tytho

5 ms·

1.
by tytho 5mo ago
I was a heavy macOS Spaces user. Upon a recommendation to use Aerospace from somewhere else here a few months ago, I switched and love it. I considered Yabai, but some features required disabling SIP (System Integrity Protection).
2.
by tytho 6mo ago
At least with pnpm, you can specify minimumReleaseAgeExclude, temporarily until the time passes. I imagine the other package managers have similar options. [1]: https://pnpm.io/settings#minimumreleaseageexclude
3.
by tytho 6mo ago
Game development is often a completely different set of skills and maintenance profile compared to enterprise SaaS development. Many single-player games especially indie ones don’t need to worry about multi-year contracts or having to work
4.
by tytho 9mo ago
I’ve been using Zed [1] for some time now. They are also pretty AI focused so it may only be a matter of time, but so far I’ve been able to disable all of the AI interactions. [1] https://zed.dev/
5.
by tytho 10mo ago
Many applications need a way to contact a user (security breach, password reset). If one only has a username and forgets the password, there’s no way to reverify the user.
6.
by tytho 2y ago
Fly has a form of auto-scaling. You have to provision the max amount of machines then you configure them to auto-sleep. It's possible that the creator didn't anticipate this much traffic or didn't want to pre-pay for all thos
7.
by tytho 2y ago
I can’t speak to the official decisions made by these camps/courses, but from my own experience as an undergrad, I was first introduce to MySQL, and the professors at my university did not teach using migration management tools for bri
8.
by tytho 2y ago
They can be, but they both offer PostgreSQL services. The article touches on Supabase’s other offerings, but the comparison is mostly on the database offerings.
9.
by tytho 3y ago
The browser EventSource constructor does not have options to pass in your own headers. You can pass an option to have it use the cookies for the domain you’re using. There are libraries that allow you to pass in additional HTTP options, but
10.
by tytho 4y ago
Ah, I titled that wrong. Fixed! Mostly authentication, but authorization is also a topic I’m studying a lot recently. I feel like there’s more resources on that than the questions I have about authentication. I’m currently diving into the G
11.
Ask HN: Resources for learning niche aspects of authentication services?
2 points by tytho 4y ago|4 comments
12.
by tytho 4y ago
You can still use `tsc` to validate the jsdoc types. It will spit out errors when types don’t match. You can use `tsc` to export the types defined in jsdoc and other projects that import your module will get all the intellisense and type ch
13.
by tytho 4y ago
I won’t speak for others, but I for one can’t stand the amount of extra packages needed to get a TypeScript project working. I need to install adapters for my linter, formatter, test runner, editor, bundler to name a few. Hopefully it all w
14.
by tytho 4y ago
There is another way that isn't _as_ kludgy, but still not as nice as the JavaScript proposal: computation() |> then(&Map.put(my_map, key, &1)) It's the big reason the `then/2` function was created from my
15.
by tytho 4y ago
From personal experience, you don’t ever “just use TypeScript”. You have to install plugins, adapters, parsers for every other tool (linters, formatters, bundlers) to also make them work with TypeScript. Adding TypeScript into the mix incre
16.
by tytho 4y ago
That's definitely more convenient. I think it could be nice to have an additional test suite not written in the same language as the thing you're testing. It would force you to interact with your program the way the rest of the wo
17.
by tytho 4y ago
We're seeing some issues possibly related to s3. Uploads working, but downloads seem to fail occasionally.
18.
by tytho 4y ago
My input probably isn’t as valuable except as a data point, but the company I work for (around 100 employees) moved all employees over to a 32 hour/4 day work week without a change in salary. No negotiation involved technically, though
19.
by tytho 5y ago
You can pass a ‘withCredentials’ option.
20.
by tytho 5y ago
I think that works great! The complaint I’ve heard is that you may need to support multiple ways to authenticate opening up more attack surface.
21.
by tytho 5y ago
He was likely using a polyfill. It’s definitely not in the spec and there’s an open discussion about trying to get it added: https://github.com/whatwg/html/issues/2177
22.
by tytho 5y ago
You cannot send custom headers when using the built-in EventSource[1] constructor, however you can pass the ‘include’ value to the credentials option. Many polyfills allow custom headers. However you are correct that if you’re not using Jav
23.
by tytho 5y ago
I was just helping a family member with this same issue (large amount of “Other” space) and turns out it was some unmounted volumes that had somehow been created. We couldn’t track down what was on them in the time period I had to help, but
24.
by tytho 5y ago
In general, I agree that sessions should be opaque tokens stored in an http-only, strict same-site policy cookie. I just had a few problems with a couple of the arguments: > 3. Could have stale data The only use case I've seen for s
25.
by tytho 7y ago
I would also add my (admittedly limited) experience to using CDNs in this way. If you do add the subresource integrity attributes (which a lot of major CDNs don't support because they change the content based on user-agent), you should
26.
by tytho 7y ago
Super interesting article that has reflected some conversations at past workplaces with coworkers. I can't seem to find who actually wrote the article. The About and Contact pages are blank, and there's no attribution on the artic
27.
by tytho 7y ago
I read part of an early chapter of a book that taught a lot of these concepts in a practical way. The book isn’t out yet, but will be in the next month or so: https://pragprog.com/book/egmicro/practical-microservic
28.
by tytho 8y ago
I worked on a codebase that used the old "domains" this way, and it was very kludgy. We could get unit tests working, but we essentially mocked calling that 'set' method before the function we were testing used it. We ev
29.
by tytho 8y ago
I believe the extension can be used in conjunction with the app to let the app use the cookies in your browser session, but to be honest, I've only seen others do it, and it was back in the day when Postman was just a "Chrome App&
30.
by tytho 10y ago
Perhaps someone has already suggested this, but what if npm had some sort of "unpublish block" if any modules depended on yours? Or maybe some sort of notification to the dependent package owners. This doesn't solve the issue

More ›