9point6

NPM is deterministic when there using the same package.json and there is no existing node_modules folder.

And if you want to lock versions for your entire dependency tree, npm shrinkwrap is what you're looking for (It's essentially the same as lockfiles in other development package managers). Though for security reasons I prefer to keep things locked to a major version only (e.g. "^2.0.0"). Shrinkwrapping is useful in this instance too if you need to have predictable builds (and installs as it'll use the shrinkwrap when installing dependencies too if it's a library rather than the main app) but want to ensure your dependencies stay up to date.

It's not perfect by any measure, but there are ways to make it work the way you want.

Ah I wouldn't count Node as a framework as I'd equate it to the JVM in Java world. But you are right, I'd probably lump webpack in there as it does have a fair bit of depth to it if you want to get the most out of it.

I think your use of "minimum" is wrong here. If you're using React running on Node and Webpack as your task-runner you just need Javascript and that's it.

Node allows you to run isomorphic JavaScript that runs on both your server side and client side (to ensure you don't end up with the Angular-style skeleton pages coming from the server), You can pick a nice ORM (like sequelize) to abstract away SQL, and Webpack allows modules to specify their styles in JavaScript to allow compossible CSS for each given page.

Yes this is still using a couple of frameworks, but I personally prefer the approach of a lightweight standard library to the everything-and-the-kitchen-sink approach that other languages have.

Because it's rare for hardware manufacturers to be good at software and also that those hardware manufacturers don't want to spend to license something better that 95% of their customers wouldn't really care about.

To be fair in the current situation, it's not worth buying a TV for it's smart capabilities because they'll rapidly fall out of date. It makes more sense to buy something like the Nvidia Shield which can be swapped out without replacing the panel should it be needed

Actually, even IE10 has a fairly usable flexbox implementation, it's just based on a draft spec, so the property names and values are a bit weird.

Just avoid the old webkit draft (the only reason you'd consider it these days is for old <4.4 android phones) if you're working toward backwards compatibility, it's not worth the pain.

9 to 5/5.30 (inclusive of an hour lunch) seems pretty common in the UK. It's also common to have flexible time, so I work 10am to 6pm most days.

They block anything they can detect as a VPN, which is a pain in the arse, because I don't want to browse at all without a VPN, so I can't use netflix at all any more.

You've more or less invented Hola Unblocker with a few limits

That's subjective at that point, I'd personally regard running an insecure configuration for supposedly secure connections as improper.

Ah, I actually didn't realise this was the case, I've always used `.bind(this)` for this kind of thing.

The whole point of major version bumps (in semver) is to allow of these kinds of breaking changes. When should these changes be made if not during a major version bump?

To be fair, that context parameter has only just been removed as part of 4.0.0. Instead they recommend you change your code to be of the form:

    _.each(collection, _.bind(function, context))

Which actually seems a lot more correct than some arbitrary context parameter

Same as me on a British Mac keyboard number pad

Aside from situations where high security is needed (which would necessitate a dedicated piece of hardware to be the 2nd factor), Why are you adverse to using a smartphone as the 2nd factor?

The lack of support for Chromecast/Android TV is the big killer for Amazon Prime video in my book.

Also the shady practice of removing alternatives to the Fire TV Stick from the Amazon store leaves a pretty bad taste as well.

On the other hand, Clarkson assaulted a member of the production crew because the hotel he was at didn't have hot food. It's plainly obvious that he should (and was) have been fired for that - had they not it kickback would give the BBC much bigger problems.

The Top Gear brand is still owned by the BBC and they're rebooting it with a new set of presenters, so Top Gear is far from over yet.

What was the thinking behind the decision to require the tool to run a server on port 80, It's not unmanageable, but having to kill my web server to get new certs seems an odd decision to make.

I wonder why it's not ARG10101010 for 10-bit RGB + Alpha

Surely it's not actually 2 bit Alpha in ARG2101010

I've been hoping this would show up in JavaScript after playing with CoffeeScript a few years ago. Being able to do:

    foo?.bar?('baz')

was quite nice.

Well, Halifax (one of the bigger banks in the UK) has a similar config: https://www.ssllabs.com/ssltest/analyze.html?d=https%3A%2F%2...

I would have expected banks to have audits for things like these fairly regularly. Does anyone know why they are running such a broken configuration when a lot of these vulnerabilities have been around for months/years? Not to mention that even ignoring any vulnerabilities, their ciphersuite is dire.

For a lot of business owners using an old version of IE, the browser is something to facilitate their bespoke ActiveX application. They probably don't care if their employees can browse less sites.

And on the flip side, a lot of those employees are a sizeable chunk of business for other businesses when they browse on their lunch breaks or whatever. So, large sites aren't going to fully drop support for any browser until after the market share has dried up.

The windows 7 ones allow you to re-arm the activation a number of times (I think it's up to 5 times?) using the `slmgr /rearm` command.

Does the windows 10 one not have this facility?

No, they're actually different browsers, though both came with windows 10.

https://en.wikipedia.org/wiki/Internet_Explorer_11

https://en.wikipedia.org/wiki/Microsoft_Edge

I suppose that's why IE has been discontinued and Microsoft developed "Edge".

I'd be interested to hear about these hot spots though (if you've blogged about them anywhere?). I've generally been quite pleased with Microsoft's browser effort in the past couple of years. Safari is quickly travelling toward becoming the next IE9 with the kind of weird bugs I've come across recently.

Anyone have any idea how to configure this with a proxy in OSX? It seems to be ignoring the HTTP_PROXY env variable

Also, no Chromecast support is a deal-breaker for any VOD app for me.

Seems to be luck of the draw whether each pageload goes through or not

Are there any sensible, albeit less popular, modern equivalents to XMPP?

Passwords & credit card details are something to hide

Though working fine on Windows 8.1 / Chrome

Edit: Actually, only working fine on the first link. All subsequent links get captured