tmcw

13 ms·

91.
by tmcw 6y ago
56% of billionaires build. 44% of billionaires inherit.
92.
by tmcw 6y ago
Yes, use per-user domains to make sure that things like localStorage, which is domain-associated, is not leaked from one script to another.
93.
by tmcw 6y ago
Yep: custom domain, iframe security policies. Communicate with the iframe via postMessage only, be strict about message origins, and have limited trust in those messages, too. Strict CSP policies and use the 'sandbox' iframe attri
94.
by tmcw 6y ago
https://sfmayor.org/sites/default/files/CSF_Budget_Book_June... Trains, streets, cops, hospitals, public works, 31k employees, and so on.
95.
by tmcw 6y ago
Most languages have one kind of "object" used for data and another kind used for instances of classes associated with OO programming. JavaScript traditionally uses one kind for both (traditionally, in that there is now an alternat
96.
by tmcw 6y ago
I commit my full force of being to craft the highest quality posts on my personal blog for you, this is really 1% stuff.
97.
by tmcw 6y ago
Fair point, I should have cited that. From snyk: https://www.google.com/search?hl=en&q=prototype%20pollution%... You'll see prototype pollution CVEs in such libraries as jQuery, Lodash, handlebars, ajv (and transit
98.
by tmcw 6y ago
Generally agree with this: semver makes a lot of sense for code libraries, makes almost no sense for anything else. CSS, styles, and user-facing documents have no concept of compatibility without change, because they have no real implementa
99.
by tmcw 6y ago
Thank you!
100.
by tmcw 6y ago
I only use Jekyll for macwright.org - haven't really used Hugo or Gatsby much.
101.
by tmcw 6y ago
Okay, I couldn't find a way to change the layout when text size is controlled so I'll change it for all viewers if they're using a small device (under 640px wide, scaled). It works in my testing on an iPhone, but let me know
102.
by tmcw 6y ago
Thanks for identifying that issue. I'll try to find a solution for folks who are using iOS + increased font sizes. It's going to be a little tricky, so if anyone has found a solution let me know - I haven't been able to find
103.
by tmcw 6y ago
The PHC string format https://github.com/P-H-C/phc-string-format/blob/master/phc-s... (used by stuff like Rust's LibreAuth/BoringAuth) is a less fancy but probably better-suited-to-passwords so
104.
by tmcw 6y ago
https://macwright.org/ ‘published since 2011.’ Topics change gradually. Mostly things I do, read, and like.
105.
by tmcw 6y ago
How to write a silly post about JavaScript dependencies: - Don't mention other languages, lest you reveal that most of them have similar dependency bloat problems. - Talk about devDependencies and dependencies without considering how t
106.
by tmcw 7y ago
I've used Elm on a few projects - most recently oldfashioned.tech - and it's a lovely language. I read this article expecting the word 'ethical' to eventually point to something and it never did. The author wanted a diff
107.
by tmcw 7y ago
[author]: My preferred solution (and the one I use in ss) is an epsilon, but I see how you could get the impression that stdlib is the best way. I've updated it with an addendum to that effect and will see if I can edit it to clarify.
108.
by tmcw 7y ago
> I'm assuming it isn't just a matter of grabbing a logo (jpg) from Facebook. I assume iD is sending (meta) data about the person who is simply browsing the map to Facebook (i.e. without disclosing that info is being sent or wh
109.
by tmcw 7y ago
Fairly accurate! A few corrections: > Note that the current developers and maintainers of iD were not involved at this time, and I'm not even sure of any of the original devs are still with Mapbox. At the time I contributed my first
110.
by tmcw 7y ago
I completely agree with this article.
111.
by tmcw 7y ago
Amazing, now we just need to make a full body suit of this material so it works with the main type of urban collision, which is being killed by a reckless SUV driver, or pulled under a box truck and crushed under the back wheels.
112.
by tmcw 7y ago
HN threads focus on equity/salary tradeoffs, particularly for people joining a startup. This situation - where nobody was getting a salary 'cut' or negotiating a split, but where a startup was issuing equity to existing emplo
113.
by tmcw 7y ago
OpenStreetMap contributors haven't been happy with anything, for the last 15 years.
114.
by tmcw 7y ago
This was a simple typo; I accidentally used a sound-alike. It's fixed in the post, thanks for noting it!
115.
by tmcw 7y ago
Is it unusual that on $313M ARR, the CEO’s yearly compensation, including options, is… $44.9M? CEO pay is 15% of total revenue?
116.
by tmcw 8y ago
The top results are from lead tech editors at the guardian and the Wall Street Journal.
117.
by tmcw 8y ago
These gender stereotypes are the reason why this voice exists.
118.
by tmcw 8y ago
Not everyone on the orange website is a ‘free speech absolutist’, or foolishly conflates freedom of speech with platform access. Good on them for finally cracking down on bad ideas.
119.
by tmcw 8y ago
The Hacker News crowd is very concerned about people "inventing something that doesn't need to be invented" when that thing strays anywhere near social and cultural issues rather than a shiny new startup or web framework. If
120.
Observable: The User Manual / Observable(beta.observablehq.com)
2 points by tmcw 8y ago|0 comments

More ›