DCoder

9 ms·

91.
by DCoder 8y ago
Can you define "not-image content"? Steganography begs to differ.
92.
by DCoder 8y ago
Then again, Vodafone Portugal was caught rewriting CSPs of all your visited pages to whitelist their own domain last year [0]. [0]: https://twitter.com/JackyHallyday/status/968263408003973121
93.
by DCoder 8y ago
Even good old C includes several functions that seem "redundant" at first glance [0] but are necessary for edge cases. I suppose this is similar to mechanics like fused multiply-add [1]. [0]: https://www.johndcook.com&#
94.
by DCoder 8y ago
Depends on whether that temporary file gets properly cleaned up or not. A myriad of temporary files with more showing up every day could be a significant disk hog, especially for an enterprise with thousands of affected employees.
95.
by DCoder 8y ago
If you can plainly see the gun on their belt, is it really concealed carry?
96.
by DCoder 8y ago
Also known as "use a whitelist instead of a blacklist ".
97.
by DCoder 8y ago
> There has grown up in the minds of certain groups in this country the notion that because a man or corporation has made a profit out of the public for a number of years, the government and the courts are charged with the duty of guara
98.
by DCoder 8y ago
> We discovered and immediately patched this bug in March 2018. I do believe the problem here is that they didn't disclose it in March or April. Disclosing it six months after the fact does not help trust.
99.
by DCoder 8y ago
It's quite similar to being a senior programmer and assisting junior colleagues instead of doing their own work. Though in this case I suppose the blame falls on management for not allocating time properly.
100.
by DCoder 8y ago
I have tinkered with modding Diablo II (which uses tab-separated values for parameters) and the classic Command & Conquer series (which uses INI files). Both approaches have tradeoffs: - TSV files can have so many columns that you can&#
101.
by DCoder 8y ago
Trivia: Diablo 2 stores its data as tab-separated value files. Some of those files have more columns than Excel could support at the time… so the modding community made their own editors.
102.
by DCoder 8y ago
FWIW, here in Eastern Europe we have a similar saying that "A spoonful of tar ruins a whole cask of honey" .
103.
by DCoder 8y ago
Hofstadter's Law, data breach edition: the breach's always worse than you think it is, even after you factor in Hofstadter's Law.
104.
by DCoder 8y ago
> Also, where in that Bugzilla thread are bookmark descriptions mentioned as being an attack vector? I can't find anything about it. I was wondering the same thing. The only relevant item I could find is in bug 1402890 [0] linked
105.
by DCoder 8y ago
It's interesting to compare this behaviour against IIS. If Apache can't identify the MIME type of the requested file, it will serve it without a Content-Type header. IIS will return a 404 instead.
106.
by DCoder 8y ago
FWIW, OpenSSH already does this and calls it "randomart".
107.
by DCoder 8y ago
When autocorrect meets "buttock-clenching", I'd guess.
108.
by DCoder 8y ago
Worth noting that this is not just for your actual code. You can also typecheck (and, just as importantly, refactor) JSX-based views like React's. You can't do that on stringly-typed templates like jQuery.tmpl, Knockout templates,
109.
by DCoder 8y ago
> It can't help you figure out why Bill (who left the company a while back) set ThreadMax to 650 when he changed the code 6 months ago. There cold be a commit message that references it, but that's more disconnected from the
110.
by DCoder 8y ago
Isn't that a technical solution to an organizational problem?
111.
by DCoder 8y ago
TSX views with full typechecking blow all stringly-typed templating solutions like Knockout Templates out of the water. In addition to that, immediate DOM repaint without any consolidation is inefficient and hard to debug at times.
112.
by DCoder 8y ago
Ghostery can replace scripts like Google Analytics with stubs that expose the same API but don't do anything. Last time I checked, NoScript/uMatrix can only outright block those scripts from loading, which breaks some poorly-coded
113.
by DCoder 8y ago
> the ones who were more likely to do a chargeback would log in, download much of the site's content in a few days I download a lot of that content too (sans the chargeback). I like to have it available locally, even when the inte
114.
by DCoder 8y ago
> someone who really knows HTML, CSS and Javascript at a deep level can write it directly and maintain it a lot more efficiently My brain cycles are limited. I would rather let my toolchain catch the trivial errors and focus on more im
115.
by DCoder 8y ago
> If I give a company my data, and they lose it, oh well. I wish all personal data was treated like HIPAA, at a minimum. And yet, when GDPR tries to address the issue, HN is full of "blocking the damned EU users completely"
116.
by DCoder 8y ago
And you haven't even touched localization (digit grouping, decimal separators, singular/plural noun forms, currency formats, week/month names with correct capitalization, …) yet.
117.
by DCoder 8y ago
Many years ago, I was asked to look at why all the content had vanished from a site (not built by me). After digging in a bit, I found that: 1) the original developer's idea of handling an unauthorized /admin request was just to s
118.
by DCoder 8y ago
https://twitter.com/stephendpalley/status/982353358915801088
119.
by DCoder 8y ago
This is a pretty popular pattern known as Entity-Attribute-Value [0]. It's used by many products where a) data model needs to be very flexible and allow new attributes without schema changes, or b) a typical entity has a large number o
120.
by DCoder 8y ago
I can see both sides of the argument here — from the technical point of view, it is certainly unappealing to maintain such kludges, and from the business point of view, "it's been working fine so whatever changed on the other end

More ›