xg15

18 ms·

361.
by xg15 4mo ago
Well, if your endpoint expects JSON, then at some point it will have to parse it. Even if it completely ignores the content-type header and simply always passes the request body to the JSON parser, the parser would throw. (But I was wrong,
362.
by xg15 4mo ago
Ouch! Ok, I wasn't aware text/plain was also one of the whitelisted values and lets you do that. That looks pretty bad indeed.
363.
by xg15 4mo ago
> (And, of course, if your endpoint just assumes JSON without strictly checking the Content-Type, then congratulations, you've just allowed any website to POST to you, with no user action required.) Is that so? Neither urlencoded
364.
by xg15 4mo ago
CORS seems to be the Offside rule of the webdev world. I wonder if much of that misunderstanding comes from the threat model being quite unusual and not always easy to understand. For starters, there are three parties, which all don'
365.
by xg15 4mo ago
I think it still works, because the number of "client implementations" of CORS is very limited (*) - only the browsers have to implement that, and the browser devs seem to understand it well enough. So there is only one end of the
366.
by xg15 4mo ago
> (ignoring preflight requests for now and assuming we're talking just about "safe" Methods) You can't ignore those because they constitute the bulk of CORS' security model. Yes, you're technically right t
367.
by xg15 4mo ago
With all due respect to the author, but it feels like they went directly from "This project is so hard, I could never get it done with my time budget, so there is no point" to "This project is so easy now that anyone could do
368.
by xg15 4mo ago
There is no "conspiracy" in the sense of a shadowy cabal or secret organization. But I think it's remarkable how such a huge project which must have involved the participation of dozens of governments could have been done wit
369.
by xg15 4mo ago
> the Sound Surveillance System (SOSUS), a complex array of hydrophones fixed on the ocean floor and connected by cables to secret listening stations set up along coasts all over the world. One for the conspiracy theorists...
370.
by xg15 4mo ago
> the sword of Damocles fell and turned it to be a Christmas ornament. That was my impression as well. I think there was exactly one event in this war that has long-term consequences and that was the realization that the US military ca
371.
by xg15 4mo ago
> "When you have a passenger for essentially a whole day, it really does drive a whole set of new decisions," he said. This seems weird when we have ferry, train or bus rides that can take days or even weeks. I get that plane
372.
by xg15 4mo ago
I found this one of the more compelling arguments why current LLMs can't be conscious, no matter the complexity if the model. There isn't even a clear way to understand how many consciousnesses there would be. Though I think in th
373.
by xg15 4mo ago
> Rich folks will always want "no poors in the neighborhood" and will keep trying to find ways to spend money to ensure it. They'll never give up. That's a very fatalistic take, essentially saying that rich people w
374.
by xg15 4mo ago
Well, ok, but then how are property prices artificially driven up by planning restrictions? Is this just about not allowing more compact housing like condos or high-rises?
375.
by xg15 4mo ago
Well, how about the freedom to invade a country you don't like? Or how about that country's freedom to invade your country? One person's freedom always ends at the point where another person's begins. That's not exa
376.
by xg15 4mo ago
I mean, one of the main takeaways from the article was that "there is a market for X" is something fundamentally different and sometimes even the opposite of "X is a good thing".
377.
by xg15 4mo ago
Not an American, so maybe I'm underestimating the insanity of US zoning laws, but I always thought "residental ares" means "no businesses". Admittedly unpleasant if it means there can't be any grocery store or
378.
by xg15 4mo ago
I don't get it.
379.
by xg15 4mo ago
> Home, Gallery, Music, Videos - all virtual apparently. Huh? I agree with you that in general it's a mess. (found it fascinating that the hierarchy that Explorer shows is technically not the file system - It's its own thin
380.
by xg15 4mo ago
This is one part of it, but not the whole thing I believe. The other thing that happened is that "UX research" paradoxically became more data-driven and "scientific", with live telemetry that monitors how UIs are practic
381.
by xg15 4mo ago
You still need some design experience and "taste" though. I've seen some B2B apps which used the Windows look-and-feel and looked absolutely awful: Actions wildly scattered through buttons, menus and context menus, panels and
382.
by xg15 4mo ago
Maybe relevant: http://windows93.net/
383.
Windows 93(windows93.net)
11 points by xg15 4mo ago|1 comments
384.
by xg15 4mo ago
> Me: "I don't like smartphone UIs. Everything is flat, nothing indicates where you can touch or not. I have to randomly try everything on the screen." Response by non-tech person: "Well, yeah, of course you have to
385.
by xg15 4mo ago
Looking at the people who immediately joined and this being presented at WEF, this looks less like an EU BlueSky or X and more like an EU Truth Social - i.e. the core users seem to be EU politicians who don't want to depend on a platfo
386.
by xg15 4mo ago
The marketers or the so far unnamed private investors.
387.
by xg15 4mo ago
> Europe already has an ATproto social network - Eurosky - run by a non-profit foundation - Modal - that is building everything in the open, with full transparency, sharing all the steps in their development roadmap: And weirdly, there
388.
German CEO launches W Social, a European alternative to X(iamexpat.de)
2 points by xg15 4mo ago|2 comments
389.
by xg15 4mo ago
See also: - https://wsocial.eu - https://news.ycombinator.com/item?id=48584497
390.
by xg15 4mo ago
Maybe what's also important is that the hospitality "relationship" grows on both sides and the customer has an understanding why the staff knows them. I'm a regular at a few coffee shops near my home and I know the staff

More ›