treve

13 ms·

151.
by treve 2y ago
Eek. That's how I get my keepass database on my phone. Anyone else in this predicament?
152.
In the future using top-level await might be a BC break in Node(evertpot.com)
6 points by treve 2y ago|1 comments
153.
Discovering features and information via HTTP OPTIONS(evertpot.com)
3 points by treve 2y ago|0 comments
154.
by treve 2y ago
Get a free timer and find out!
155.
by treve 2y ago
If you only ever support HTML, but not the wider web linking syntax / IANA Link Relationships registry that might be fine, but I don't think it's ideal for a new protocol.
156.
by treve 2y ago
rel is also broken. It should probably use a dash instead of a colon, unless octo: is intended to be a new uri scheme.
157.
by treve 2y ago
I'm curious where you're having trouble. It seemed to me that this was quite bad at first (completely broken) and every application had to add explicit support, but I've had no problem with Firefox, Zoom and Slack recently. J
158.
New Structured Fields RFC Released(rfc-editor.org)
2 points by treve 2y ago|0 comments
159.
by treve 2y ago
Many things never need explicit support, because good HTTP citizens allow unknown HTTP methods (and treat them basically as POST). True for for example PHP and fetch(). Node.js needs explicit support, this got added a few months ago. There&
160.
by treve 2y ago
You either didn't read what I wrote, or are homing in on the things that are ambiguous vs the things that aren't. (or I'm just a bad writer). One thing is not ambiguous: The intent, as stated by one of the primary authors of
161.
by treve 2y ago
No, the key is not just the URI. It's potentially the URI + method + Some request headers + some response headers. The Vary header lets you control which request headers should be considered. This method specifically includes the reque
162.
by treve 2y ago
This is not a correct interpretation of the spec, as far as I can tell. I did some more research on this + primary sources on my blog if you're interested in why and why people are confused about this: https://evertpot.com&#
163.
by treve 2y ago
Servers can return something like: Link: </foo>; rel="alternate" type="application/json" You could return multiple of these as a response to a HEAD request for example. You could also use the Acc
164.
by treve 2y ago
With a request body you can also rely on all the other standard semantics that request bodies afford, such as different content-types, content encoding. Query parameters are also often considered less secure for things like PII and (less im
165.
by treve 2y ago
I thought the removal of 3rd party cookies was also reversed.
166.
by treve 2y ago
If your country has decent consumer rights there's probably another way to follow-up!
167.
by treve 2y ago
The OSI model hasn't been accurate representation of ip networking since pretty much day 1. It was made specifically for a different protocol, but in the stack we use today some layers are better split up in 2, some protocols exists in
168.
by treve 2y ago
Why are you dismissive of security-related issues?
169.
by treve 2y ago
Yet another open source OAuth2 server (competing with auth0 and such): https://github.com/curveball/a12n-server
170.
by treve 2y ago
This is mostly correct, but one thing that's worth pointing out is that CORS doesn't protect anything, but it 'loosens' the protection that the browser has by default. The S in CORS stands for sharing, not security.
171.
by treve 2y ago
That's actually a total relieve. I must have misinterpreted this change when it happened.
172.
by treve 2y ago
I thought historical data in the tz database was recklessly deleted a few years ago. (To my horror)
173.
by treve 2y ago
Being able to contact a dev to undelete a record from a database does sound like a thing that's hard to scale. If this happens a lot, it could be worth examining if there's a UX problem.
174.
by treve 2y ago
You can make those numbers show up natively in Firefox too using the developer tools. (Not sure about chrome)
175.
by treve 2y ago
It's also way fewer syllables!
176.
by treve 2y ago
Absolutely wild how many of these there are now! I feel like I'm reading an announcement like this every few weeks.
177.
Investigating corrupt Winamp skins(jordaneldredge.com)
615 points by treve 2y ago|145 comments
178.
by treve 2y ago
Many compliance frameworks require tools like crowdstrike. If you don't have endpoint detection, no SOC2. No SOC2, and you'll be excluded as a vendor from many places
179.
by treve 2y ago
Expectation failed is specifically a response to an unknown value for the Expect header.
180.
by treve 2y ago
Given how relatively easy it is to run a redirect service, and how many links this will break this is vandalism.

More ›