zimbatm

66 ms·

751.
by zimbatm 11y ago
What happens if the client changes his code to always issue requests with the same ID ? Most solutions inject the HTTP header in the frontend reverse-proxy to avoid that kind of issue.
752.
by zimbatm 11y ago
Yes, the file path+content checksum is verified against a whitelist before execution. Typing `direnv allow [PATH]` adds it to the whitelist.
753.
by zimbatm 11y ago
self plug: http://direnv.net/ does basically the same but without having to start new sub-shells. Just `cd` into a folder, if it has an .envrc file it's loaded. If you `cd` out of the folder all the changed environment
754.
by zimbatm 11y ago
I don't mind losing some privacy but it has to be symmetrical. Right now the government is like the clothed guy on a nudist beach and it's awkward.
755.
by zimbatm 11y ago
typo: "There are two Power Supplies, each with their own wiring harness."
756.
by zimbatm 11y ago
Apple devices have the same issues but for some reason nobody is talking about it. Just install Little Snitch and you will see arrays of services trying to access apple.com. I don't think they are malicious but it makes the device supe
757.
by zimbatm 11y ago
The equivalent would be to bug the internet and phone of the target. That's something they can already do and which is reasonable.
758.
by zimbatm 11y ago
Is anyone using Juju in production ?
759.
by zimbatm 11y ago
Getting to show how smart you are is different that working together with a team on building great products. Everyone has flaws, why not let the other person save face and point them in the right direction instead ? Assuming you hired motiv
760.
by zimbatm 11y ago
How do these 20k connection feed the channel without being themselves managed by goroutines ? One thing I wish was possible in go is being able to use the `select` keyword with both channels and IO.
761.
by zimbatm 11y ago
https://github.com/Yipit/cron-sentry is also quite nice as a wrapper to capture failing cron jobs and forward them to https://getsentry.com/
762.
by zimbatm 11y ago
Having local mailboxes in each server is not really useful in a cloud setup with hundreds of machines. But it's not a reason to silence the output; something bad might happen and only stdout/stderr might give you an anwer of what
763.
by zimbatm 11y ago
Given the list of linked projects it seems to follow the same minimalist approach of the http://suckless.org/ community. Build a small distribution with small tools that do one thing well.
764.
by zimbatm 11y ago
The biggest question is: is Red Hat going to release Tower as open-source ? Red Hat is an open-source company and I would expect them to do so but they didn't even mention Tower. EDIT: From their FAQ[0] it's not clear either. It s
765.
by zimbatm 11y ago
Isn't it possible to pin the CA instead of the certificate ?
766.
by zimbatm 11y ago
That's the whole purpose of the service :) https://builtwith.com/builtwith.com
767.
by zimbatm 11y ago
6. you just need a collision where evil.js would generate the same sha3sum "foo"
768.
by zimbatm 11y ago
Yes that would be one possible implementation. It's up to the server and can vary quite a bit depending on the scenario, which is why Nginx hasn't tackled the problem yet. I believe that it's going to take a while to find goo
769.
by zimbatm 11y ago
Works for me
770.
by zimbatm 11y ago
When the compiler code size is a fraction of the whole it would actually make sense to improve on it instead of rewriting everything. Like Facebook did for PHP and their HHVM. Obviously Fortran doesn't have a speed problem but it could
771.
by zimbatm 11y ago
I wonder how it behaves in terms of performance and disk fragmentation. Potentially log-oriented databases could adopt that technique instead of having lots of files on disk.
772.
by zimbatm 11y ago
So.. what's the changelog for v2.0 ? There is no link in the text or in the video pointing to that info.
773.
by zimbatm 11y ago
Why not allow any kind of overlay filesystem like docker does instead of hard-coding the btrfs dependency ? It seems like a decent solution overall, and it allows to distribute security updates to libraries unlike docker images.
774.
by zimbatm 11y ago
Tough question: how do you see the developer getting paid for their work ? I would love to be able to work on Open-Source apps and might occasionally build some for free but at the end of the day I still need money to pay my rent and all. T
775.
by zimbatm 11y ago
Nice ! That should solve the issue where all gems are re-installed whenever the Gemfile.lock is changed. I agree that bundler is mainly focusing on the user interactions and is good at that but never look inside. I'm not even sure if t
776.
by zimbatm 11y ago
Camlistore can use S3 as a backend and does deduplication. Not sure about the encryption though. [0]: https://camlistore.org/
777.
by zimbatm 11y ago
Something I understood only recently is that a DB is an API. You can add fields/tables to it easily but changes should always be backwards-compatible (if you care about availability). Only when all the clients have been upgraded can th
778.
by zimbatm 11y ago
I don't know if it's the same with Guix but in NixOS it's just a matter of running `bundix` and all the Gemfile.lock dependencies are converted to a nix expression. Gem developers can keep developing as usual. Maybe the only
779.
This is my work-flow for contributing on GitHub(zimbatm.com)
1 points by zimbatm 11y ago|0 comments
780.
by zimbatm 11y ago
Just changing the language is in the diminishing return area and is why it hasn't happened yet. Something else need to change. Any sort of shell programming is going to be full of side-effects. No matter how strict the language, buildi

More ›