cphoover

You don't need a `HTTP POST` to update server state this can be done with cookies/headers or the uri (granted doing so in the URI is a CSRF risk). Point being, client originated updates are an inevitability as long as we allow variable data to be passed from the client to the server.

They do... contents of speech are one of multiple input data to youtube indexing.

Also you can search individual videos by showing transcript and pressing ctrl-f

This was my experience too... I tried to us tessaract for mobile app that scanned food labels in realtime using the camera video feed, I found that google's ML library text recognition was much faster, and reliable.

hmmm.... im trying to understand the benefit of secretless broker... if someone compromises thisnwouldnt they have access to all credentials for everything?

now we are just moving from trusting a bunch of distinct services to trusting this single broker... just moving the responsibility of trust to a single point of potential failure no?

Also dont credentials have to be passed to secretless broker? how does it know the application has access to the service? isnt that still at risk of being leaked.

i like the idea of not thinking about secrets but it seems to good to be true.

This is interesting though I doubt I would ever enable this because I loathe popup advertisements probably more than AMP

Yea I guess... How would I set this up? Do I need some sort of wallet? How would a random website author know what to do with this specific cryptocurrency?

I agree 100%.

There are still things about brave that confuse me... like the browser feature that allows giving crypto to content providers...

but as someone who loathes AMP... I support this feature.

.... I dunno what the distinction is...They clearly were scraping all data, in terms of display they extracted pieces of publicly available websites to use as descriptions and titles, and images. They displayed cached versions of websites. So the amount of content you take of the larger body makes the distinction? But as you get larger those rules no longer apply? It doesn't make sense to me.

Plaid seems to think so

I agree. to me this is like people complaining someone is taking a photograph of their front yard... If you don't want something visible, don't display it to the world.

Why not isn't that how google has become one of the largest companies in the world?

My mistake

100% why I prefer avoiding languages that fall into the OO+Inheritance trap, if I can help it.

Don't forget Reddit and Hacker News

In my professional experience there is a lot of poorly writtem, convoluted spaghetti code, that is extremely hard to follow. Im not sure why people seem think reading code is easier than writing code... this is often not the case.

I'm surprised they still support video dislike via API, but have removed it from the user interface... I understand they are likely worried about backwards compatibility with the abundance of client-devices, and not inadvertently breaking some app somewhere, but why not just make it a noop...

Unrelated: My treadmill has the absolute worst YT client I've ever used.

I love my framework... But be careful If taking out the battery. The battery connector socket on the mother board is extremely fragile. I learned that when I bent the pins in the socket when reattaching the battery...

aren't voice activated personal assistants currently dominating this space? do you have any plans to support voice control?

explain this comment?

Really terrible take seeing as Javascript devs span all areas of focus and every level of experience, and education.

I've seen plenty programmer's with CS degrees make terribly dumb mistakes, and some self-taught developers are some of the smartest people I've worked with.

There are more javascript developers, because JS is far and away the most popular programming environment due mainly to its ubiquity on the web. Because of that the JS supply-chain is a much larger attack surface than most languages.

ehh nobody has to reveal themselves... but I don't want to necessarily consume random packages from anonymous authors either...

I think that a sanction list would make sense, perhaps https://socket.dev/ could use it as a data point for alerts if they are not already

Yea it's just sitting in the shallows of the Chesapeake near where I live likely destroying the ecosystem

Evergreen Marine? Isn't this the same company that ran aground in the suez canal? What gives? How would they not prevent this from happening so close to that last huge nightmare, and bottleneck in global shipping?

Without speaking to their likelihood of success (enough posters have already spoken on this), one thing I think is interesting is Stack-it have limited scope to compute/storage/security and network orchestration resources.

It's almost like AWS before they expanded to having a mind numbing number of service offerings. Who can keep up with all these? Who, other than people training for cloud architect certifications?

I worry that AWS has lost focus on its core services and instead is trying to market every shiny new thing under the sun... I work in finance, my corp is in us-east region. I think we had like 3 AWS related incidents that caused serious production outages last year... All from use of core AWS services. Now we are looking to support cross-region fault tolerance to defend against this. Supporting such a strategy sounds like it's going to be quite expensive, and technically complex.

as too*

I don't know I work for an old-school very corporate-feeling company. I feel like I would be presenting as too casual. I work in finance and while we (software developers) don't have to wear suits or traditional business-ware like traders, fund managers or other associates, sitting in my sofa couch in a t-shirt just feels like it would come off ass to casual.

While I do not always put my camera on... (sometimes I like wearing a raggedy old t shirt and taking a call from my sofa chair) I think this shows one major advantage to face to face communication which is human connection.

Wait... sigterm can be handled to gracefully handle shutdown of your pod... i.e. finish handling all existing requests before closing.

I'm not sure the issue here, that sigterm is sent before removal from the load balancer? If you handle the sigterm gracefully doesnt this solve your issue...

I'm no k8s expert so maybe I am misunderstanding the problem

" you can use the smartphone to re-record a pre-recorded fake video."

I assume the intent is not to store solely a direct hash of the original video, but also the original file which can be fingerprinted, or the fingerprint itself that will be matched if a later duplicate is uploaded.

Fingerprint differing from hashing in that two non-identical, but similar files (e.g. an original video and deepfake) can have the same fingerprint, but differing checksums.

You can have an immutable centralized/federated system without using "crypto" though "proof-of-work", there are databases out there that provide immutable storage that don't require this overhead.

Providing api access to a signed immutable database makes sense... but I'm not sure how much sense utilizing existing popular cryptocurrencies would make (e.g. bitcoin, etherium)