76 karma · joined August 16, 2016
I find it interesting that one of the reasons given for the reduction in package size is due to such a simple indentation change from 4 spaces to 2 spaces.
Not interesting that 2 bytes are less than 4 bytes, rather, TypeScript is a large project and it would be interesting to know how much size was saved from this one specific change? Seems like a trivial change, so why not do it sooner? And assuming readability isn't required in the bundle output why not bundle with no indentation at all and put everything on a single line, would this not be even smaller again?
In terms of how it actually performs, it’s only been deployed in staging and a limited user preview version of the site so far, so it’s yet to experience much of the bad traffic or edge cases that might hit the production site.
I haven’t used it for a while, but I remember Balsamiq being a great tool, especially for quick low-fi UI wireframing.
Examples of allowed operating system identifiers could be `freebsd`, `linux-gnu` or `linux-android`. So, while it seems like four components, the last two seem to get combined to refer to a single "operating system identifier".
I'm no expert here, so corrections welcome, I was just curious from your comment and thought I'd share what I had found.
[1] https://wiki.osdev.org/Target_Triplet
[2] https://clang.llvm.org/docs/CrossCompilation.html#target-tri...
https://github.com/MitchellCash/ansible-anu
It is based on the DevSec OS/SSH hardening playbooks, but I lean closer towards ease-of-use over security where I think it makes sense. For example, I disable forced password rotation and I keep the default umask value of '022' instead of the more secure '027'.
When I come across something the upstream playbooks change that "gets in my way", I will disable it if the security trade off makes sense for me. I'm not running highly sensitive systems, so these trade-offs make sense for me, and maybe they will for you as well!
In terms of ongoing security upkeep, I run the usual `apt update && apt dist-upgrade` when I can, but I’ll be keeping my eye on this thread for additional advice.
I went back the last few versions major release notes and didn’t see mention of the initial work to improve the JavaScript memory management. Is anyone aware of this work/what’s going on to improve memory management here? Interested to read more about the technicals!
They’re not explicit with regards to the activist, this would mean the activist was notified upon ProtonMail receiving the request?
I’m not sure there’s much you can do but lawyer up if you receive such a notice, but potentially the activist could have immediately started using Tor (maybe too late though, because to read the notice they might have already leaked their IP).
I enjoyed it for being able to have a quick back and forth when I had a question for something that was stopping my current task. Alternatively, I would be waiting on an unknown response time to a chat message which lead to a lot more task switching mid progress. But most of all, I just enjoyed the general talk that comes from being on a non-specific all day call - sports, family, news, etc. I learnt a lot more about my work mates that I otherwise wouldn’t have, which made us closer and work more enjoyable, plus working remotely can just get lonely sometimes.
I say all this and must mention that this call would happen daily for 6 months or so, but has slowly lost participants or only happens every other day as the company changes/grows. For me, I would like to see it come back!
I was previously using Jekyll, but moved over to Gatsby a few months ago and have enjoyed the built-in features of Gatsby and it’s surrounding ecosystem so far.
I have also considered integrating a git based CMS like Netlify CMS, but because it’s so easy to make new blog posts with just a git commit and a push I haven’t taken the time to change the workflow.
Links:
This is about the only cyber security news I directly follow and it tends to keep me abreast of the major going ons and the 20 minute length is short enough to digest daily.
If a project owner really wanted they could just delete the whole repo (which includes issues et all) with no warning or confirmation from collaborators. But that’s a larger more destructive move, whereas, deleting a politically fuelled issue can be abused with far less repercussion.
Not on an issue, but I did once have a moment where I could have used a delete function on a pull request. I merged a pull request with my personal account on a repository I had only been working on under a pseudonym. From memory even resetting to an earlier commit and re-merging again with the correct identity didn’t work as GitHub kept a record of the original merge on that pull request. Which only further tied my two identities together as I tried to correct the mistake.
There were two things I thought could use some improvement.
First were the two images of a list of hyperlinks that look clickable. I tried clicking on the links to no avail thinking they were broken, only to realise I was clicking on an image. The two images in particular are the News Sections and Newsmakers images on the homepage.
The second point was that I initially couldn't figure out how to access the service. I had to click on "Read the U.S. edition" which sounded like a sub-section of the site, not the main news aggregator service. What threw me off was the website slogan of "Daily news from around the world", I was trying to find the rest the news, not just the U.S. edition. If this is the only option right now, it could possibly just say "Read the News". Take this with a grain of salt though as I am not a U.S. citizen, so I might not be your current target audience right now.
I made an identical page using `rgba(1,1,1,0.65)` and it looks better on iOS.
https://countdownto.xyz/c/jnfztcj0
This seems to be only a WebKit issue, you can produce the same results on desktop Safari. Other browser engines must detect when an alpha channel value is used with an `rgb` CSS attribute and update that attribute to `rgba` accordingly as an assumed fix.
I've tried to move my friends onto alternative means of communication, predominately Signal, so I could disassociate myself from Facebook, but my friends just don't stick it out. We converse as per usual over the first couple of months, but then their replies slowly dwindle down and if I go back and message them again over Facebook Messenger they respond as soon as they see the message.
Although them not moving to Signal is a pain for me, it's a bigger pain for them to move to an alternative messenger. Why would they want to use two different applications to message friends, let alone to just message one friend. A lot of these people aren't the technologically minded folk of Hacker News, these are the type of people who are Facebooks primary target audience. They don't care about how invasive Facebook can be with advertising or that their communications actually aren't that private.
I would love to see all my friends and family messaging me over some encrypted and decentralised messaging application so I can leave Facebook for good, unfortunately I just don't see that happening for the circle of friends and family I have.
I would highly recommend checking out Radarr (https://github.com/Radarr/Radarr) to replace CouchPotato as I find CouchPotato a very inconsistent experience, and sometimes I am outright confused as to what it is doing (seemingly not snatching the movies I want it to).
Radarr is actually a fork of Sonarr, so you can expect a pretty good experience right from the start and the development has been very active since it was announced around a month ago. The project only being a month old is the only caveat as I am still uncovering minor bugs, but the devs are quick to fix.
I also noticed this. But I have the mind frame that they are still a fairly "new" company, 3 years old, compared to Dropbox, 9 years old, and their growth and features continue to improve. In saying that, I would definitely prefer a more native look on macOS.
Besides that sync was quite slow compared to Dropbox.
I'm from a place in Australia with a generally slow Internet speed, especially upload speed, and may not have noticed this pitfall as much as others might.
"Gitless is an experiment to see what happens if you put a simple veneer on an app that changes the underlying concepts. Because Gitless is implemented on top of Git (could be considered what Git pros call a "porcelain" of Git), you can always fall back on Git."
I recently signed up for Sync.com, due to their prioritisation of security features and they seem like a good company. I have come across some minor bugs, but I sent these onto their customer support who were reasonably responsive. Even with these minor bugs I'm still happy with the trade-off to move off Dropbox.
I must admit the most difficult part was definitely the services I used that directly integrate with Dropbox, like 1Password syncing. So I also had to find solutions to not just Dropbox, but also third-party services that integrated. For 1Password, I signed up for their Account option where they handle the syncing for you at a cost of $2.99 per month. Again, another trade-off I was happy to make.