derekprior

6 ms·

1.
by derekprior 7y ago
GitHub Sponsors is out of beta for developers with a bank account in any of the 30 countries supported by Stripe. For folks with bank accounts outside of that list, GitHub Sponsors is still in beta, we're accepting applications, and we
2.
by derekprior 10y ago
You can't set an HTTP Header with an HTML link. Would be nice to set a body though, wouldn't it? Also, not allowed by HTML.
3.
by derekprior 10y ago
I think people are looking to closely at the first degree attack -- a trusted partner is pwned. If this is the case, there's far more interesting things an attacker could do. It's not too hard to envision a scenario where an attac
4.
by derekprior 10y ago
In my experience, password reset tokens are not single use. They are good for both loading the form and submitting the form. They are not invalidated until the form is submitted with the new password. They are good for 1 password reset, not
5.
by derekprior 10y ago
https://en.wikipedia.org/wiki/HMAC-based_One-time_Password_A... I might not be using the right term here, but the general idea is that you create an encrypted token out of some data and verify that the data is unchange
6.
by derekprior 10y ago
This has been suggested numerous time since I published. I had not previously considered this solution and I think it's a fine solution for people to make if they know the tradeoffs. It's worth noting there are a number of reasons
7.
by derekprior 10y ago
Depends on how the reset behaves. Some resets log you in immediately after providing a new password. Some require you to log in after resetting the password. I feel like I've seen more of the former than the latter.
8.
by derekprior 10y ago
I'd certainly consider this for some applications. It depends on the value of what you are protecting. For some sites and users, the error rate introduced by this method would be unacceptable. Tradeoffs...
9.
by derekprior 10y ago
It's covered in the article, but this is not supported by IE11. That's pretty modern...
10.
by derekprior 10y ago
Author here. I completely agree that it's unlikely to be exploited but also think fixes are mostly simple enough that it should be addressed.
11.
by derekprior 10y ago
This requires non-idempotent get requests as you must invalidate the token on get. I did consider this approach for Clearance and intended to go with it, but was discouraged from doing so after hearing reports that some enterprise email AV
12.
by derekprior 10y ago
The manual verification steps are basically impossible for any non-trivial gem. I wonder if it would be possible to re-build (from git) the impacted gem versions and check their checksum against the downloaded version to detect differences?
13.
Seamlessly navigate between Vim and tmux splits(robots.thoughtbot.com)
3 points by derekprior 13y ago|0 comments
14.
by derekprior 14y ago
homebrew-built vim worked fine for me. I followed the manual steps.
15.
Re-enabling Password Pasting On Annoying Web Forms(prioritized.net)
1 points by derekprior 14y ago|0 comments
16.
by derekprior 14y ago
Huh? A bulleted list of release notes with a pot shot at Safari and some mighty large leaps of faith. "Since most Mac users use Google Chrome as their primary browsers (sic)..." -- Oh really? I'd be surprised by this. Do you have numbers to
17.
by derekprior 14y ago
Okay, I won't tell you to enable JavaScript. Can I tell you to bump up your blog's font size?
18.
by derekprior 14y ago
Agree. I want to read this, but I haven't a damn clue as to how to go about that.
19.
by derekprior 15y ago
How about a nested hash of attributes? class PostsController attr_accessible: :title, :body, :related_links => { :href, :title } end This would accept the attributes: post_title, post_body, post_related_links_0_href, post_related_link
20.
by derekprior 15y ago
Until recently the GMail web interface was simply unmatched. When GMail first shipped, their conversation view was so far ahead of what anyone was doing on the web or in a fat client. I don't try out as many email platforms as I used to, bu
21.
Modularized Association Methods in Rails 3.2(blog.hasmanythrough.com)
1 points by derekprior 15y ago|0 comments
22.
Gemify Assets for Rails Asset Pipeline(prioritized.net)
1 points by derekprior 15y ago|0 comments
23.
If You Pay For Cable, You're A Hostage Of Sports(wbur.org)
6 points by derekprior 15y ago|1 comments
24.
by derekprior 15y ago
Done right? Sorry, you bored me to death as soon as you started blabbering about Pascal's Triangle. I'm sure I learned about that at some point, but I've forgotten it. You asking me that questions would result in: 1) Me feeling stupid becau
25.
by derekprior 15y ago
This seems like it would work in environments that aren't super competitive for top talent or if you are offering a dream job, but in the face of multiple offers this is going to be far less attractive to the candidate. I've got a family. I
26.
by derekprior 15y ago
Maybe, but now you've changed your argument. Previously it was that they weren't learning at all, now they aren't learning as well. Even so, there are points in response: 1. I'm really not equipped to show him the multiple images of a coat
27.
by derekprior 15y ago
"it's about the fact that kids watching a screen aren't ... learning how to communiate (sic)" Does sign language count as communication? Because my son learns signs from occasional DVD watching and then applies them in the proper contexts -
28.
by derekprior 15y ago
I agree that limiting screen time is important, and my wife and I are careful to limit our son's screen time and not expose him to "second hand TV." That said, I take issue with the following passage from the article: "Even so-called educat
29.
by derekprior 15y ago
The dirty little secret is that most of these channels are very cheap. The only expensive ones are ESPN and other sports programming. People who dont watch sports subsidize those that do.
30.
by derekprior 15y ago
I always seem to find some television series that's available via streaming that my wife and I want to see. Each time I say, "We should cancel streaming when we're done with this" and each time we find something else that fits the bill. Fir

More ›