mfontani

29 ms·

241.
by mfontani 8y ago
Not "load a webpage", "execute (java)script(s)". I think they're suggesting we should default to no JS anywhere by default, other than sites one whitelists JS usage on. IOW what NoScript (and maybe uMatrix?) does.
242.
by mfontani 8y ago
I read: * [...] only directory traversal attacks are prevented * [...] can overwrite arbitrary files in the scp client target directory * [...] the server can manipulate subdirectories as well ... so nothing points to the ability of the ser
243.
by mfontani 8y ago
Yes, "going down by 1/3" would mean what you say - but they wrote "going down TO 1/3 of": "asking me to go down to 1/3rd of my price because of where I lived". I read "going down to 1/3
244.
by mfontani 8y ago
They did offer 1/3 of, and not 2/3 of, from what I've understood from the OP comment.
245.
by mfontani 8y ago
Server-side Includes or Edge-side includes, which would include either statically generated (but routinely updated) or dynamically generated (but cached for a short while) assets work just as well if not better, but they're "old&q
246.
by mfontani 8y ago
> TypeError: "1fr ".repeat(...).trimEnd is not a function Firefox 60 ESR
247.
by mfontani 8y ago
Style your site with "only" 291KiB of CSS (24KiB compressed)?
248.
by mfontani 8y ago
So.. using 20 random bytes instead of 10 should be enough to make this pretty much infeasible?
249.
Run Perl in the browser with WebPerl(webperl.zero-g.net)
148 points by mfontani 8y ago|58 comments
250.
by mfontani 8y ago
The "real" screenshot, which was done with transparency turned on and displayed parts of what was underneath the shell, was a bit difficult to read.
251.
by mfontani 8y ago
I've not been able to find a good tutorial on how to store keys, plural, on a Yubikey 4 or any other smartcards. They're all limited to storing one, maybe two "authentication" GPG keys. Would you have some pointers?
252.
by mfontani 8y ago
NeXT bought Apple for negative $400M
253.
by mfontani 8y ago
I mentioned thinking about using multiple yubikeys, but they fall short on usability - I'd have to "juggle" many of them. :/
254.
by mfontani 8y ago
For SSH, I use one key per service, and manage them via https://github.com/ccontavalli/ssh-ident - to ensure that each connection only has access to the key it should, according to the configuration, have access to. I
255.
by mfontani 8y ago
What I really like about this is how short, and readable, the patchset for the feature is. Sure, it lacks tests - and it's had a couple revisions since… but it's something to behold.
256.
by mfontani 8y ago
Reminds me quite a bit of https://adamdrake.com/command-line-tools-can-be-235x-faster-... … in which, though, the author at least parallelises the counting.
257.
by mfontani 8y ago
Only if you're not using it for commercial stuff. If you're using it for commercial stuff you have to pay the $25/month
258.
by mfontani 8y ago
I'm sure he can build it from source, but the "personal" license forbids using it for commercial purposes, so the point is moot.
259.
by mfontani 9y ago
I've had one since last July (using it to type this, actually) and I think it gets better with time. I'm now up to a respectable ~70wpm, which is nowhere close to where I used to be with a "standard" QWERTY, but it'
260.
by mfontani 9y ago
> - Don't use U2F because FireFox doesn't support it It does! Open about:config and switch security.webauth.u2f to true. It'll Just Work. I've in the recent past modified a barebones Perl webapp to try and understand
261.
by mfontani 9y ago
> Using an appropriate base image (carbon for dev, alpine for production). Isn't using the same container everywhere the actual selling point for containers?
262.
by mfontani 9y ago
This brings me back... I was doing this exact sort of stuff at the turn of the century, although admittedly in C - not C++ - and using/linking to the Delphi CGI library. CGI in 2018 seems a bit passé...
263.
by mfontani 9y ago
The techniques explained in the article seem like they'd be JS running on the browser itself, so… the "browser itself knows it's headless" pretty much sums it up.
264.
by mfontani 9y ago
Some libraries don't make it easy (or possible) to check that the algorithm used by the JWT sent by the client is in fact the algorithm you're using and want the client to come back with, see i.e. https://auth0.com&#x2F
265.
by mfontani 9y ago
Or "just" use a Scaleway VM and pay €2.99/mo for unlimited egress
266.
by mfontani 9y ago
Looks like the / "a" private ssh key which allows pushing to github and trigger the automation thingy which eventually enlivens things needs to live on cloud9 to make this happen. Sounds "just fine" for your own per
267.
by mfontani 9y ago
My personal best tool for a Git branch's code review is `git lfo`, where the alias expands to: git log --pretty=full --reverse --show-notes=* -p --abbrev-commit origin/master.. Coupled with a "good diff highlighter&q
268.
by mfontani 9y ago
Whatever you end up using for scraping, I beg you to pick a unique user-agent which allows a webmaster to understand which crawler is it, to better allow it to pass through (or be banned, depending). Don't stick with the default "
269.
by mfontani 9y ago
and that is exactly like Perl 5 versions are, nowadays... "5.22.1" is "perl 5 version 22, patch release 1"
270.
by mfontani 9y ago
Other than the compilation to binary, Elixir seems a good fit for what you're looking for

More ›