maxwellg

10 ms·

91.
by maxwellg 3y ago
Cyclists act like cyclists, and are more or less predictable when treated as such. Cyclists are not vehicles, and it doesn't make sense to insist they behave like vehicles. The theory of vehicular cycling was one of the worst things to
92.
by maxwellg 3y ago
Insisting that a bicycle needs to follow the same procedures as a 3000lb internal combustion engine driven vehicle is madness. The vast majority of car laws are completely inappropriate for bicycles. Bicycles are much smaller, go much slowe
93.
by maxwellg 3y ago
My take on client-side hashing schemes is that they help with raising the floor - - they ensure that the backend application never sees your password in plaintext , and prevent the worst case scenario of a plaintext data dump - passwo
94.
by maxwellg 3y ago
On the authentication front - JWTs would be a great fit here! The developer's backend could issue a JWT, which is validated by the remoteStorage backend. Then, use the `sub` field as the user ID. JWTs are pretty ubiquitous in frontend
95.
by maxwellg 3y ago
IME Wildcard redirect URLs have become more common in recent years due to the rise of preview environments. If you're deploying a git branch to Vercel, and you now want to log in to <project-name>-git-<branch-name>-<scop
96.
by maxwellg 3y ago
A good chunk of the AWS SDKs are codegen’d - it’s the only possible way to support the sheer volume of stuff they need.
97.
by maxwellg 3y ago
It’s an old trick for pleasant-ish multi-line strings from before node/JavaScript had `backticks`. You can stringify the function and parse the string out of the embedded comment.
98.
by maxwellg 3y ago
Ah, good to know. I immediately turned off the monkeypatching and didn't spend too much time playing around with it.
99.
by maxwellg 3y ago
1Password's Passkey support feels very aggressively growth-hacky to me. They intercept calls to `window.credentials` and if you want to use 1Password along side other verifiers like Yubikey, you need to go into your settings and disabl
100.
by maxwellg 3y ago
Nice launch! The SQL snippet shared [1] gives me the heebie jeebies. If any one of those where clauses contains user-generated data, that's ripe for a SQL injection vulnerability. `fmt.Sprintf` and SQL almost never belong together. 1 -
101.
by maxwellg 3y ago
Column based database and Ancient Greek columns?
102.
Ask HN: Best resources for learning Elasticsearch in 2023?
2 points by maxwellg 3y ago|0 comments
103.
Ask HN: Deduplicating resources in REST APIs List operations
2 points by maxwellg 3y ago|1 comments
104.
by maxwellg 3y ago
The React Native docs have a good writeup on how PKCE reduces vulnerabilities with deep linking & session hijacking - https://reactnative.dev/docs/security#authentication-and-dee... PKCE also gives you nice assuran
105.
by maxwellg 4y ago
Origin-bound codes & Web OTP codes [1] are interesting initiatives, but platform adoption has been poor. For example, it still isn't possible to use Web OTP in Chrome on MacOS from a Chrome Web app on iOS. The communication isn&#x2
106.
by maxwellg 5y ago
There's a babel plugin for adding an Angular-style "display-if" to JSX - https://www.npmjs.com/package/babel-plugin-jsx-display-if I've only seen it used in projects once or twice but it really doe
107.
by maxwellg 5y ago
Check out https://stytch.com - we’re hybrid, but the SF and NYC offices have people in just about every day. I usually go in twice a week and it’s been great for in-person collaboration. https://jobs.ashbyhq.com/
108.
by maxwellg 6y ago
AWS isn't a bullet to bite
109.
by maxwellg 6y ago
Comment discovery is also horribly broken. So often, conversations _about_ a document contain information that don't necessarily _belong in_ the document, but still have value for future readers. Resolving comments makes it much harder
110.
by maxwellg 6y ago
I'm moving out of my place at the end of July. Gonna do some short-term sublets for a few months, then move in with some friends coming up from South Bay. We've been checking Craigslist daily for weeks now and it's very excit
111.
by maxwellg 6y ago
At my school, generally you would enroll in ~3-5 classes per semester. One or two of those classes would be your "main focus" for the semester, and then you might try to fill a breadth or take something that interests you. You wou
112.
by maxwellg 6y ago
I took my intro to databases course on a $160 (sale) Acer C670 in 2015. Fantastic battery life, Crouton was a breeze to get working, and was my first introduction to doing work in a unix environment. The only problem was that the larger tes
113.
by maxwellg 6y ago
I suppose if my office gave out free cigarettes and the whole team grabbed one after lunch, I would have had a harder time quitting too. Caffeine is so ingrained into my work life that it's impossible to escape from.
114.
by maxwellg 6y ago
Purely anecdotal, but for me it was the other way around. Last January, for my New Years Resolution, I kicked my pack-a-day-equivalent e-cigarette addiction. Three to four days of feeling anxious, some weird eating habits, a few headaches,
115.
by maxwellg 6y ago
I was thinking less around prefix matching and more around requesting enough data to where an observer couldn't tell what I was really interested in. If I requested 100 distinct locations in every state - 5000 total - you would know I
116.
by maxwellg 6y ago
If you request weather info for a large range of locations at once - the k-Anonymity that HAVE I BEEN PWNED uses - you could prevent this at the cost of increasing response size dramatically https://www.troyhunt.com/ive-just
117.
by maxwellg 6y ago
My 200 sq ft. microstudio has been absolute torture these last few weeks. I thought I was being smart and saving money - I'd pay much more now to be sheltered anywhere else. A house with a yard would be amazing.
118.
by maxwellg 6y ago
The 166k benchmark is ridiculously snappy. Could you shave off a few more ms by inlining the JSON as a data block?
119.
by maxwellg 7y ago
Non-production environments are useful for more than testing application code. Changing underlying infrastructure (Upgrading a database, networking shenanigans, messing around with ELB or Nginx settings) requires testing too. Having the sam
120.
by maxwellg 7y ago
Calling this a "glitch" is disingenuous. It (is/was) an open secret for my entire undergrad. There were plenty of professors who would encourage students on 8-hour appointments to work 20~30 hours/wk with no overtime p

More ›