thayne

54 ms·

931.
by thayne 1y ago
Suppose amount of money an employer is willing to pay for an employee is $100,000. For the employer, if there is a $20,000 payroll tax, then the employer would only pay the employee $80,000 to keep the total cost at $100,000. If the employ
932.
by thayne 1y ago
It doesn't actually matter that much who actually writes the check to the government (although in the US, both parties pay taxes). Either way, the total cost of employment is higher for the employer than the after-tax income of the emp
933.
by thayne 1y ago
Joe's plumbing doesn't have to pay those taxes. Operational costs, including paying employees for normal operations, is deductable. But with the change, the cost of R&D employees is now only partially deductible (right now, yo
934.
by thayne 1y ago
In many parts of the US there are sales taxes, but they are state or local taxes, not federal taxes.
935.
by thayne 1y ago
The company already pays payroll taxes on those salaries, and the employees pay income taxes. And the people hurt by this aren't the shareholders or top executives, it's the rank and file workers getting laid off, losing benefits,
936.
by thayne 1y ago
Are these repos forks of projects that already set up dependabot? Or maybe created from templates that included dependabot configuration?
937.
by thayne 1y ago
It depends. GET requests are assumed not to have side effects, so often don't have a preflight request (although there are cases where it does). But of course, not all sites follow those semantics, and it wouldn't surprise me if p
938.
by thayne 1y ago
> Even if they know what “localhost” means, most users have no idea which servers are running on localhost on each of their devices, so they don’t know the risks. It could be worded as something like "connect to applications running
939.
by thayne 1y ago
That doesn't mean that any ergonomic way to handle errors is necessarily an exception system. Rust's ? operator is more ergonomic than go's error handling, but it is definitely not an exception system.
940.
by thayne 1y ago
Is it 3x as important? Because currently, for a single line of happy path code you often have 3 lines of error handling code. And while handling errors is important, it is also often trivial, just optionally wrapping the error and returning
941.
by thayne 1y ago
It seems to me like a non-localhost site making requests to localhost, or a link-local address should require a permission granted by the user.
942.
by thayne 1y ago
Something like: x := FallibleFunction() ? err -> return fmt.Errorf("something happened %v", err) Doesn't really change that, but significantly reduces the amount of noise from error handling boilerplate. And (most
943.
by thayne 1y ago
The proposals are not backwards incompatible. And just because you get used to something doesn't mean it is good. And FWIW, my hatred of go error handling has not diminished with increased usage.
944.
by thayne 1y ago
Error handling is the thing I hate the most about go. And none of the serious proposals I've seen would remove your ability to continue using `if err != nil`
945.
by thayne 1y ago
The proposals aren't reinventing exceptions. They are just making more ergonomic syntax for doing the same thing go error handling does today.
946.
by thayne 1y ago
If go had started out having different syntax for error handling, would these same people request that it change to what go currently does? Or is this just resistance to change, and wanting to keep what they are used to? I suspect it is the
947.
by thayne 1y ago
Maybe they should be.
948.
by thayne 1y ago
I like a lot of things about this, and it addresses some of my complaints about go. But I'm confused on why strings use ascii encoding instead of utf-8. What if you need non-ascii characters?
949.
by thayne 1y ago
It looks like it addresses some of go, including: - a better type system, that includes union types, and makes types non-nullable by default - pattern matching - designed with generics from the beginning - try/catch error handling. Thi
950.
by thayne 1y ago
It seems like the Google Search API quotas would be a problem, unless they have some special deal with Google.
951.
by thayne 1y ago
Yes, it's a partial mitigator, but it isn't as complete of a solution as a CDN, for a number of reasons. For one thing, with Anubis your server is still responding to requests, so a full scale DDoS could potentially take you down
952.
by thayne 1y ago
Anubis is affective against certain kinds of bots and abuse, but wouldn't be that affective against large scale DDoS attacks. And it does have a negative impact on usability, as users have to wait for the browser to do the proof of wor
953.
by thayne 1y ago
I don't entirely disagree, but at the same time, La Liga shouldn't have this much power to shut down large swaths of the internet because of a handful of piracy sites, that probably only have a minimal impact on their income anywa
954.
by thayne 1y ago
I agree with most of what you said, but json's numbers are problematic. For one thing, many languages have 64-bit integers, which can't be precisely represented as a double, so serializing such a value can lead to subtle bug if it
955.
by thayne 1y ago
No the author seems opposed to the idea specification of ACME, not just the implementation of the clients. And a lot of the complaints ultimately boil down to not liking JWS. And I'm not really sure what she would have preferred there.
956.
by thayne 1y ago
The reason json is a good format for ACME isn't that it is easy to read and write by hand[1], but that most languages have at least one decent json implementation available, so it is easier to implement clients in many different langua
957.
by thayne 1y ago
Your example uses s-expressions, not canonical s-expressions. Canonical s expressions[1] is basically a binary format. Each atom/string is prefixed by a decimal length of the string and a colon. It's advantage over regular s expre
958.
by thayne 1y ago
It's a "we want to sell something, but non-profits aren't allowed to do that" trick. And it means the for-profit subsidiary has to pay normal taxes. OpenAI is structured the same way, so they can sell access to their mod
959.
by thayne 1y ago
So what? For many people, having to buy new hardware to use it means it isn't a viable alternative browser.
960.
by thayne 1y ago
Mozilla's track record of shutting down projects is almost as bad as Google's. I wouldn't count on any of their non-Firefox projects lasting very long.

More ›