yetanotherjosh

10 ms·

61.
by yetanotherjosh 8y ago
You're not doing anything wrong. That's just how SCP looks. I agree it is not the best programming font and find it a bit odd to hear people saying it's the best, but that's subjectivity for you. Hack is a good one, thou
62.
by yetanotherjosh 8y ago
This strikes me somewhat similar to saying that we should not use Newtonian mechanics, because we know better that at subatomic level Newton's laws do not apply. But Newtonian mechanics are still extremely valuable, worth discovering a
63.
by yetanotherjosh 8y ago
Then let's hope you're not using Webpack, which alone has several hundred of them and not small ones, mind you... super complex libraries that trying to "own" enough that you'd be able to securely review code diffs
64.
by yetanotherjosh 8y ago
It's a pretty extreme practice, and only something a tiny fraction of very technical users will do. I think in general the people who turn off JS do it in a way that they allow it on sites they really have to use that really don't
65.
by yetanotherjosh 8y ago
Rate limiting login attempts means I can prevent you from logging in indefinitely by pushing your account into the rate limited status.
66.
by yetanotherjosh 8y ago
How is sending the password to the server over HTTPS bad? What would you do otherwise? Hash it on the client? So are you not using salted hashes for your password store? That's far worse. Or you're hashing twice, the first with no
67.
by yetanotherjosh 8y ago
Indeed. And: who is hashing passwords on the client? As this would require either not using a salted hash, or sharing the server's salt with the client, in order to obtain identical hash values for comparison. In either case that syste
68.
by yetanotherjosh 8y ago
It's logo isn't a traffic cone.
69.
by yetanotherjosh 8y ago
> what stopped being a truly notable player at 2.95 release 15 years ago Bingo. After it went downhill with AOL I dug up the 2.95 installer and kept it around for many years like a sacred scoll. I probably still have it in my archive. Lo
70.
by yetanotherjosh 8y ago
And all this talk of cookies leaves out html5 features like localStorage. Targeting only mechanism for tracking does not solve the tracking problem.
71.
by yetanotherjosh 9y ago
> But it is not a good idea to use input sanitization as the only (or even main) method of injection attacks prevention Can you define what you mean by "input sanitization"? Because in my mind, a prepared statement is doing jus
72.
by yetanotherjosh 9y ago
Interesting, what hosting provider/system are you talking about here? It seems to me having admin panel access is an even higher level privilege than having root on the box itself, for any VPS host environment I've personally used
73.
by yetanotherjosh 10y ago
You don't even use bookmarks for short-term shortcuts to to highly-accessed, complex, URLs? For instance, someone in your team shares a google doc with you that has the specification for a feature you're building. It takes weeks t
74.
by yetanotherjosh 10y ago
You're dealing with a troll there, not an idiot. A troll.
75.
by yetanotherjosh 10y ago
This concept is a troll haven. Politically motivated trolls have become a rampant problem online. I think they are the single biggest obstacle to the progress social media (in the broadest definition, which includes this project here) can e
76.
by yetanotherjosh 10y ago
I'm not sure what the intent is for how much time per day to manage with this. When it asked me how much time I have per day, I wanted to at first say 24hrs (duh). I figured that was probably wrong (because it's asking), so I said
77.
by yetanotherjosh 10y ago
I hear what you're saying and it represents an ideal. But there are circumstances where information really has to be removed. Perhaps because the user is no longer present and it was collected under circumstances that had more liberal
78.
by yetanotherjosh 10y ago
I mostly agree but there are cases where some definition of sanitization is the only appropriate thing. For example, if you allow users to create content with a lightweight subset of HTML for the sake of formatting control and want to rende
79.
by yetanotherjosh 10y ago
As someone who hates mice and hopes one day to have this sort of tech, I'm trying to understand what you mean by "Eyes don't point at things we look at as accurate as a mouse does" - how is it that I can choose to "
80.
by yetanotherjosh 11y ago
Even after people have RTFM, many are still misunderstanding the pricing model. For instance, people now think you can store 2TB of data and download 100GB of it at once (5%) for free. Nope! You can request a max of 0.16% per day of data fo
81.
by yetanotherjosh 11y ago
It still wouldn't have been free. The free download allowance is spread daily across the entire month. That is, you can download 5% of your data per month, and only 0.16% of it per day. For your optimization to work, you'd have to
82.
by yetanotherjosh 11y ago
Seems like you'd still need the 350ms delay (or some amount of delay) for pinch-to-zoom because the two fingers don't touch the screen simultaneously. The sensor reads the first finger's touch and the software has to wait to
83.
by yetanotherjosh 11y ago
That's a reasonable perspective but the assumption I would be making isn't that they haven't thought it through, it's that they're using a higher bar for what's necessary, and are thinking it through from that
84.
by yetanotherjosh 11y ago
We're all always on our way to becoming good engineers. Most of us really aren't good engineers in one way or another. These kind of principles help guide the whole team towards a set of high standards, in which individual team me
85.
by yetanotherjosh 11y ago
I've always argued that a QA engineer's job is to augment the skill set of the feature engineers to help them in writing good tests and automation suites that ensure the user requirements are actually met, as well as to build and
86.
by yetanotherjosh 11y ago
If you agree it's a problem, I'm not sure why you think it shouldn't be talked about. Your (a) and (b) responses would come from an engineer who is not open to dialog, and I'd say from an engineer I'd prefer not to
87.
by yetanotherjosh 12y ago
Has my Grandpa's hammer been significantly improved in recent memory? Nope, still in my toolbox and still my favorite hammer. Ok, ok, not a good analogy but my point is that not everything actually needs constant improvement. There is
88.
by yetanotherjosh 12y ago
It would be more useful instead of speaking in terms of different degrees of ownership to speak specifically in terms of what is owned and what isn't. In GPL software, you not only own the functioning application but you own (within ce
89.
by yetanotherjosh 12y ago
Asking about company dress code is a perfectly good question, and it's one part of understanding the company's overall culture. Any sane recruiter or hiring manager wants you to understand and be attracted by the company culture,
90.
by yetanotherjosh 13y ago
There is irony in multiple dimensions here. By publishing an article critical of itself but whose core argument actually has very small teeth, Medium gets to appear magnanamous and balanced and thus receives a net benefit in reputation. And

More ›