pfooti

51 ms·

451.
by pfooti 11y ago
The license in package.json seems to refer to http://www.wtfpl.net/
452.
by pfooti 11y ago
This is a pretty cool exploit, and of course reinforces one of the most important rules of writing software. Don't trust users. The center of what this kid pulled off to get his game on the front page with no Valve oversight basically
453.
by pfooti 11y ago
I feel like, with the left-pad fiasco, the node dev world (and the broader programmer community) is rediscovering the web of trust that makes open source feasible. I mean, if I distributed a library through some other package manager system
454.
by pfooti 11y ago
While I agree that giving people a chance to disable install scripts in order to audit them before / after running is a good idea, I also think it's somewhat optimistic of you to think that this would actually help. There's p
455.
by pfooti 11y ago
There are a surprising number of npm packages that provide a wrapper around a native library to expose bindings to node devs. I use node-sass on the dev side and mmmagic on the production side, both of which require the presence of binaries
456.
by pfooti 11y ago
The comment was in response to your last question "am I being colonialist?", and my response was intended to point out that the problem isn't really "here's some free stuff", but "here's some stuff th
457.
by pfooti 11y ago
Kinda depends. Do the people in the UK who use this service have to abide by laws of other countries, laws that don't exist in the UK? That's the problem here, right?
458.
by pfooti 11y ago
I think there's a fundamental difference between, say [0] (thoughtful, nuanced), and [1] (just plain silly). The initial posts are all worthwhile and interesting, with the latter clearly being satire. It would be even funnier if the OP
459.
by pfooti 11y ago
I kind of disagree with your central claim that this is going on. But that's my sociologist head rearing up. There is, of course, a "wider HN community", but that's probably the community of people talking about the appr
460.
by pfooti 11y ago
postgres-9.4 is available in ubuntu 14.10 and later. If you're in 14.04 or 12.04 (current LTS versions), you have to use the postgres-maintained source. The process isn't super-simple. Node moves fast, sure. I'm not sure I ag
461.
by pfooti 11y ago
I'm pretty sure that attitude is called "paternalism". Self-regulation works better when it's self-directed, as opposed to other-directed (as in, someone else doing the regulation). `I shouldn't do ${foo} because
462.
by pfooti 11y ago
If you do that, won't you have to increment your version number? Because with npm, except for left-pad due to oddities of the npm-specific ^ semver operator, you always have to increment your version and you can always pin earlier vers
463.
by pfooti 11y ago
Pretty sure you have to urlencode hashes, don't you? What happens if you do ch=%23?
464.
by pfooti 11y ago
So, I suppose you could do something like this instead. function leftPad(str, width, pad = ' ') { const actualWidth = Math.max(str.length, width); return `${pad[0].repeat(actualWidth - str.length)}${str}`; }
465.
by pfooti 11y ago
Completely agree here - the problem isn't micro-modules. It's partly just a lacking standard library for javascript and largely just exposing issues in npm that the community was pretty ignorant of until just now. The whole "
466.
by pfooti 11y ago
Sensationalist stuff. isArray doesn't depend on anything, but lots of other packages depend on it. Why? Because it's actually kind of hard to tell the difference between an array of things and an object with integer keys. The Ar
467.
by pfooti 11y ago
This looks pretty neat - it's a clever idea to do a resin-based 3d printing system and use a smartphone as the light source for hardening the resin. That said, the resin does not look cheap at all. At kickstarter levels, it's arou
468.
by pfooti 11y ago
Precisely - this seems (or seemed originally) like a best-case scenario for Justice: it's a terrorist's iPhone, rather than a drug dealer's or some other "lesser" criminal's, where the public's fear might
469.
by pfooti 11y ago
Wow, and on top of everything else, sparkpost just upgraded their free tier from 10k/mo to 100k/mo sends. That's pretty huge, as 100k/month gets you a lot of runway before you need to really start paying for things. Plus
470.
by pfooti 11y ago
Ooooh, that would be pretty handy. I've been relying on good old "please reply above this line" to parse inbound emails, precisely because I didn't want to muck around with ML to infer user intent (I reeeeally wish quote
471.
by pfooti 11y ago
It would be interesting to see in this article two features that I find are pretty rad that mandrill supports: inbound email processing and api-side templating. Specifically, we have some webhooks set up so whenever someone emails blah@exam
472.
by pfooti 11y ago
It's not just javascript, it's also CSS (well, actually less). I disagreed with where atom put some of its controls, and I just put some CSS in to move them. It was easy. I understand the question about "why use atom when st3
473.
by pfooti 11y ago
I'm quite sympathetic to your position. I'm someone who left software in the early 00s to take a career in academia only to see my Java and old-style C++ experience become more and more obsolete. I luckily managed to wiggle back i
474.
by pfooti 11y ago
If it was the case that emojitracker was reselling that api access, I could see cutting it off. But I think that a rich, robust ecosystem would flourish more around a platform that provided free API access to noncommercial projects. Of cour
475.
by pfooti 11y ago
If only there was a standardized system for installing frontend and backend javascript libraries so that the devops people don't need to learn about the specifics of each library. We could call it something like the "package manag
476.
by pfooti 11y ago
I think the central issue here is: javascript has only recently turned the corner of utility in most environments. It used to be the toy scripting language that you used in order to tie form fields together. I used javascript back in the da
477.
by pfooti 11y ago
Sure, WASM will make things better, until you have to deal with library and dependency management in your WASM-llvm-deploy toolchain. I get that the javascript world moves pretty fast. On the other hand, what you seem to be saying is, &qu
478.
by pfooti 11y ago
FWIW, I have ghostery (36 trackers blocked on the parent) and am able to see the post content. So it may be some configuration problem on your end.
479.
by pfooti 11y ago
Yes, absolutely. I write a lot of stuff that uses Google OAuth in order to to interact with google apps on behalf of a user (generate calendar events from forum posts, etc). I ask for the auth scopes separately and my code makes it clear wh
480.
by pfooti 11y ago
Fixed that for you: if (unique_device_id != SAN_BERNARDINO_DEVICE_ID) { goto fail }

More ›