captn3m0

6 ms·

31.
by captn3m0 3mo ago
Other modes worth trying: "Mailing Lists", "Research Papers"
32.
by captn3m0 4mo ago
The discussion is so bad because the article is. There’s so many nuances around assets, trademarks, copyright, monetisation, cheatware(?), multi-player etc but the article ignores all of it and goes for the straight freedom angle. How do yo
33.
by captn3m0 4mo ago
MS gave away its exclusive rights to negotiate no revenue sharing: https://blogs.microsoft.com/blog/2026/04/27/the-next-phase-o...
34.
by captn3m0 4mo ago
> Github does not expose a public bug list or any issues page, hiding their problems deep in email chains Which email chains is this referring to? GitHub/community is fairly active from the community perspective. GitHub rarely looks
35.
by captn3m0 4mo ago
Meta offers it in EU: https://about.fb.com/news/2024/11/facebook-and-instagram-to-... I’ve been considering it but I am not sure if it drops just ads or suggested posts as well.
36.
by captn3m0 4mo ago
> Please don't do things to make titles stand out, like using uppercase or exclamation points, or saying how great an article is. > use the original title, unless it is misleading or linkbait; don't editorialize. https:&#x2
37.
by captn3m0 4mo ago
Signal pushed a fix for that: https://signal.org/blog/signal-doesnt-recall/
38.
by captn3m0 4mo ago
> Mozilla, which still maintains one of the only independent rendering engines (Gecko), is the only viable competitor. Everything else is Blink and Google. Notably missing Safari and WebKit
39.
by captn3m0 4mo ago
I keep writing the same comment every time this is brought up, but browsers need to support text/markdown.
40.
by captn3m0 4mo ago
I arrived at a similar model for NPM using hooks in pnpm: https://github.com/captn3m0/npm-sec-feed . I love the work Packagist/Composer is doing in the space. I’m now a firm believer that every package manager need
41.
by captn3m0 4mo ago
https://en.wikipedia.org/wiki/Hackers_%26_Painters
42.
by captn3m0 4mo ago
I tried to follow the links, but could not discover the expected cost of a record creation. > "Supply is capped at about ten per day. Individual squatting (buy at auction, hold, resell) is possible. " Won't this mean that
43.
by captn3m0 4mo ago
Just flag and move on.
44.
by captn3m0 4mo ago
As someone who’s followed and kept up with browser security for 15 yrs (CORS, CSP, all the security headers, TLS changes) and even the early U2F stuff - passkeys and this webauthn stuff is approaching too-complex territory for me. Maybe I a
45.
by captn3m0 4mo ago
> Prior to HTML5, this was called a definition list. This is because the <dl> was originally only intended to represent glossaries of terms and their definitions. TIL I’ve been naming it wrong for a decade.
46.
by captn3m0 4mo ago
There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.
47.
by captn3m0 4mo ago
They publish some stats at https://railway.com/stats 72M deploys from 3M customers across 10M services in the last month.
48.
by captn3m0 4mo ago
The incentives are nicer here, from what I’ve heard: AWS TAMs are not reviewed in revenue at all. And cost savings for customers actually counts as a win for them.
49.
by captn3m0 4mo ago
Is this generated with a Markov chain?
50.
by captn3m0 4mo ago
All three links animate for me.
51.
by captn3m0 4mo ago
They typically use a visual editor like Inkscape with visual feedback. Nobody is hand-coding a complex SVG.
52.
by captn3m0 4mo ago
This has a security implication which is overlooked. Contributors to a repository have higher rights, such as avoiding approval requirements for fork PR runs. GitHub warns in the docs: > When requiring approvals only for first-time cont
53.
by captn3m0 4mo ago
X is the adjective framing.
54.
by captn3m0 4mo ago
Isn’t splitting code and meta into two repos the same solution here? Like how GitHub tracks your Wiki in a separate repo (which you could repurpose for your issues, even).
55.
by captn3m0 4mo ago
Good place to ask, saw a new AWS User agent in logs today: Amazon-Quick-on-Behalf-of-$HEXID I found a mention on some user agent trackers but no official documentation. Anyone knows if it’s documented? Asking because I am seeing decent traf
56.
by captn3m0 4mo ago
I saw this lets you do Fax over IP. Any other advantages or usecases?
57.
by captn3m0 4mo ago
I’m paranoid but I never authenticate the GitHub CLI - there should be no tokens lying around on my system. If needed, I have some scoped PATs in pass, which I can source as env variables. Git Pushes happen over SSH with Yubikey.
58.
by captn3m0 4mo ago
You're right. Found the relevant docs+API calls: https://docs.github.com/en/rest/actions/workflow-runs?apiVer... Also for a Pending Deployment: https://docs.github.com/en/rest/a
59.
by captn3m0 4mo ago
1. _Multiple third-party companies_ can detect these obviously malicious packages in almost-real-time 2. NPM still not only publishes them, but also keeps distributing them for anything beyond 5 minutes. Microsoft/GitHub/NPM can o
60.
by captn3m0 4mo ago
https://docs.github.com/en/actions/how-tos/deploy/configure-... is the feature they use. > We impose tag protection rules that prevent release tags from being created until a release deployment succee

More ›