some others are seeing but there is also code search and refactoring tasks that LLMs can help with. Instead of heaving to write a codemod, I can just write a prompt
554.
by lyu07282 1y ago
Of course, we just aren't doing neoliberalism hard enough yet! Lets get rid of all the unions, that must be the reason everything is falling apart.
555.
by lyu07282 1y ago
Even a rudimentary exploit can be a significant time investment, it is absolutely not common practice to develop, publish or to demand such exploits from researchers to demonstrate memory corruption vulnerabilities. Everyone thinks they are
556.
by lyu07282 1y ago
Are you saying you want PoCs that trigger a crash from the use-after-free or you would only be satisfied by full on RCE PoCs?
557.
by lyu07282 1y ago
The time they didn't spend reading the 13k LOCs themselves would've been time spent better. What?
558.
by lyu07282 1y ago
> LiDAR has some interesting use cases in archaeology (Caspari, 2023), particularly for uncovering man-made structures that are hidden beneath vegetation or subtle terrain changes. It allows archaeologists to identify features such as an
559.
by lyu07282 1y ago
Also related: In my observations with tool calling the order of your arguments or fields actually can make a positive or negative effect on performance. You really have to be very careful when constructing your contexts. It doesn't hel
560.
by lyu07282 1y ago
Isn't that exactly what pgadmin is? https://www.pgadmin.org/
561.
by lyu07282 1y ago
This feels like an understatement. At the time, young me had the impression Carmack came first, then the industry created 3dfx/OpenGL to run his games better. I still have nothing but respect for his skills decades later.
562.
by lyu07282 1y ago
There were always people who only cared if it "just works", that part isn't exactly new. I think what we are saying is that good code matters beyond what you can understand or appreciate, until it blows your face off. This is
563.
by lyu07282 1y ago
I think the root of the argument is that the AI critics are worried because they have the assumption that 1) you aren't experienced enough to know what "good code" looks like, and/or 2) you only care if it "works&qu
564.
by lyu07282 1y ago
I mean don't bite the boot that you can lick amirite
565.
by lyu07282 1y ago
We will see, but I can also imagine the pile of shit you vibecoded around you collapsing on top of you.
566.
by lyu07282 1y ago
these tools have no understanding of clean architecture, they are like geeksforgeeks or w3cschools, decades old shitty "tutorials" written by amateurs for amateurs condensed into a chatbot. If you work on cleanly architectured cod
567.
Setuptools: Governance and Change Management Review After Breaking Change(github.com)
4 points by lyu07282 1y ago|0 comments
568.
by lyu07282 1y ago
It looks so cool at first, but my god is it ever brittle and unstable. I want to like it, but so many bugs and reliability issues. I don't want to be in their shoes keeping the cloud instance from blowing up all the time. I also think
569.
by lyu07282 1y ago
> I think we're getting so used to crazy (rather, the perception that others are crazy) that we aren't setting off these "alarms", where we would if we were talking about "real people". IDK what it says abou
570.
by lyu07282 1y ago
I don't think becoming even more neoliberal is going to solve anything for the EU, you people know one button so you all you ever want to do is press it harder to solve any problem, it's hilarious.

More ›