jkrems

7 ms·

1.
by jkrems 19d ago
Both my memory (as a German) and Duden disagree with you. > etwas in der Absicht, es zu verbessern, schlechter machen > > https://www.duden.de/rechtschreibung/verschlimmbessern "Making somewhere worse wit
2.
by jkrems 3mo ago
> I'm constantly thinking about that Microsoft guy who posted something like "we want 1 million LoC per engineer per month", which basically read as satire to most engineers I talked to Did those engineers not actually rea
3.
by jkrems 9mo ago
I mean... "as configured" can me either an allow OR a denylist. That sentence doesn't really prescribe doing it one way or the other..? You have to parse the denylisted elements because they will affect the rest of the parse,
4.
by jkrems 10mo ago
pnpm is the better comparison maybe in this context. Most of Deno's approach to security is focussed on whole program policies which doesn't do much in this context. Just like pnpm and others, they do have opt-in for install scrip
5.
by jkrems 10mo ago
Vendoring wouldn't really affect this at all. If anything it would keep you vulnerable for longer because your vendored copy keeps "working" after the bad package got removed upstream. There's a tiny chance that somebody
6.
by jkrems 10mo ago
They didn't deploy the code. That's not how this exploit works. They _downloaded_ the code to their machine. And npm's behavior is to implicitly run arbitrary code as part of the download - including, in this case, a script t
7.
by jkrems 10mo ago
Looks like it's back again!
8.
by jkrems 1y ago
Afaict many of these recent supply chain attacks _have_ been detected by scanners. Which ones flew under the radar for an extended period of time? From what I can tell, even a few hours of delay for actually pulling dependencies post-public
9.
by jkrems 1y ago
Nothing to do with "smart", or at least that's mostly irrelevant to this observation. But it's definitely age-dependent. No matter how "smart", it's not fair to expect young children to immediately and ful
10.
by jkrems 1y ago
> Why the South? What about the North? Symmetric globe? The globe isn't symmetric when it comes to these terms. They don't refer to the actual two hemispheres, split at the equator. The "south" contains the equator an
11.
by jkrems 1y ago
Could this be trivially solved client-side by the editor if it just encoded the slashes, assuming it's HTML or markdown that's stored? Replacing `/etc/hosts` with `/etc/hosts` for storage seems like an ok
12.
by jkrems 2y ago
> The gap between design and engineering has never been wider. This seems like such a weird claim to make. This used to be "here's a JPEG, you may beg for the PSD". Not saying that there's no gap today but... never be
13.
by jkrems 2y ago
Being spec compliant means being compliant with the entire spec, not just a "reasonable subset of the spec", picked by the author of the ponyfill/polyfill. And being secure only in the presence of normal inputs is... pretty m
14.
by jkrems 2y ago
Many (most?) traits require energy to develop and maintain. A stronger muscle will need more energy so there's always pressure to reduce it. That pressure may just be countered by pressures in other directions.
15.
by jkrems 2y ago
> When doing so, caches SHOULD first normalize request content to remove semantically insignificant differences, thereby improving cache efficiency, by: [...] That part sounds like it's asking for trouble. I'm curious if this w
16.
by jkrems 2y ago
So you don't use a spam filter in your inbox? You just subscribe to more emails that you _do_ want to drown out the spam? It's easy to say "just counter with more speech!" but it's harder to see how that works at th
17.
by jkrems 3y ago
Apart from the "it just explained the already ordered groups in the question" problem, it didn't even explain one of the groups correctly. "Something about coat(ing) and food" is not the correct explanation, it&#x27
18.
by jkrems 3y ago
If you have a static frontend bundle, isn't that just SSG (static site generation)? And if you can generate the site at build time, what's the fundamental difference between any of the non-web component SSG solutions and a web com
19.
by jkrems 3y ago
The dataset seems pretty unreliable. For example this page claims both that "Kai" isn't a name used in German: https://mixedname.com/name/kai . But then half of the "celebrities named Kai" are..
20.
by jkrems 3y ago
Congrats on 1.0!
21.
by jkrems 3y ago
And that article says: > Perl regexes have become a de facto standard, having a rich and powerful set of atomic expressions.
22.
by jkrems 3y ago
That's a question of policy, not of repo structure. A monorepo can still have certain parts of the repo protected by access control. One repo doesn't mean "all files share one read permission".
23.
by jkrems 4y ago
What they said was: > in the neighborhood of the difference between the fair current market value (~20B$?) and the purchase price (~44B$). The difference is 24B$ which is implied to be the upper bound. 10-15 is in the range 0..24.
24.
by jkrems 4y ago
Because people generally have elevated rights when it concerns themselves? E.g. I have the right not to be touched and it will (generally) outrank your right to touch me.
25.
by jkrems 4y ago
Until very recently it was a thing in all browsers, with a variety of lower bounds depending on which browser. It was meant to prevent accidental busy-loops when developers forgot the set the time parameter IIRC.
26.
by jkrems 4y ago
I think you misread that paragraph. It refers to situations like this: "You selected that you want to jointly apply with another individual. Do *they* live in the same household as you?" Yes, you could also write out "the oth
27.
by jkrems 5y ago
It's actually not related to strict mode. HTML comments work fine in strict mode as well as sloppy mode in scripts. The difference here is that modules are a different file format / syntax and they fundamentally don't include
28.
by jkrems 5y ago
Important footnote: Unless you are in an JavaScript module file. They work in scripts only. E.g. the following is a syntax error in a module but a valid script:  console.log("ok&quo
29.
by jkrems 5y ago
If food or drink consumption was the primary purpose of going out, there'd be no reason to coordinate and meet. If a group of people meets for food, they don't meet for food. They meet for each other. They meet to enjoy each other
30.
by jkrems 5y ago
> I meant in publicly available "box office" figures and all that. Box office earnings alone usually cover all the expenses already, many times over. Maybe it covers the expenses for the studio but it's not necessarily suf

More ›