mediumdeviation

6 ms·

91.
by mediumdeviation 5y ago
I hope you've managed to fix this, because this is an obvious security issue. A long token is used precisely because it is long and unguessable. The shortened URL is subject to enumeration attacks which can be used to hijack accounts.
92.
by mediumdeviation 5y ago
The most common vulnerability that grants RCE has the attacker exploiting poorly designed deserialization code. Those are high impact but not too common since deserialization is hopefully closely scrutinised. There are other problems that n
93.
by mediumdeviation 5y ago
Another fun limitation - apparently for my Pixel phone to remember I prefer my temperature in Celsius, Google also needs "Web & App Activity" tracking. In other words Google wants my whole location history when using Google ap
94.
by mediumdeviation 5y ago
> log trains can only carry logs, passenger trains can only carry passengers Not technically true since you can mix carriages, but like in Factorio having mixed trains is probably a bad idea.
95.
by mediumdeviation 6y ago
This comment is the following Douglas Adams quote, but unironically > Many were increasingly of the opinion that they’d all made a big mistake in coming down from the trees in the first place. And some said that even the trees had been a
96.
by mediumdeviation 6y ago
You absolutely do not want to scale the page to the same physical size on different screens because you also need to take into account distance between screen and your eyes. Text on phones can be smaller physically than text on a desktop mo
97.
by mediumdeviation 6y ago
> Of course, I had to get all that info from thedonald.win because almost no-one else is talking about this. Except on the news media [1], or the largest politics community on one of the largest social networks on the Internet [2]. [1]:
98.
by mediumdeviation 6y ago
Compiz cube can already do this with your entire desktop circa 2006. I remember being quite delighted with it when I first installed Ubuntu but it was never very practical. I still miss wobbly windows though
99.
by mediumdeviation 6y ago
They said the same thing about DoubleClick and YouTube. The amount of trust you should give to Google's words is zero.
100.
by mediumdeviation 6y ago
For context - this was used for Stack Overflow’s 2010 April Fools https://meta.stackexchange.com/questions/37328/my-god-its-fu... . The algorithm for generating a unicorn from a hash is quite interesting. It looks
101.
by mediumdeviation 6y ago
Mostly useful for print stylesheets. On screens it seems to be defined as a constant 96px[1], which means it has no correspondence to physical inches. [1]: https://hacks.mozilla.org/2013/09/css-length-explained&#x2
102.
by mediumdeviation 6y ago
That seems unlikely given that in the week of April 6 to 12, Covid 19 has risen to the 2nd leading cause of death in the United States[1]. [1]: https://www.washingtonpost.com/outlook/2020/04/16/coronaviru
103.
by mediumdeviation 7y ago
The locking down of the API is done to prevent competition, while being publicly framed as a privacy enhancing scheme. > The Switcharoo Plan turned out to be an idea whereby Facebook executives would deprecate various APIs that its devel
104.
by mediumdeviation 7y ago
Isn't this the same company that phishes its users by asking them for their banking login and 2FA information directly in third party apps? I'm not sure if this is the sort of regulatory barrier breaking worth celebrating.
105.
by mediumdeviation 7y ago
Ah yes, same as my new Pixel. Apparently to be able to give me temperature in Celsius instead of Fahrenheit, Google would like to know every app activity and usage as well as everywhere I have been. This sort of privacy bundling really shou
106.
by mediumdeviation 7y ago
Yup, you can definitely see a web developer bias here - those are all popular webfonts because Google offer them free on their CDN, and it is easy to drop them into any website by just pasting in the CSS, but they are probably much less fam
107.
24 Hours inside San Francisco’s homelessness crisis(projects.sfchronicle.com)
11 points by mediumdeviation 7y ago|1 comments
108.
by mediumdeviation 7y ago
I think you're thinking of a different threat model from these users. If you're concerned about breaches by malicious actors, then yes this defense makes sense. However, if you're worried about data mined from tracking your p
109.
by mediumdeviation 7y ago
It's a recreation of the game that Slack pivoted from. They also released most assets from the game into the public domain https://www.glitchthegame.com/
110.
by mediumdeviation 7y ago
Only aiding and abetting one genocide this year would be a 50% improvement over last year!
111.
by mediumdeviation 7y ago
No, if you actually read the label you'll notice it's basically a religious tract preaching a weird quasi-spirituality nonsense. I do like that in those days you have to actually create a useful product so people would listen to y
112.
by mediumdeviation 7y ago
For what it's worth, Create React App is bundled with eslint-plugin-jsx-a11y which will give you the same warning
113.
by mediumdeviation 7y ago
Just leave it blank and force the user to explicitly enter something? I don't see how defaulting to the current date is ever useful for date of birth from a user interface design perspective.
114.
by mediumdeviation 7y ago
> I don't get why defining routes with components is a good thing It makes the routes reactive. This is not necessary for smaller projects, but where it is needed this can be really helpful. The responsive route example shows this o
115.
by mediumdeviation 8y ago
Coase Theorem doesn’t say _how_ you should divide up property rights - that’s a normative statement that’s outside the scope of economics - but rather that as long as _any_ property rights are assigned, regardless of which way the assignmen
116.
by mediumdeviation 8y ago
Ironically the first time I’ve seen this point made is in an Onion video - 6-Year-Old Explains How Messed Up It Is That Her Entire Life Has Been Put On Facebook https://www.theonion.com/6-year-old-explains-how-messed-up-i...
117.
by mediumdeviation 8y ago
Also the site claims to about “web fundamentals”, but the content pushed out are all articles about cutting edge, experimental features in Chrome. There’s nothing wrong with documenting new features in your browser, but calling it fundament
118.
by mediumdeviation 8y ago
HTML documents don't generally have the concept of lines since text reflow based on the way user agent (browser) is rendering the document. That's why the RFC only talks about text/plain MIME type - browsers render those with
119.
by mediumdeviation 8y ago
Actually Android One devices are also guaranteed (inasmuch as the tiny text at the bottom of the Android One website [1] says) three years of security updates > Monthly security updates to be supported for at least 3 years after initial
120.
by mediumdeviation 8y ago
This [1] happened in 2016. Google can change its privacy policy, but your data is still on their servers. The problem is not just a matter of what Google says about privacy, but a matter of trust, and Google has broken that many times alrea

More ›