robbya

I believe GitHub will show a changes since last review view after you review code, new changes are added, and then you return. What software are you using?

It's insecure for certain applications.

Here is Linus on SHA-1 in git: https://www.theregister.co.uk/2017/02/26/git_fscked_by_sha1_...

This is correct, using a commit hash is safer.

However, you'll sometimes want to update the commit hash after the action's maintainer releases new code. If you don't then you run the risk of running an old action that has vulnerable components or bugs.

The easiest workflow for that should be Dependabot's updater for GitHub actions: https://dependabot.com/github-actions/ Has anyone tried that approach for GitHub actions?

You still need to review the action's code before you use it, and every time you update to a new commit hash. But this approach protects you from automatically running new malicious code pushed to master/re-tagged.

This should include some data transfer and associated costs. Some of the services the services listed include a certain amount of bandwidth in the listed price, while others don't.

I'm curious what sorts of things you had running and how complex moving off was. I'd expect any cut to have some announcement period, which I'd expect to be longer than a few months, so you may not have needed to migrate so soon.

Moral? I'm not seeing one.

I think it's a clever way to support free and open source projects. Free edition is for everyone, trials, demos, etc. Paid enterprise version is for companies that are happy to pay to get some extra value. Build it yourself enterprise version is for people who don't want to pay, people that get less value from the product than the price, hobbyists, etc.

Caddy (a web server) used to do something similar.

Or email

I spent too long trying to understand how the ad blocker worked -- but it's a tool to block installation of the browsers.

I think when you have a mapping of keys to values you really need to have an understanding of what keys are possible (so you don't have an exception accessing the map).

Java enum classes work well for enumerating those, so I end up creating those. These work great so if I use the enum in an if-else sequence the compiler knows if I covered all possible values.

For mappings I instead add a constructor to my enum class so that I can setup the mapping as an instance variable.

The table could really use some sticky headers, alternating colors, or highlighting to make it easier to make it easier to read, especially on a small screen.

I'd love some insight into why certain answers were selected, some don't seem right to me (but I may be misunderstanding what the row means).

This is cool, but keep in mind that the operator can also get SSL certs for your site (they just point the domain somewhere else and use Lets Encrypt or similar to get a certificate). So from a security perspective, you are putting a ton of trust if you use this for anything real.

Worth talking to a lawyer. The specifics matter, and they'd be best able to guide you.

Does this use Troy's have I been pwned dataset?

See also: Erlang's crash on error, with clean restart philosophy.

https://medium.com/analytics-vidhya/erlang-is-not-just-a-lan...?

Full text here: https://www.usenix.org/legacy/events/hotos03/tech/full_paper...

I think a lot of the issues stem from focusing on the mobile app, and not prioritizing performance of the web app (or possibly, deprioritizing the web app and expecting users to migrate to the mobile app).

I.E. I'd guess it's a business focus issue, not specifically the tech stack used.

For the unfamiliar, what marketplaces exist? I don't think I've come across these.

2013

There's a lot of ways to get encryption wrong. A few subtle changes could undo a very deliberate countermeasure for a somewhat obscure vulnerability. I don't think that's good advice.

As a website owner, how do I track down all the alternate roots I'd need to register with? If each of those charge a fee, how much will I need to spend on each root? If I need to perform an OPS task like flipping to a new external load balancer IP, how many alternate robots do I need to coordinate with, and how much testing do I need to verify each root is updated?

A few years of heads up is sufficient to disclose publicly. Full disclosure helps keep companies honest about security.

Requires an email address to see details in the report, including the info from the HN title.

Escape key is back! As a vim user I hated the touch bar escape key. Mapping caps lock worked, but I've got too much muscle memory for the normal escape key location.

Installing an extension to monitor employee use of a company computer is legal and generally accepted behavior.

If the Google calendar is for a personal gmail account, then accessing the calendar details server side is a huge privacy breach.

> I am not feeling like

> I don't like

You gave us some good insight to how you are feeling, but we should also consider what your needs are from a job.

Do you know what you would do for money if you quit? Do you want to be a customer service representative somewhere else, or are you considering a career change?

An English title like "A search tool helps dev to solve the naming things problem" would likely improve this submission.

I'm confused. The Github link just has PHP code to perform the check, but the linked page clearly shows javascript usage. Maybe the link is wrong?

Since Tor users may also have javascript disabled, I'd suggest that the PHP could add a link for the user to click manually.

I file using Turbotax using a web browser on linux. Why do you mention Windows?

I get that, but if Bitcoin is integrated into Facebook messenger then it would also see a huge boost in users.