nchmy

25 ms·

571.
by nchmy 1y ago
My question, though, is who are the 5% of users in this case who are using some arcane browsers? Surely that's largely a choice, physical disabilities are not. It doesn't seem unreasonable to say to those folks "were evidentl
572.
by nchmy 1y ago
I'm confused. In my mind, you only really need to keep the server secure, as that's where the data is. Auth cookies and csrf protections (eg Sec-Fetch-Site) are both used towards protecting the server from invalid requests (not lo
573.
by nchmy 1y ago
I don't think this is accurate. As your parent comment said, Csrf defenses (tokens, origin/Sec-Fetch-Site) serve a different purpose from Auth token/jwt. The latter says that your browser is logged in as a user. The former sa
574.
by nchmy 1y ago
Thanks for confirming. I don't know that it has to be framed as a "business perspective" though. I'm a solo dev for a non-profit project, so ignoring the 5% is just a matter of pragmatism. I most defintiely do not care a
575.
by nchmy 1y ago
To elaborate/clarify a bit, we defend against curl with normal auth, correct? Be it session cookies or whatever. That plus origin/Sec-Fetch-Site (and tls, secure cookies, hsts) should be reasonable secure, no?
576.
by nchmy 1y ago
I must be missing something. What does JavaScript have to do with this? My understanding is that csrf is about people getting tricked into clicking a link that makes, for example, a post request to another site/origin that makes an und
577.
by nchmy 1y ago
I don't understand - the article is literally about origin/Sec-Fetch-Site
578.
by nchmy 1y ago
I don't use rails. How did they solve it?
579.
by nchmy 1y ago
I deeply appreciate this thorough review of CSRF protection via headers. I've been looking into the topic to see if I can get rid of csrf tokens, and it seems like I can now - if I ignore/don't care about the 5% of browsers t
580.
by nchmy 1y ago
Jj is just simple to use - especially if you use it with jjui. It would never occur to someone to hit the nail with the handle. Conversely, git requires a whole apprenticeship before you can be effective. Moreover, there's MANY git &qu
581.
by nchmy 1y ago
This might help you manage different versions of different tools https://mise.jdx.dev/ Mise and jj (and jjui) are my favourite tools, by far.
582.
by nchmy 1y ago
what im most impressed by when I read the comments to jj-related threads is how many people are handwriting assembly code. I come to this conclusion because there's always a large amount of people saying "if you dont understand, l
583.
by nchmy 1y ago
you might consider trying again, but do so with jjui ( https://github.com/idursun/jjui ) - very similar concept to lazygit and makes working with (the already simple) jj even more seamless and intuitive
584.
by nchmy 1y ago
I think you would love jj then. It is dead-simple to just move things around - branches/bookmarks, commits and even single lines of code within a diff. jjui ( https://github.com/idursun/jjui ) makes it all that much
585.
by nchmy 1y ago
use jjui - its an absolute pleasure to use as you dont need to know anything beyond arrow keys and some keyboard shortcuts (which you can also find in the ? help menu). https://github.com/idursun/jjui If it doesnt do a
586.
by nchmy 1y ago
Are you writing everything in assembly? If not, your argument has no legs. Moreover, you can use jj almost completely seamlessly with a git repo - including PRs etc to github. I do it daily and no one is the wiser.
587.
by nchmy 1y ago
one of the better jj writeups. People, just TRY it out.
588.
by nchmy 1y ago
Perhaps dgraph if using go. Or surrealdb, though it's the opposite of small - it's an all in one, do everything db. I'm excited to see how it matures
589.
by nchmy 1y ago
Im skeptical about this. PHP Opcache already loads and compiles all php files into ram, such that it only happens once (or again when theyre modified). Its the single most useful thing you can do with a wordpress site (other than running on
590.
by nchmy 1y ago
Doesn't this also apply for non-AI problem solving as well?
591.
by nchmy 1y ago
I wasn't aware of that rule. I'm quite curious as to why it exists... If you did read it, where did your comment come from, given that allegation was never used in it? Perhaps the original sin is the title for this post broke the
592.
by nchmy 1y ago
nope. the title here is just a fabrication, and it doesnt seem like you read the actual article
593.
by nchmy 1y ago
Are you aware that "allegations" is never used in the actual post?
594.
by nchmy 1y ago
Why? The original title is "Greedy Developer?" and HN's rule is to "Otherwise please use the original title, unless it is misleading or linkbait; don't editorialize." https://news.ycombinator.com&#x2
595.
by nchmy 1y ago
likening this to photomatt - who has been doing shady, extortionate, illegal stuff for 10+ years, and then actively spent 4+ months doing everything he could to ruin himself and wordpress - is laughable
596.
by nchmy 1y ago
There's literally no ad hominem where you claimed there was. That itself is ad hominem. I'll go further this time - not only do you not understand open source licensing or ecosystem even slightly, but it's genuinely concernin
597.
by nchmy 1y ago
Not at all, for many reasons. HTMX doesn't do any client side interactivity. You need something like alpinejs for that. And alpine doesn't have signals, which are super useful (when used judiciously) Datastar uses sse rather than
598.
by nchmy 1y ago
I'm extremely interested in this sort of use case and am regularly disappointed to find that very few others are. And even fewer are interested in doing it in a hypermedia-first way. There's two ways this could be approached. 1. J
599.
by nchmy 1y ago
99% is already free. That seems pretty altruistic to me. And they don't really care if it "pays off" - it's not meant to
600.
by nchmy 1y ago
Sorry, I'm not understanding what relevance some HN comments have to do with the link I shared...? Though, for the record, I agree with everything that person - and other sibling commenter - wrote. It is quite obvious the people were n

More ›