woogley

9 ms·

31.
by woogley 8y ago
Personally I prefer uMatrix. It has a nice CSS-ish quality to it, e.g. you can whitelist random subdomains like *.cloudfront.net _if_ the root page is a domain you trust already. It's still a pain to get rolling at first but it feels m
32.
by woogley 8y ago
Also because Google Sheets is a canvas implementation, not DOM
33.
by woogley 8y ago
thank you for this test!
34.
by woogley 8y ago
I have never heard of this. Can you share a link that goes into detail about this behavior? I don't immediately see anything on MDN's same-origin page talking about it
35.
by woogley 8y ago
I'm expecting/hoping for this as well. GCP already has something like this in alpha - https://services.google.com/fb/forms/serverlesscontainers/ More info on it here in "Serverless containers&q
36.
by woogley 8y ago
the advertising subset of that patreon exists because of the popularity of the open source project he develops full-time.
37.
by woogley 8y ago
> Patreon makes him $3300/mo. So that appears to be the ceiling for all of us. Hopefully it becomes an average, not a ceiling. We're not all going to make the next Vue, but that guy is getting $16k/mo https://ww
38.
by woogley 8y ago
1B (one billion), not 18
39.
by woogley 9y ago
There's a culture of testers who believe 100% code coverage is important enough to include "private" implementations, and will happily break encapsulation rules for sake of hitting 100% coverage.
40.
by woogley 9y ago
Web Audio supports it: https://developer.mozilla.org/en-US/docs/Web/API/BiquadFilte... See how it's used here: https://github.com/captbaritone/winamp2-js/blob/master&#
41.
by woogley 9y ago
The catalyst of such a shift could be a very good thing, e.g. exceptional internet speeds everywhere
42.
by woogley 9y ago
Depends on the team. I would not approve anything other than using a runtime library or importing 'core-js/fn/array/is-array' from the wonderfully modular core-js: https://github.com/zloirock/co
43.
by woogley 9y ago
For those who haven't seen it, the development story behind Crashlands is very inspiring: https://www.youtube.com/watch?v=LQHtOg46eOw
44.
by woogley 9y ago
No, entitlement is demanding all sources conform to OP's preference
45.
by woogley 9y ago
It's not entitlement, it's just an opinion. OP said they move on to a different source with their preferred format.
46.
by woogley 9y ago
Yes, and it has a CSS-like flexibility. E.g. you can allow *.cloudfront.net _if_ the top-level site is one you trust
47.
by woogley 9y ago
> You claim to have tech knowledge, but are not able to turn on this simple security setting GP didn't say _they_ can't enable it after reading the help page. I think they are implying that the very detailed help page looks lon
48.
by woogley 9y ago
Customer Support (well, humans in general) is the biggest threat to security, unfortunately .. :( This one comes to mind, I think I remember an Amazon-related story along the same lines .. https://www.macrumors.com/2012&#x2F
49.
by woogley 9y ago
Thank you, I didn't know this, and it was something I was judging against CF for years. It makes me a little uncomfortable though that there aren't any offline recovery codes in the event the TOTP device is lost/stolen/e
50.
by woogley 10y ago
You're speaking as if table layouts are equivalent to CSS grid layouts. They're not, otherwise `display: table-cell` would have been enough.
51.
by woogley 10y ago
I heard about https://weex-project.io/ by way of the Vue docs. There might be other projects too
52.
by woogley 10y ago
This brings us back to current status, as it defeats the purpose of normalizing arbitrary CDNs with the hash
53.
by woogley 10y ago
But then you're still downloading jQuery (or whatever) again for every unique domain
54.
by woogley 10y ago
> React is ... functionally equivalent to Vue if all you include is react.min.js Not really, you also need react-dom.min.js ;) But even then, Vue is sporting automatic reactive dependencies, computed properties, watchers, conditional cla
55.
by woogley 10y ago
I'm currently using (and enjoying) my first Vue project. I have to say the camelcase support for JSX events feels like a step backwards. The `on-` prefix had a nice semantic way of telling you that thing is an event (either DOM or $emi
56.
by woogley 10y ago
It can even be closer to React than that, especially with JSX render functions. You don't even need the view to name itself: export default Vue.extend({ props: ['text'], render() { return <div>
57.
by woogley 10y ago
It did, as an alternative to XML('string') constructor. Check it out: https://developer.mozilla.org/en-US/docs/Archive/Web/E4X/Pro...
58.
by woogley 10y ago
E4X: https://developer.mozilla.org/en-US/docs/Archive/Web/E4X
59.
by woogley 10y ago
Currently, SRI is not enough for browsers to implement content-addressable storage as you describe here, because it is subject to cache poisoning. See https://news.ycombinator.com/item?id=10311020 - basically, the browser c
60.
by woogley 10y ago
> If you do in fact plan to censor content then you need to be very clear about that up front and identify what types of content you will not permit It seems to me their TOS covers this sort of thing. It's not some platform with fre

More ›