ashearer

7 ms·

1.
by ashearer 3y ago
On the other hand, if they had quietly offered a one-time policy exception before reaching the point of a court verdict, they would have avoided any kind of precedent.
2.
by ashearer 5y ago
While I can't say how much effect grammar has on thought processes, the metaphors we rely on can be significant. For an example that came up earlier today ( https://news.ycombinator.com/item?id=29923866 ), the term &quot
3.
by ashearer 5y ago
This is an example of why the term "sanitize" just brings confusion and leads to incorrect software. If we say "escape" (for concatenation) or "parameterize" (for discrete arguments) instead, then there's
4.
by ashearer 5y ago
On Catalina at least, variable-speed constant-pitch playback is still available, just hidden. Option-click on the fast-forward or rewind buttons to access it. It jumps in increments of 0.1x.
5.
by ashearer 6y ago
Good to know that AWS is so fast to detect this. If good uses were common—and I'm struggling to come up with them—AWS could suppress the alert for IAM users that were already sufficiently locked down. But since that would become danger
6.
by ashearer 6y ago
> "Similarly, Uber argued that the industry at large had become more adept since 2014 at protecting private data in the cloud, and that Uber should not be judged for “what a company did then (back when the company was much smaller a
7.
by ashearer 6y ago
> Women can handle it in the same way they can handle a cloudy day Going with that, then why create that cloudy day when it would take very little effort not to? And what message does it send to actively defend creating those cloudy days
8.
by ashearer 6y ago
My comment went on to say that you don't know ahead of time exactly which tests will prove useful. So you can't just skip writing them altogether. They key point is that if you have evidence ahead of time that a whole class of tes
9.
by ashearer 6y ago
If a particular test never finds a bug in its lifetime (and isn't used as documentation either), you might as well as not have written it, and the time would be better spent on something else instead--like a new feature or a different
10.
by ashearer 6y ago
The same slide also mentioned supporting JIT translation (for x86 web browsers and Java), so Rosetta doesn't run only at installation time.
11.
by ashearer 7y ago
Yes, I completely agree in the above case. The JSON input has a well-defined format and input validation should reject it outright. The issue is that when developers hear they should "reject bad input" in order to avoid vulnerabil
12.
by ashearer 7y ago
Even the Joel article makes what's arguably a mistake: he says that input from users is "unsafe" and must be escaped on output, while strings from elsewhere shouldn't. That may avoid security exploits, but it still resul
13.
by ashearer 7y ago
The difference is where it's done. "Sanitizing the input" implies that it happens when the value is read, so that all uses of the value are stuck with a single result. "Escaping the output", in your example, would h
14.
by ashearer 7y ago
This sounds good in theory, but I'll give a counterexample. Requirement: Name input box. Implementation: We'll sanitize the input by rejecting any characters likely to be dangerous if mishandled, like single quotes, or anything el
15.
by ashearer 7y ago
Yes. It's the word "sanitize" itself that misleads people. It creates the mindset that input from users is dirty and must be made clean, and "clean" is "safe" to use in any context. (I've seen the lin
16.
by ashearer 7y ago
It looks like a general optimization for tail-recursive functions that assumes they terminate (because not terminating would be undefined behavior). The parameters to the recursive calls don't matter: Substitute other expressions or co
17.
by ashearer 7y ago
Measuring "per participation decision" often makes more sense than "per participation hour" when deciding whether to do an activity. (It could be shortened to "per event", defining an "event" to be th
18.
by ashearer 7y ago
Immediately below that, the final Excel output is unreadable: it shows the left axis scale ending at 450 and right axis scale ending at 400, with both values corresponding to the same grid line. Below that, it says you can draw these charts
19.
by ashearer 8y ago
One approach that works very well is to keep stored functions in separate .sql files in a directory (I use "fixtures"), and execute them all on each deployment. This should happen after triggering migrations, so that table and col
20.
by ashearer 10y ago
Then it would become impossible to store future timestamps in a database and have a stable answer to the question, "on what day will this timestamp occur?" Timestamps around midnight could flip from one day to another unpredictabl
21.
by ashearer 10y ago
YouTube link: https://www.youtube.com/watch?v=9A92PMGcquo
22.
by ashearer 10y ago
It's the electric company charging different rates depending on the brands of your appliances (even if they use the same amount of electricity). They can also charge the brands themselves for good placement on this list. And they have
23.
by ashearer 10y ago
Please illuminate me. I may be wrong, but I certainly wasn't being dishonest. The fact that you leaped straight to that conclusion doesn't help convince me that you have a particularly well-grounded belief in the NYT's dishon
24.
by ashearer 10y ago
That's the question then--is it the case that any rational interpretation of the polls gave an actual forecast of least 70%, and the NYT lied? The parent seemed to be saying that election's outcome alone proved that the 20% number
25.
by ashearer 10y ago
This is why I don't get usually get involved in political discussions online. Someone who's committed to a position can always bring up new questions instead of responding to the original ones. (In this case I wasn't even tak
26.
by ashearer 10y ago
The page itself is set in the proportional version of Go. I found it distracting to read because of the uneven character widths. The majority of the characters (like 'b', 'd', 'f', 'k', 'l',
27.
by ashearer 10y ago
If they predict a 20% chance of rain, and it does rain, that doesn't show dishonesty. The second point needs a citation.
28.
by ashearer 10y ago
I appreciate the effort to define a fast subset of HTML, but the AMP loader on google.com makes the whole page-loading experience different and worse in many ways. Several times today while trying to visit different sites, the AMP JS loader
29.
by ashearer 10y ago
None of GP's points would necessarily absolve a suggestible accomplice of a crime that actually occurred. The FBI's cases, on the other hand, were entirely fictitious except for the suggestible person. It would certainly be a stro
30.
by ashearer 10y ago
It's almost certainly correct that they use the Keychain for Touch ID. But I'd hedge that if they were bent on being insecure, they could use a different Touch ID mode that just returns a boolean. Does anyone know whether app revi

More ›