rictic

35 ms·

271.
by rictic 7y ago
Trusted Types lets you do exactly this! You explicitly list the trusted types policies that you allow on your page, and if none of them declare the createHTML method then there is no way to set innerHTML (even inside some a new version of s
272.
by rictic 7y ago
Trusted Types are definitely designed with safe-by-construction APIs in mind. A primary use case is to write a safe-by-construction library that internally declares and uses a Trusted Types Policy that your CSP headers declare that they tru
273.
by rictic 7y ago
Trusted Types are good for most cases, but the case from the PDF is one where you're given a blob of untrusted HTML that you do still want to render (an HTML formatted email). Trusted Types will prevent a dependency or careless develop
274.
by rictic 7y ago
I don't know if you intended to, but it comes across as arrogant and dismissive. Dealing with asynchrony has been the an issue in JavaScript from the beginning, as the fundamental model is event driven. There are a number of mechanisms
275.
by rictic 7y ago
Do you mean the ability to dynamically allocate executable memory? That's not necessary for shipping a browser engine (though performance would suffer, as that's how all modern JS VMs work, via jitting JS to machine code).
276.
by rictic 7y ago
1. Use discriminated union types: https://www.typescriptlang.org/docs/handbook/advanced-types.... - TypeScript these days sticks with the runtime semantics of JavaScript, and discriminated unions are a very natura
277.
by rictic 7y ago
I think the interesting thing about a cryptocurrency working with keybase is that it is a solid solution to the "am I sending this money to the person I think I am" problem. If I owe someone $20, I might or might not know their ve
278.
by rictic 7y ago
I ran the production build of https://github.com/reasonml-community/reason-react-example/t... and ran the JS bundle through gzip -9 to get the 56KB number.
279.
by rictic 7y ago
At Google for 9 years, startup before that. Roughly half my time at Google I worked on individual products, and the other half on open source infrastructure (common libraries, compilers, linters, IDE plugins, etc). The biggest thing I'
280.
by rictic 7y ago
I'm sorry you were mocked, it's a good question. That's an option at the individual site level – and it may be possible to use a CSP policy to enforce that no cross-site requests are made. You can definitely use CSP policy to
281.
by rictic 7y ago
Ambulances save some number of lives. Ambulances are involved in some number of fatal accidents. Should ambulances be banned? Subsidized? I can imagine different ways of analyzing the question, but asking "what would you say to the fam
282.
by rictic 7y ago
As someone who's spent a lot of time answering questions both on stackoverflow and in similar environments, often you really do need to get more context on what the person is actually trying to do in order to give the best answer. I tr
283.
by rictic 7y ago
I love languages, and I want to use languages with powerful, sound type systems on the web, but I don't want to do it at the cost of shipping much larger amounts of code, making for a slow initial render. A vanilla JS todomvc app is 10
284.
by rictic 7y ago
In my experience, if the patient does not have a certain level of rapport with the counselor, the effectiveness is greatly reduced because neither party can be confident that they're effectively communicating. Communicating across cult
285.
by rictic 7y ago
The solution to the Fermi paradox can't be be something that most civilizations fail, it has to be a challenge that's impossible to pass. The Fermi paradox posits that there should have been huge numbers of spacefaring civilizatio
286.
by rictic 7y ago
The implementations that are moving at all are keeping up fine. The biggest question for web developers is whether they support IE. If you do, you're stuck on ES5. If not, you can use most features from ES2015 and up. Once the next rel
287.
by rictic 8y ago
Network effects create counterintuitive situations. If you pick a random one of your friends, that person probably has more friends than you do (this is true! for most values of "you" at least). I bet that it's likewise true
288.
by rictic 8y ago
> You can't get information out of SD video that wasn't there before with upscaling, so the algorithm is just interpolating. In the fully general case of arbitrary video this is true, but in practice it isn't. You can gath
289.
by rictic 8y ago
New account names (<2 weeks old) are colored green.
290.
by rictic 8y ago
https://agoranomic.org is one of the biggest and longest lasting games of Nomic. If you proposed a rule change that gave you infinite points, the other players would vote it down, because it's easy to see that that rule rew
291.
by rictic 8y ago
> and even if you have your package file and lock file locked to exact versions. (i.e. 2.0.0 exact, not ^2.0.0) Wait what? Are you sure about that part? That's a violation of npm's semver constraints https://semver.n
292.
by rictic 8y ago
It only counts as a redundancy site if the colony could survive without Earth. What's the minimum Martian colony size that's self sufficient? Self sufficient doesn't just mean the ability to create sufficient food, water, air
293.
by rictic 8y ago
http://www.hyrumslaw.com/ With a sufficient number of users of an API, it does not matter what you promise in the contract: all observable behaviors of your system will be depended on by somebody. It&#x
294.
by rictic 8y ago
If you got to the point of having a tree, but found them clumsy to work with, the first thing I'd suggest is to play with an AST explorer. https://astexplorer.net/ is quite good. Picture the task of what you want to do
295.
by rictic 8y ago
It takes longer, but the best presentation of this kind that I've given was from taking video of a live coding exercise and editing it extensively (removing typos, adjusting speed). Then split it into sections and made a sequence of sh
296.
by rictic 8y ago
I'd summarize it as: 2PC adds latency, throughput, and scalability constraints due to the coordinator role. If we drop an assumption (any transaction can be aborted at any time before it is committed), we can reduce coordination and ge
297.
by rictic 8y ago
More interesting would be humanoid robots that could win at these sports. The state of the art today is a long ways away from being able to compete in any of the listed sports. Baseball is probably closest because with sufficiently good pit
298.
by rictic 8y ago
There were strong suspicions of parallel construction in the Silk Road case, where the US government was able to track down the Silk Road's servers despite its use of TOR. One article: https://krebsonsecurity.com/2014&#
299.
by rictic 8y ago
> But the measured reality is that home ownership is strongly correlated with wealth Owning a private jet is far more strongly correlated with wealth, but that doesn't mean it's a good investment.
300.
by rictic 8y ago
AIUI, investing in the stock market has a higher expected return with similar risk over a 30 year period. Owning a home is putting a large portion of your net worth into a single asset. From an investment perspective, that goes against the

More ›