spookylukey

10 ms·

1.
by spookylukey 5mo ago
The project pyastgrep https://pyastgrep.readthedocs.io/en/latest/ can use CSS selectors as a query language for Python syntax (default is XPath). e.g.: pyastgrep --css 'Call > func > Name#main'
2.
by spookylukey 8mo ago
Please, please - just link to the actual "CUE" project. Not everyone has heard of your favourite thing. The first reference to `CUE` should be a hyperlink. For other people: I'm pretty sure the author is talking about https:
3.
by spookylukey 3y ago
https://lukeplant.me.uk/blog/ Over 200 posts, spanning nearly 20 years. Mostly on programming, Python, Web development, some personal and Christian stuff.
4.
by spookylukey 4y ago
I did a fairly detailed breakdown regarding the Python library Parsy: https://lukeplant.me.uk/blog/posts/python-type-hints-parsy-c... This is not to make the general claim "Typing is a hindrance in parsing ap
5.
by spookylukey 4y ago
Just the other day I added a recent example to that page, from https://www.wsj.com/articles/internet-mangles-names-accents-... where it is obvious that databases are storing pre-escaped data. This might be because of r
6.
by spookylukey 4y ago
This is nice. With variable fonts, some of these fonts now are slightly under-represented - for example "Recursive" is really a large family, the website shows just one extreme point of a large multi-dimensional space. I'm cu
7.
by spookylukey 5y ago
The default user model is fine, but I *always* start a project by extending it, for future-proofing. If you need to add to it, this is *so* much better than having to add a one-to-one, and at *some* point down the line you find you do want
8.
by spookylukey 5y ago
I find it very strange to have claims about the database being tamper-evident etc without a clear description of the threat/trust model, and how/for whom it works. For example, what data does the client need to store to be sure no
9.
by spookylukey 5y ago
I think the case for server-side HTML rendering has never been stronger, and of all Django projects I work on, the ones I enjoy most are those that never got on the SPA bandwagon. From both a developer and user point of view I find them muc
10.
by spookylukey 6y ago
I found Martin Fowler's "Technical Debt Quadrant" helpful on this - https://martinfowler.com/bliki/TechnicalDebtQuadrant.html . He argues you can have deliberate and inadvertent debt, both of which can b
11.
by spookylukey 7y ago
Also, xmag, you already have it installed if you use the X Window System. It's 41kb, extremely lightweight (always starts instantly) and also magnifies a screen portion which is helpful for picking colours.
12.
by spookylukey 8y ago
Could you do the following in TypeScript? Can you, for any button in your interface, at any point in time, reliably calculate at runtime what your page's data model would look like, and if there were going to be any side effects, if yo
13.
by spookylukey 8y ago
"real money from real people's savings accounts" is not how it works. See this book - https://www.amazon.co.uk/Where-Does-Money-Come-Monetary/dp/1... Banks do indeed make money "from nothing&qu
14.
by spookylukey 8y ago
There is no value in it because it is a false promise. If you give someone access to data, you have lost control over it, especially if it is by email - because not everyone uses Gmail. Many of those who do do not use the web client, and em
15.
by spookylukey 9y ago
> There is some innate affinity for computer programming which you must be born with, and cannot be taught. This being a falsehood is a matter of considerable debate, and it's impossible to prove (There are certainly some people wit
16.
by spookylukey 9y ago
This is not the case - with Django's ORM you are still susceptible to the N+1 problem. It can be largely mitigated through `select_related` and `prefetch_related`, but the fundamental issue is there - that simply by accessing an attrib
17.
by spookylukey 10y ago
That's really helpful. Can you make an example which doesn't require making the my_handler function 'async'? For cases when you don't want to make an entire async stack, you just want to slot some async code into yo
18.
The very minimum you need to know about words(lukeplant.me.uk)
1 points by spookylukey 10y ago|0 comments
19.
by spookylukey 10y ago
It's a bug: https://bugzilla.mozilla.org/show_bug.cgi?id=307089 Or, it's a memory saving feature. To implement "View source from cache" requires keeping around the raw page HTML, which you might not othe
20.
by spookylukey 10y ago
Yeah, the video made me want to go outside and run, not take my mobile with me, and certainly not stay in and tap a screen.
21.
by spookylukey 10y ago
The current spec has a serious flaw for CSRF prevention - it doesn't include the protocol in the definition of site, only the domain. This allows a MITM'd http page to CSRF a https site. This same flaw is in cookies themselves - a
22.
by spookylukey 11y ago
One issue they don't address is one of culture: curl|bash is much less secure, in general, than using your package manager (since not everyone will serve downloads over HTTPS, and won't take the steps described in the article etc.
23.
by spookylukey 11y ago
How did you replace Fabric? I've hacked things together with some branches of Fabric + devs that just about work on Python 3, but it's not really satisfactory.
24.
by spookylukey 11y ago
You need to be more specific. In the face of what kind of disruptions will it continue? For example: * do you need to keep supplying electricity? * do you need to keep paying the bills so that someone else will supply electricity? * will it
25.
by spookylukey 11y ago
YAGNI only makes sense in the context of other extreme programming[1] practices, such as making code safe to modify through unit tests[2] and easy to modify because you refactored mercilessly[3] to produce a nice, modular design. I suspect
26.
by spookylukey 11y ago
Working out whether someone is smart or not on the basis of how an entirely informal conversation goes makes you extremely vulnerable to biases. Read "Thinking, Fast and Slow" by Daniel Kahneman and you will become much more suspi
27.
by spookylukey 11y ago
From the plans page: Business plan, 100 comments per month, $49 per month. That seems ridiculously expensive to me - ¢49 per comment! Is this a typo for "100k comments per month" perhaps?
28.
by spookylukey 13y ago
You should really use SQLite! You will either end up with an ad hoc, informally-specified, bug-ridden, slow implementation of half of SQLite ... or, you will fail to even attempt the features that SQLite gives you - such as locking and de
29.
by spookylukey 13y ago
No place for comments on the post, so I'll reply here. I think the definition of wealth that is quoted at the top, and the one I normally use, is different from the one you are using (at least at some points). As far as I understand th
30.
by spookylukey 13y ago
This doesn't really attempt to hide the fact of communication from computers - only from humans casually viewing the image. steghide has a far superior approach: http://steghide.sourceforge.net/ But that can be broken

More ›