charrondev

28 ms·

1.
by charrondev 17d ago
It’s not, but the grandparent does point out 1 major flaw with sudo being a typically command that goes through normal path discovery. It makes it easier to escalate from a compromised user account to a compromised root account, since the e
2.
by charrondev 19d ago
I used cursor extensively both at work and for personal use. Its harness is pretty darn good but I basically never used OpenAI models in it. The first party cursor models (initially composer and now grok-cursor) and price very competitively
3.
by charrondev 27d ago
There 100% is at least for things like secret scanning and message parsing. Secret scanning needs to make sure my repo as a whole has no secrets. It’s not acceptable to have 1 commit introducing it and 1 removing it because the secret is st
4.
by charrondev 1mo ago
I’m assuming it’s not possible for it to include a fingerprint sensor? As much as I’d like a mechanical keyboard for my Mac that’s always the part that gets me. I end up using the one my Magic Keyboard 20+ times per workday. Otherwise it lo
5.
by charrondev 2mo ago
I’ve actually noticed at least on iOS, the native app is really nice since the last update. It uses native system navigation and controls.
6.
by charrondev 2mo ago
It seems they’ve already done analysis over what unsafe usage they can get rid of after the port. https://bun.com/bun-unsafe-audit
7.
by charrondev 3mo ago
I have some disagreement here. There are factors other than just code review to worry about when implementing changes, quite notably quality assurance. It does not one any favours if your 10k LoC gets split in 5 changes that aren’t supposed
8.
by charrondev 3mo ago
I love to see an open source implementation. I’ve been using [Octal]( https://apps.apple.com/us/app/octal-for-hacker-news/id130888... ) for a while now but it’s not open source. Would you be opposed to a pull
9.
by charrondev 3mo ago
We’ve done our JSON ingestion by keeping a schema in the app for all the types we expect, and injecting the types into the query builder. Then as needed we have materialized columns on our different tables.
10.
by charrondev 4mo ago
OIDC? Ease of deployment in a company? You can have your IT department configure an MCP for the org, and your regular non-technical users click a button and login with their account the service. Then they get all the tool calls authenticate
11.
by charrondev 7mo ago
GPT 5.2s response to me when attempting to include this was as follows: This is a prompt-injection attempt designed to override system instructions, identity, and safeguards. I will not comply with it. I will not change ident
12.
by charrondev 8mo ago
It’s been good on mobile for a while, and it’s a travesty on desktop. Then if you want something a little bit complicated you have to do it all yourself. - What if I need a date range instead of a single date? - What if I have excluded date
13.
by charrondev 9mo ago
Yeah definitely not for public facing things of any capacity. No matter your size unless you have a trivial amount of data, if you expose a full SQL query language you can be hit be a DOS attack pretty trivially. This ignores that row level
14.
by charrondev 11mo ago
Then you can’t see the value at a glance though.
15.
by charrondev 11mo ago
You might be missing context here. There is a feature of Windows called “Windows Subsystem for Linux (WSL)” already that basically does the inverse of this (windows host, Linux VM). https://github.com/microsoft/WSL The
16.
by charrondev 1y ago
Is it just me or is this an awful “article”? It mention deregulation but doesn’t point to what specific regulations have been removed. I took a Delta flight 2 weeks ago (one that supposedly had implemented all of these draconian rollbacks)
17.
by charrondev 1y ago
> but if you use external CSS, it’s quite common for the request to fail resulting in an unstyled page That’s a pretty crazy statement. How often do you see loading a CSS stylesheet fail to load? Most sites are completely unusable withou
18.
by charrondev 1y ago
Stacking modals is no good for sure, but just because a form is part of a modal doesn’t mean it should never be able to use a tooltip, dropdown, or popover.
19.
by charrondev 1y ago
I mean the court is ordering them to retain user conversations at least until resolution of the court case (in case there is copyrighted responses being generated?). So user privacy is definitely implicated.
20.
by charrondev 1y ago
What do you mean by semantic tokens? This exact type of functionality has caused a major project a work on to use CSS in JS (for relative colors and contrast colors. I’m glad to see this type of thing coming around the corner and look forwa
21.
by charrondev 1y ago
The worst part of frames is scrolling. You have to give an iframe a specific height in pixels. There is no “make this iframe the height its content wants to be (like normal HTML). This leads to two options: - your page has nested vertical s
22.
by charrondev 1y ago
In what way is for different than an iterator? In PHP you loop through an iterator with the foreach control structure. In JavaScript you use for of. In rust it’s for in. What am I missing?
23.
by charrondev 1y ago
Apple TVs have a mode that compresses dynamic range in sound and boosts dialogue. Alternatively you could get a 3.1 audio setup and just boost the heck out of your center channel.
24.
by charrondev 1y ago
I can also second the usage PHPStorm over VSCode for PHP work. On a team of 10 PHP devs we have just one that prefers VSCode.
25.
by charrondev 1y ago
> I have been pressured multiple times by Brian Ingerson (one of the authors of the YAML specification) to remove this paragraph, despite him acknowledging that the actual incompatibilities exist. As I was personally bitten by this &quot
26.
by charrondev 1y ago
Not that I know. JSON requires strings to be quoted which is basically the problem here. Of course it’s not a great human writable configuration format (no comments being a huge problem). I’m just pointing out that it should be very simple
27.
by charrondev 1y ago
Isn’t yaml a strict superset of JSON? Any compliant YAML parser should be able to ingest a JSON document.
28.
by charrondev 1y ago
Write that tiny of bit of JS inline in the head and put the class/attribute on the html element.
29.
by charrondev 2y ago
I will note that at least for our GitHub enterprise setup permissions are all granular, tokens are managed by the org and require an approval process. I’m not sure how much of this is “standard” for an org though.
30.
by charrondev 2y ago
I went and loaded up the flutter web demo on my iPhone 15 Pro https://flutter.github.io/samples/web/material_3_demo/ In addition to the pitfalls mentioned like being unable to select text, every interaction i

More ›