three14

8 ms·

1.
by three14 5mo ago
The only reasonable design is to have two kinds of API keys that cannot be used interchangeably: public API keys, that cannot be configured to use private APIs, and private API keys, that cannot be configured to use public APIs. There'
2.
by three14 7mo ago
> Is there something less cooperative than a task that doesn't yield its control back to the main thread? Of course it does yield back to the main thread in my example, at each await point, just like any other cooperative task. In m
3.
by three14 7mo ago
Then someone should really update the official python docs that explain the fire-and-forget pattern ( https://docs.python.org/3/library/asyncio-task.html#asyncio.... )! I had a FastAPI server, and calling a particul
4.
by three14 7mo ago
The thing that burned me with asyncio primitives is that calling an async function doesn't even schedule it (by default). The pattern for fire-and-forget is impossible to guess when coming from any other language - although it's c
5.
by three14 9mo ago
But if you release the O2 and convert it into diamond, then by my highy-suspect back of the envelope calculations, it'd be a diamond that would fit into one square kilometer, 87 meters high. It would make quite the tourist attraction.
6.
by three14 2y ago
If you do speak Hebrew, you would know that Netanyahu and Gallant have been heavily attacked by the extreme right specifically because they have been refusing to cut off food.
7.
by three14 3y ago
My argument is that is not the choice we are given. We are given only the choice between too much regulation and too little.
8.
by three14 3y ago
I am sure that new designs would be better on paper. I am also sure that a regulatory regime in which nuclear plants are allowed to be exactly as unsafe as fossil fuel power plants would somehow turn out in the real world of money and pol
9.
by three14 3y ago
Not to pick on you, but every time this discussion happens on HN, someone argues that the nuclear power industry is burdened by far more red tape than other industries (probably true) and that if we simply reduce the red tape, we could prof
10.
by three14 3y ago
Complete anecdata, but a few months ago a neighbor of mine successfully resuscitated another neighbor with CPR. There was an AED present, but from what I heard, it did not recommend a shock. The person who collapsed is around 70 years old.
11.
by three14 4y ago
Maybe it knows the answer, but since it was trained on the internet, it's trolling you.
12.
by three14 4y ago
The real story in Israel is more complicated; the courts have taken power from the other branches; it's about time for there to be some kind of correction, and is often the case, the rebound might very well go too far in the other dire
13.
by three14 4y ago
Quick turnaround! July 14, 2022: Reported vulnerability to the Computer Emergency Response Team (CERT) Coordination Center. July 15, 2022: CERT/CC reported vulnerability to SQLite maintainers. July 18, 2022: SQLite maintainers confirme
14.
by three14 4y ago
To hijack the thread a bit, if you are still with Dropbox, could you get them to implement what you did in #2 in the official Dropbox JS SDK? Right now it still does a pre-flight request for everything.
15.
by three14 4y ago
I'm having trouble reconciling the rest of the article with this: > If a death occurred either on the 18 hottest or the 18 coldest days that each city experienced in a typical year, they linked it to extreme temperatures. Using a st
16.
by three14 4y ago
Thanks! I actually got as far as your [1], but incorrectly assumed that 'site' meant 'origin', so thank you for explaining.
17.
by three14 4y ago
And can someone explain how I'm supposed to implement SSO? We have a bunch of subdomains that support SSO by communicating with an iframe that has the logon status stored, but it appears that the iframe wouldn't have access to i
18.
by three14 5y ago
"Doesn't work how you'd expect" reminds me of the time that we had users receiving responses from other people's requests. Why? Our API is idempotent, but we needed to use POST instead of GET to let the browser send
19.
by three14 5y ago
His whole point is that the occasional person who IS "phoning it in all the time" will appear to be very good at their job, possibly better than the people who are really trying their best to get it right.
20.
by three14 5y ago
I basically agree with you. The counterargument says that some innovation simply doesn't happen for centuries, until it finally occurs to someone. You want to incentivize those kinds of innovations as well, to get people to revisit old
21.
by three14 5y ago
I like this idea, but the pro-patent argument says that some things become obvious only after you see them. Once a company starts selling a product with the new idea, everyone will figure it out, and it will become part of the set of th
22.
by three14 5y ago
I was interested to note that the Dropbox API offers a hack to avoid the extra CORS request - among other details, their server accepts this: - Set the Content-Type to "text/plain; charset=dropbox-cors-hack" instead of "
23.
by three14 5y ago
Why would you expect a company that pays for buffers to be able to compete with a company that doesn't, even if the first company is owned by benevolent founders? Shouldn't the company that's cut inventory to a minimum be abl
24.
by three14 5y ago
They're not making money from the person who defaults (well, maybe if they default after a long series of payments). They're making money on average by lending to a lot of people, of which only a subset default. If you look like a
25.
by three14 5y ago
Without the (old) extra inconvenience, it would probably be higher than 1%. Also, it could be that this mechanism substitutes for some of the previous anti-theft measures, so it's hard to use the $719,548 figure to conclude anything ab
26.
by three14 5y ago
The question is whether the small-scale activity has an impact on hunger, though. Very anecdotally, when I'm active, I have an easier time feeling full.
27.
by three14 5y ago
I'm curious if there's good data on what constitutes a "sedentary lifestyle" over time. In the early 1900s, I suspect people with desk jobs had a lot of small activity over the course of the day that we can now avoid. I
28.
by three14 5y ago
The alternative is hiding most of the reports by default. It's a firehose, and almost all of it is guaranteed to be useless. For example, denial of service in a devDependency shouldn't be shown unless the user specifically request
29.
by three14 5y ago
A lot of these cases that npm reports are denial of service vulnerabilities (and marked high risk!). I just tried it on a project I have, and 11 out of 15 are DOS vulnerabilities in code that I run locally. When the normal user is using a p
30.
by three14 5y ago
Googling Stackoverflow itself can sometimes be a high expertise skill, simply because sometimes you need a fairly good understanding of your issue to figure out what to search for. A recent example: we had an nginx proxy set up to cache API

More ›