torgard

5 ms·

1.
by torgard 3y ago
I should say, doing this only mitigates the middle-click-paste pastejack exploit. The underlying issue - JAVASCRIPT CAN ALTER WHAT YOU HAVE SELECTED AT WILL AND WITHOUT DETECTION - remains, and I believe we'll see other exploits pop up
2.
by torgard 3y ago
No, that's only for pasting specifically. It's copy that's an exploit vector. To disable it, set clipboard.autocopy to false.
3.
by torgard 3y ago
You can set clipboard.autocopy to false in about:config to disable this. It breaks the example, at least. EDIT: I thought the behavior was preserved for textareas, as the comment box here still copied on select. But it suddenly disabled it
4.
by torgard 3y ago
Well, I thought it was fun.
5.
by torgard 3y ago
Glenn Howerton's performance is so good . Best performance I've seen this year, that's for sure.
6.
by torgard 3y ago
The cause of ADHD has not been confirmed yet, but it is generally claimed to be related to dopamine production and uptake. I certainly had ADHD before being exposed to work environments. I've had my entire life. But it wasn't unti
7.
by torgard 3y ago
Yes, but Apple Records aren't going to be phishing Apple Music customers. Phishers won't be applying for trademarks to impersonate Apple.
8.
by torgard 3y ago
My first internship was as a Dynamics AX dev. Me and another guy. Our mentor was a super-duper senior architect something something. He once asked us what we were planning on doing, career-wise, and we were kinda surprised; obviously we wer
9.
by torgard 3y ago
You should set up a health endpoint for that, rather than just serving the default page.
10.
by torgard 3y ago
I've used it for resources that have been permanently deleted, rather than the 404 that you'll usually see. I think it makes sense for that sort of stuff. From a user perspective, getting a 404 after following a link that previous
11.
by torgard 3y ago
Zanzibar is their internal system, and they've released a paper describing it. https://storage.googleapis.com/pub-tools-public-publication-...
12.
by torgard 3y ago
This is really cool. Absolutely fantastic editor! I'm blown away
13.
by torgard 4y ago
I curate a YouTube playlist of interesting, strange, or otherwise insightful content. https://www.youtube.com/playlist?list=PL0yH4m1eWzvGpI_nloNFq... It's very important work.
14.
by torgard 4y ago
There are countless times where I would have found this incredibly helpful. Just 10 minutes ago, I wanted this exact tool. Thanks!
15.
by torgard 4y ago
I was not aware of the data-last convention. Thanks! Makes a lot of sense. My mental model of assign was backwards, and it took me a while to comprehend why their implementation would be data-last. So, the data is the object that is being
16.
by torgard 4y ago
Someone linked me to 1-liners[0], which is - you guessed it - a bunch of one-liners. I think it's nice to have as a reference. But a dependency? Really? My least favorite is assign. Not only does JavaScript feature that natively (thoug
17.
by torgard 5y ago
Yeah same. From the source code, the answer is a random 14-character string, generated on load: function randomPassword() { let letters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; let digits = &
18.
by torgard 5y ago
> Although we'll be working on adding support for recursive queries to EdgeQL in the near future. Is there a roadmap I can subscribe to somewhere? Looking forward to trying this out!
19.
by torgard 5y ago
> full text content of Moby Dick serialized as JSON Reminds me of when YouTube added a new comment system, but didn't specify a max length, and rendered the full text by default. People were spamming the Bible in comments.
20.
by torgard 5y ago
> required GET with a body Elasticsearch also encourages GET with body. But a request payload is undefined, according to the RFC: A payload within a GET request message has no defined semantics; sending a payload body on a GET re
21.
by torgard 5y ago
I dig it! I prefer defining tables like this: CREATE TABLE category ( id int GENERATED ALWAYS AS IDENTITY, name text ); CREATE TABLE post ( id int GENERATED ALWAYS AS IDENTITY, category_id
22.
by torgard 5y ago
Just a heads-up, you might want to take down the example website. Now that it's been posted to HN you might see malicious actors. I also think it's prone to SQL injection at the moment? At least, it's raising a syntax error w
23.
by torgard 5y ago
This is cracking me up LOL It would be an amazing screensaver, just iterations upon iterations of Fucked Up Homers.
24.
by torgard 5y ago
The Stripe docs are a master-class in API documentation. I strive to write APIs that reach the knees of the height of theirs, all while keeping the docs simple and understandable. Amazing. No surprise from me the success they've had.
25.
by torgard 5y ago
This couldn't have come at a better time! I have to do a report on hardening and such of our infrastructure next week. Great!
26.
by torgard 5y ago
Here's a website tracking GDPR enforcement: https://www.enforcementtracker.com/ According to that website, one of Google's 10 fines is the highest fine ever, at €50 million. Hilariously, in a dystopian kind of way
27.
by torgard 5y ago
Companies could be held liable for gross misconduct. Although GDPR is not exactly a shining example of IT regulation, I think it's a good example of liability. Companies get fined for breaking GDPR. Governmental projects should have si
28.
by torgard 5y ago
A post-mortem should not necessarily blame the individual, but blame the circumstances the individual finds themselves in. Yes, a hard-coded password is bad practice. But does the company have a bad culture of keeping configs in repos? Mayb
29.
by torgard 5y ago
> Cloudfront proxy I mean, CloudFront is a CDN too. EDIT: Oh, I misread. You weren't dismissing CDNs entirely. Only this type of CDNs. In that, I agree.
30.
by torgard 5y ago
> initial setup and configuration? If you think there is nothing more to maintaining a database than initial setup and configuration, you are in for a rude awakening. Shit happens.

More ›