hmsimha

6 ms·

1.
by hmsimha 1y ago
Thanks for the response. So to be clear, for very specific purposes I'm thinking of, I don't know that it's even better for users to use Cryptpad (without document passwords) than to use Google, etc, that's how bad it is
2.
by hmsimha 1y ago
I think the work you've done with cryptpad, while impressive on many levels and, I'm assuming, motivated by a desire to make secure document collaboration more accessible, is actually putting people at increased risk due to how ba
3.
by hmsimha 1y ago
I've worked with a few orgs which have used cryptpad, and I'm sorry, but Cryptpad doesn't make it possible to share documents securely unless again, everyone in the org is able to follow security protocol to an exceptionally
4.
by hmsimha 1y ago
Regarding the URLs containing the decryption key, of course a strong password is a big benefit here, but if you're not syncing history that could perhaps eliminate big tech from the loop (though you may also need to turn off all teleme
5.
by hmsimha 1y ago
I think there are some issues with cryptpad, most significantly that documents which are shared via their share link (default way of sharing) will effectively be shared with Google, Apple, Microsoft, and so on. I think this is dangerous bec
6.
by hmsimha 3y ago
I don't think it will work hosted with local video files. It works locally reading the video file from the file:// url (though strangely needs http for the subtitle track)
7.
by hmsimha 3y ago
I already commented on this, but I didn't like the "solution" of re-encoding the video with the subtitles baked in, so check out https://gist.github.com/HartS/9bb2721fa73b6798efcdbf5c463e87... if you wan
8.
by hmsimha 3y ago
For people who like to watch with subtitles, VLC currently doesn't support streaming to chromecast with SRT subtitles.. there are several issues for it and I believe support is slated for the next major version of VLC, but not sure whe
9.
by hmsimha 3y ago
I think it'd be better to create an open-source platform to power one "subreddit" that can be hosted and deployed by the mods. Then the content can be exported from reddit into each of those platforms. The instances could be
10.
by hmsimha 4y ago
Indeed, the book itself is not going to be a current source on web APIs. However, the section about the history of the <img> element is still interesting. As the tweet which was shared here today mentions, it's now the 30th anniv
11.
A Long Digression into How Standards Are Made(diveintohtml5.info)
1 points by hmsimha 4y ago|2 comments
12.
by hmsimha 4y ago
"A Long Digression Into How Standards are Made"[1] from "Dive into HTML5" talks about this: http://diveintohtml5.info/past.html#history-of-the-img-eleme...
13.
useSignal() is the future of web frameworks(builder.io)
2 points by hmsimha 4y ago|0 comments
14.
by hmsimha 4y ago
More immediately (2023-2024): Housing bubble in major U.S./Canada cities will 'collapse'. Not catastrophically so, but prices will begin to ease as the city centers become less relevant. Hardest hit will be owners of office r
15.
by hmsimha 4y ago
This isn't an article, but I used ChatGPT to make a Hacker News extension (which I'm now using), that highlights new comments when I navigate to a thread I've already visited: https://github.com/HartS/gpt
16.
by hmsimha 4y ago
I actually got it to work through debugging its own code by running it and giving it error messages (which reference the line), or describing the thing that wasn't working. I didn't try asking it to add line numbers because I figu
17.
by hmsimha 4y ago
It might come up with something "good enough" for the vague ones. Case in point, I got it to write a chrome extension to highlight new comments in Hacker News: https://github.com/HartS/gpt-hacker-news-extensio
18.
Show HN: A working GPT-generated Hacker News extension to highlight new comments(github.com)
3 points by hmsimha 4y ago|0 comments
19.
by hmsimha 4y ago
I made a home dashboard to display on the TV, which integrated with Toggl (time tracker extension) when my partner and I were living together: https://github.com/HartS/toggl-home-dashboard Surprisingly, a feature to ju
20.
by hmsimha 4y ago
I think you intended this as a reply to someone else. Or at least, it sounds like you're agreeing with me.
21.
by hmsimha 4y ago
It's not open-source or really polished for consumption. I did get permission to open-source it, but unfortunately didn't have the time to improve it to the point where it would be broadly useful. In fact, now that https:/&#
22.
by hmsimha 4y ago
> It covers generic constraints. Indeed, but I'm not sure how that's relevant since it doesn't cover generic parameter defaults.
23.
by hmsimha 4y ago
I think others have covered it here, but I want to point out that I actually think Typescript's docs are quite good for end-users! But, like the article here points out, lacking , for library authors. There are lots of ways to do thin
24.
by hmsimha 4y ago
Yes, and a great way to do that is to read documentation, of which Typescript is frequently lacking. For example, I got a suggestion in the discord recently to use "generic parameter defaults" for a problem I was having, which wer
25.
by hmsimha 4y ago
Perhaps the React-Query source itself is a good example of when "simple" is still not "easy to read/write": I picked out this file pretty arbitrarily: https://github.com/TanStack/query/blob
26.
by hmsimha 4y ago
This is all well and good until you have to deal with other code and other APIs in your library (results from network requests, localstorage, untyped javascript libraries, etc.)
27.
by hmsimha 4y ago
> In other words, I call bullshit on this entire blog post. Ignore it. Typescript is the correct solution. What is the alternative? Just using JS and letting things break without knowing it? It seems like you and I read a different artic
28.
by hmsimha 4y ago
Sure, I had the word "trivial" in quotes for that reason. I meant that if you're able to generate a collision, the rest of this doesn't follow (from the article) > Even if creating a collision were feasible for an att
29.
by hmsimha 4y ago
Regarding the difficulty of generating a collision with working code, wouldn't it be as "trivial" as generating a SHA-1 collision in the first place? Just have the malicious code in a file and append a multiline comment block
30.
by hmsimha 4y ago
> the only things on my site that require JS are the "Make the image bigger when you click on it" feature You could actually do this without JS, just wrap the image in a label for an invisible input, and apply transform with a

More ›