Shoothe

7 ms·

1.
by Shoothe 8y ago
I don't see how this reply addresses the core point, it just argues that async await is useful (that's fine but not novel by itself). It is possible to work around the "color" by using generators [0], that way one algori
2.
by Shoothe 8y ago
I just searched for "buy Twitter followers" and it seems 10000 followers cost only $40: https://www.socialshop.co/twitter/buy-twitter-followers/ It's funny looking at the page with various packs, ju
3.
by Shoothe 8y ago
Lean analytics is not an oxymoron: http://leananalyticsbook.com/
4.
by Shoothe 8y ago
Select a subject that will challenge you on multiple levels simultaneously, for example if you don't know Rust and microcontrollers go through this: https://japaric.github.io/discovery/
5.
by Shoothe 8y ago
> It’d be fair to say that I could’ve written an equivalent service in Ruby in a tenth of the time it took me to write this one in Rust. Ha, I had the same feeling when I needed to create a simple REST service that'd just process a
6.
by Shoothe 8y ago
For the record Roy Fielding is against using version numbers in URLs: https://www.infoq.com/articles/roy-fielding-on-versioning/
7.
by Shoothe 8y ago
Movim [0] is also a federated social service. [0]: https://movim.eu/
8.
by Shoothe 8y ago
> standard of sorts in im space. XMPP? Check out https://conversations.im/ and https://dino.im/ Encrypted, federated and modern.
9.
TLS 1.3 approved(ietf.org)
441 points by Shoothe 8y ago|75 comments
10.
by Shoothe 8y ago
I'd be interested in looking at the generated IL, especially for nullability info and default interface methods.
11.
by Shoothe 8y ago
Well it may be splitting hair but there is no proof or work and the number of nodes is certainly smaller. There is also CONIKS and Google's Key Transparency. This comes to my mind: https://medium.com/@bbc4468/centr
12.
by Shoothe 8y ago
Yes, WebAuthentication will supersede U2F and it's backward compatible (meaning you can use your Yubikeys, but the API is different).
13.
by Shoothe 8y ago
I guess they mean extra API that utilize stuff that's in HTTP/2 but not in HTTP/1.1.
14.
by Shoothe 8y ago
I wonder what do they do with Service Worker updates that the browser normally does every day or so. Do they somehow block install and activate events? If not then the attacker just needs to update the worker and the history repeats.
15.
by Shoothe 9y ago
They are not encrypted but signed with an elaborate algorithm (I worked on ActivityPub server implementation). Twtxt is minimalist but functional: https://github.com/buckket/twtxt
16.
by Shoothe 9y ago
I can second this. I wanted to write a simple provisioning tool a while ago that sets up HTTP endpoint on API Gateway and forwards the call to Lambda and the process was extremely complicated.
17.
by Shoothe 9y ago
It transparently uses messages if a messanger does not implement the XEP so anything supports it. Just without the fancy UI.
18.
by Shoothe 9y ago
You are only giving the site your JID (username) not password and it verifies that you control the JID so you really are jepz@example.com
19.
by Shoothe 9y ago
> The larger issue, I think, is that most open questions now are either of the "How do I do obscure thing X in framework Y under rare condition Z" variety, or beginner "Please do my homework" or "I have a bunch o
20.
by Shoothe 9y ago
I'd like to see various serverless providers adopting this interface (Service Workers) as well. Currently AWS Lambda needs some mapping in API Gateway and a handier function. Google Cloud Functions use express-like interface and so for
21.
by Shoothe 9y ago
Maybe it would be useful to mention that debugging can be more difficult when using tail calls as previous stack frames are not available.
22.
by Shoothe 9y ago
I've used two services from IBM: Notes and node DB2 package. Both of them were pretty low quality, the db2 package was so unstable that it constantly segfaulted the entire node process. It's not fixed for years since the issue was
23.
by Shoothe 9y ago
> I can't speak to Let's Encrypt, but the bigger companies that make their money in the CA space are insanely serious about security. That's really what I'm interested in, very high level security / operations st
24.
by Shoothe 9y ago
Nor S/MIME and code signing certs. They also won't provide auxiliary services like timestamping.
25.
by Shoothe 9y ago
In OVH you can restrict token access to individual resources (in this case one record) at token creation time.
26.
by Shoothe 9y ago
Just remember that the cert will be logged (Certificate Transparency) so any names there will be disclosed to the public. Wildcards help a little here though.
27.
by Shoothe 9y ago
Rust (rls) works! Excellent. Maybe the Rust team should have a recommended tools page? (obviously curated)
28.
by Shoothe 9y ago
> Also sometimes I just let the compiler tell me by forcing the let variable to something that it is obviously not: Ha! Very clever! Thanks.
29.
by Shoothe 9y ago
Nope, I'll try that out tomorrow, thanks for the advice! VS Code's handling of TypeScript really spoiled me but on the other hand it seems like tooling becomes more and more important in programming languages (e.g. Roslyn).
30.
by Shoothe 9y ago
Note that using the interface ITuple instead of the tuple types directly will incur boxing (memory allocation for reference type instance).

More ›