ctidd

6 ms·

1.
by ctidd 1mo ago
This is an inherently inefficient design, where that inefficiency means increased 1) battery use and 2) tire wear. From a cyclist’s perspective, this is fundamentally a stopgap product for “curious” customers dipping their toes into e-bikes
2.
by ctidd 2mo ago
It’s a very strong convention in bicycle photography. The drive side is considered nicer looking, it’s where you get to show off the components, etc. Independent of what humans may do with the same prompt, training datasets will be full of
3.
by ctidd 3mo ago
There are multiple MIPS systems. The early ones were like you described, with a distinct feeling of too much plastic. Newer ones (e.g. Integra) are much more seamless. There are also other companies doing different types of rotational tech,
4.
by ctidd 3mo ago
CSRF can compromise the non-mutating path as well to exfiltrate data, but the mutating path and non-mutating are different, hence the OPTIONS preflight required prior to sending mutating requests. The browser enforces the same-origin policy
5.
by ctidd 3mo ago
All CORS does is allow for selective loosening of anti-CSRF controls. CORS is a mechanism for a service to tell a client “I’m CSRF-resistant” so that that the client doesn’t need to protect its user as tightly when interacting with that ser
6.
by ctidd 9mo ago
CSRF exists as a consequence of insecure-by-default browser handling of cookies, whereby the browser sends the host’s cookies on requests initiated by a third-party script to the vulnerable host. If a script can fake all headers, it’s not r
7.
by ctidd 9mo ago
You want lax for the intuitive behavior on navigation requests from other origins. Because there’s no assumption navigation get requests are safe, strict is available as the assumption-free secure option.
8.
by ctidd 1y ago
CSP is a defense in depth mechanism which can be (among other capabilities) used to preempt the capability of inline scripts. This mitigates rendering bypasses, in the event that unsafe rendering occurs. For example, imagine you have an ins
9.
by ctidd 1y ago
> Similarly, why is an online event handler considered a security risk? I just don’t see the difference between that and using a named function? It is a vector for script injection, and should be disallowed with a strong CSP (no “unsafe-
10.
by ctidd 2y ago
Putting the blame on cyclists for dooring requires missing problems up the chain which cause them to be in the door zone. Road designs (marked bike lanes that are 80% or more in the door zone) and automotive traffic overtaking unsafely are
11.
by ctidd 2y ago
The implicit premise in this argument is that safety is an add-on that you buy or install like an antivirus package. If we designed to encourage less dangerous forms of transportation from the start, there may be cost savings that aren’t su
12.
by ctidd 2y ago
The other part of this decision not to protect human-powered mobility (pedestrian, bicycle, wheelchair, etc.) is that we allow or encourage automotive traffic as a constant, and _then_ we choose not to protect people. It’s a two step proces
13.
by ctidd 5y ago
I want to respond to this constructively, because you highlighted a useful interface I'd never taken note of previously; maybe we can focus this discussion on a technical level. Meanwhile, if you haven't had a positive response to
14.
by ctidd 5y ago
As a heads up since you mentioned "class method syntax", methods are one of the most important places to have lexical `this` binding in many scenarios. Take the following example, which is a normal class method: > alertSum() {
15.
by ctidd 5y ago
The goal makes sense, but more specific questions can get substantially better responses. An example of what I'd find to be a more effective line of questions with a similar goal: 1. Is there a substantial technical or organizational c
16.
by ctidd 6y ago
Forcing your children to eat things they aren't comfortable with is not a hack. Please do not do this. There is a significant difference between providing a positive environment for your child to encounter new foods and forcing them, p
17.
by ctidd 6y ago
As a counterexample to consider, I would suggest that a client-side web app is coupled to any remote data source intrinsically by a latency-sensitive connection over the network. As soon as you have enough data, you need to defer portions o
18.
by ctidd 6y ago
If I follow your statement, it doesn't appear correct. JS Promises are eager, and the work underlying the promise will begin executing prior to being awaited. Await is just blocking on that execution's resolution. /&#x2
19.
by ctidd 6y ago
If you're not familiar with the term, this image viewer pattern is generally called a lightbox rather than a carousel. I generally don't see the two used interchangeably, but there's similarity to the prev/next controls,
20.
by ctidd 6y ago
Since you provided a concrete scenario, I should probably do the same to clarify what I'm referring to in re-parenting or hoisting hooks. It doesn't really map to the statement "replace a global store with localized hooks&quo
21.
by ctidd 6y ago
That's not a bug with hooks, but almost a complete misunderstanding of how hooks work (*on the part of anyone who writes that code thinking it will behave otherwise). Hooks are effectively instantiated on a specific component instance.
22.
by ctidd 6y ago
It sounds like you're talking about network resolved state. I like to share this sort of state using a subscription model, where components subscribe to a property of a state root (which anchors/owns the state and how to fetch it)
23.
by ctidd 6y ago
One of the problems Redux is used to solve (as a global store) is peace of mind that you won't need to refactor large swathes of component trees to reparent state and callbacks that need to be shared or persisted across different subtr
24.
by ctidd 6y ago
I feel compelled to step in here and hopefully provide some insight on what that report means, because it doesn't appear to be what you implied. * Edit: The header image failed to load for me and complicates much of what I said in the
25.
by ctidd 7y ago
And options help with solidifying input contract as well as the output. Knowing what's an acceptable input via a type system is just as relevant as knowing what is a potential output.
26.
by ctidd 7y ago
Looks like an interesting project. I know the website isn't responsive, but adjusting the current meta viewport declaration would go a long way while you're working on a full solution. The minimum zoom of 1 makes it unusable in pr
27.
by ctidd 7y ago
If seems like you discount portability as a concern, and if that's appropriate for your use case, that's a fair decision of course. But there are many use cases for which that's a priority. The concern the BEM and component-b
28.
by ctidd 7y ago
If you build sites that can support arbitrary viewports, extrapolating to arbitrary scaling factors on a given concrete viewport does not create an explosion of scenarios to manually test -- all you need to know is that your scaling works,
29.
by ctidd 7y ago
I've written a series of very similar articles, and seeing as some of the ones in this site don't seem to be available yet, and otherwise as another point of view, they may be of interest to anyone looking at this: https:/&#
30.
by ctidd 7y ago
On the topic of rems, when using them for layout, you'd use a body font size rather than the root element's font size to control the size of text in your page. At that point the root font size exists only as a scaling factor, deco

More ›