minitech

76 ms·

451.
by minitech 7y ago
Promises are nice in JavaScript because they’re just a value with no magic. Anything can create them, not just async functions. Generic/higher-order functions and so on can get involved without needing to know the difference. A proposa
452.
by minitech 7y ago
> All this async code without decent locking primitives is leading to a rabbit hole of race conditions... I haven’t seen this happening. Maybe it’s because I tend to use Node for web apps too much, which don’t have much shared state with
453.
by minitech 7y ago
> This kind of doctrinaire thinking, this sort of broad and bold declaration, is the stuff of high-traffic blog posts but not good advice for real world developers. > A fool is someone who would set out to build a simple-to-intermedia
454.
by minitech 7y ago
By connecting to open wi-fi, supposedly, maybe with the help of some kind of dark pattern: https://www.reddit.com/r/security/comments/bpjky4/worried_ab...
455.
by minitech 7y ago
That version already doesn’t work… once you fix the arrow function, there’s also the issue that most engines today don’t support proper tail calls, so nothing recursive will be portable. (But if it did, you could save a lot of characters by
456.
by minitech 7y ago
No, not in mice. The trials were on people in Burkina Faso.
457.
by minitech 7y ago
It’s the way the article mentions bacteria that’s wrong. The wording and capitalization really do imply that ivermectin is a species of bacteria.
458.
by minitech 7y ago
For me, it’s better at avoiding mistakes. The major one is separating bytestrings from strings, of course. Comparison operators not assigning a default order to different types (1 < "2" is now an error) is great. Division is mo
459.
by minitech 7y ago
When you say you “asked”, do you mean you had to write a message to someone requesting deletion? Because that counts as hard. Ideally the site should respect your use of a simple button.
460.
by minitech 7y ago
> see 'tape' and how it's 'the only test framework which supports TAP' because the tape author invented TAP What? The tape package on npm? As far as I know, that was made by substack (James Halliday), whereas TAP
461.
by minitech 7y ago
> Can you really say you're more productive than the people who open their lid and just work? - I do open a laptop and just work. Using configuration that I’ve already created to suit my work. - Other people is a big group, and one
462.
by minitech 7y ago
> I've lost a day's work to a mistyped "git revert HEAD~n" Mistyped as "git reset --hard HEAD~n"? git-revert is usually pretty nondestructive…
463.
by minitech 7y ago
Who mentioned straws?
464.
by minitech 7y ago
> The article can't even render fonts correctly. The article, or what you’re using to view it? Falls back fine for me.
465.
by minitech 7y ago
> If nothing else, a scanner could at least find out with some reasonable certainty that an app is trying to obfuscate something. Only if the developers did a bad job of hiding it. You can tell a positive from decrypted traffic, but not
466.
by minitech 7y ago
The SSLKEYLOGFILE approach is a good one; the warning being considered for Chrome just makes it clear when it’s in use. (Not that you could detect it by inspecting decrypted HTTPS if a closed-source app really wanted to secretly upload your
467.
by minitech 7y ago
Blocking third parties with a tool like uMatrix will get you some of the way. Then you can generally avoid their products and block them at the top level manually, although it might be hard to avoid visiting websites that use Google Cloud,
468.
by minitech 7y ago
> FUD. Why should we want "behaves exactly as the browser does", when browsers (in fact, mostly Google's) are in fact turning against their users? To avoid introducing vulnerabilities, the way lots of antivirus MITMs do, f
469.
by minitech 7y ago
Enable SysRq and use SysRq+F. https://news.ycombinator.com/item?id=16561746
470.
by minitech 7y ago
> because someone might discover it someday? because many people will discover it immediately by looking at the patch.
471.
by minitech 7y ago
> Who gets to judge the value of content? The user. That’s the context – the user deciding who gets their money. > And how can it have "negative value"? Zero value, plus the time it took to find out that it had zero value. &
472.
by minitech 7y ago
Gigantic waste of energy. Why drain my battery to not see ads when I can just use an adblocker? Ignoring these, why reward longer content, content I happen to keep in the background, or content I happen to leave in the foreground while away
473.
by minitech 7y ago
Do you often give DoS threats arbitrary code execution or the ability to set environment variables? Because there’s no need to bother with hash collisions to DoS yourself. while True: pass As for finding the seed with a SAT solver: n
474.
by minitech 7y ago
> HMAC is bulletproof … with a well-typed library. Otherwise a lot of people end up comparing it in a timing-unsafe way. :(
475.
by minitech 7y ago
> Still not secure if you can read out the seed. Which you do as an attacker by… asking politely? Or is it easy to leak the seed by accident? In other news, there’s a relatively low-cost attack on AES when you know the key.
476.
by minitech 7y ago
We don’t want users to trust the green check, because it never meant you could trust a site. We do want users to distrust plaintext, because it means the café you’re visiting can steal your password. I don’t see how this is a good criticism
477.
by minitech 7y ago
> If I was a female I’d be pretty pissed if they forced me to use a urinal for men. This is what I was replying to. Bit of a confusing way to say “enter a room containing a urinal” if that’s what you actually meant.
478.
by minitech 7y ago
Forcing women to use urinals is very much not a thing that happens.
479.
by minitech 7y ago
They already require consent. You probably know that. Not sure what the joke is.
480.
by minitech 7y ago
sudo tip: `sudo -i`!

More ›