HNHacker News
TopNewBestAskShowJobs

shrew

181 karma · joined November 7, 2019

submissionscomments
shrew··on I don't want to do front-end anymore
You can still do this with Vue 3! The CodePen embeds they use in their "Getting Started" docs are all still just loading in an external library and making use of it with vanilla JS.

https://codepen.io/team/Vue/pen/KKpRVvJ

shrew··on Firefox 85
Have you possibly installed Firefox Focus mistakenly? I purposely use this version to force myself to stop hoarding tabs, at least on mobile devices. It sounds as though the main version of mobile Firefox has tabs.
shrew··on Firefox 85
Do you consider the developer edition an extension, or is your point about extensions relating to GP's reference of Owl?

Firefox Developer Edition is a first party version of the software from Mozilla. It runs slightly ahead of the standard Firefox version I think.

FWIW, Waterfox also uses dark browser chrome by default, although if you're worried about security risks in installing extensions, a third-party fork of Firefox may not sit well with you either.

Regardless, I've used both pieces of software and had very positive experiences.

shrew··on How to leave Google and why
Not sure if Fastmail's filtering is as extensive as ProtonMail, but it seems there are several common headers that do a fairly good job of sorting emails into types. ProtonMail suggests filtering based on these headers[0].

For updates, I've got a filter based on substrings in the subject like "receipt", "invoice", "latest bill" which does fairly well at catching that transactional type of email.

It definitely takes more time than Google's implementation, but in curating the filters myself I've found I've been left with a cleaner, more organised inbox.

[0] https://protonmail.com/support/knowledge-base/sieve-advanced...

shrew··on Show HN: A TO-DO app that fits inside a single tweet
And this is why code golf is fun regardless of language!

The first two are new to me, so thank you, I'll read up. The third succinctly explains a quirk I've never bothered to check the legitimacy of, so thank you again.

With your changes, that brings us way below the character limit, sitting at 208 characters with the <body> and <script> tags the challenge dictates.

I had to rejig things to use parent.append(child) as it doesn't return the element, but using the child.remove() method directly means there's no parameter and therefore one less character there, so it all balances out. I also had to rename the event variable as it caused a scoping conflict for the variable `a`.

With all that space left over you could certainly add in the clear all and strike-through behaviour properly. Maybe even some real state!

Updated fiddle: https://jsfiddle.net/2z0bus8d/1/

shrew··on Show HN: A TO-DO app that fits inside a single tweet
I don't mean to make this into a code golf thread, but saying it "can't" be done in plain JS was too enticing not to try it. Does this meet the requirements?

<body><script>let win=window;document.body.innerHTML=`<input id="a"/><b id="b"></b><ul id="c"></ul>`,win.b.onclick=a=>{let b=win.c.appendChild(document.createElement("p"));b.innerText=win.a.value,win.a.value="",b.onclick=()=>win.c.removeChild(b)};</script>

JS Fiddle: https://jsfiddle.net/2z0bus8d/

While I think there's always the standard caveat around code golf in JS (you're building on a vast set of APIs and an often resource hungry platform), reaching for a framework really doesn't feel in the spirit of this kind of puzzle.

shrew··on Electron 11.0 released with support for Apple Silicon
Out of interest, what language are your projects written in? I've had to work on C# .NET codebases of that size and have had the same issues as the previous response.

VSCode itself doesn't fall over, but code completion and error highlighting are painfully slow to catch up and several of the extensions that provide that functionality regularly crash out.

shrew··on JavaScript: Search and Don’t Replace (2008)
It does, but it still creates an intermediate array which is what the parent comment was suggesting the use of `replace` worked around.

With that said, there could easily be an array being iterated under the hood with the `replace` method anyway.

shrew··on All DuckDuckGo bang operators on one page
I've always been frustrated that the !mdn bang didn't have this behaviour by default. Looks like I can achieve the same result as you suggest with "! mdn justify-content" which should ease the change in muscle memory. Thank you!
shrew··on Vue 3: mid 2020 status update
Yes, Evan You has previously mentioned that Vetur (Vue tooling for VS Code) will have type checking in templates for Vue 3, helped in part by the Composition API making it easier to follow the typings available to the template.

Vue 3 seems to have taken a lot of cues from React during its rewrite, give it a second look if you weren't keen on 2.

shrew··on Web Dark Ages
The Web 2.0 section with the ultra shiny, shadowy buttons and stickers was particularly amusing to see again.

I'm certainly glad a standardised way of handling custom fonts emerged though, I remember SIFR being particularly painful.

That said, this site could almost do with a "Best viewed in Chrome" sticker, as the removal of -webkit-font-smoothing does some weird things to text in desktop Safari for me.

shrew··on Web Dark Ages
A little OT, but have you tried https://www.photopea.com for a "Photoshop in the browser" type experience? It's by no means a total replacement, but I've been impressed without how much is possible!
shrew··on The fall of Quibi: how did a starry $1.75B Netflix rival crash so fast?
UK too. The BBC News site ran an article[0] back in April about this and that's how I picked up on it. Other US creators have mentioned in passing, but normally not very positively.

This article actually incorrectly suggests Quibi is only accessible in US and Canada...

> (Quibi is only available in the US and Canada)

...and no one I've spoken to has ever heard of it.

[0] https://www.bbc.co.uk/news/technology-52193311

shrew··on A look at modern PHP
I don't think I even disagree with you here, but to use arguments for version control as your arguments for docker images and static binaries seems odd.

All three of the issues you raise would be solved by involving a VCS somewhere in your FTP deployment.

Incidentally, claiming that either option is "no more difficult" than FTP upload or even using VCS is either disingenuous or at least a little blinkered. FTP can work as simply as copying files between "folders", I've successfully taught my non-techy parents to use FTP. Setting up docker images or static binaries requires significantly more understanding of what's going on but of course provide speed, consistency and scalability benefits.

shrew··on The 2020 iPhone SE
I didn't know this, this is excellent news. Thank you! I was worried that my work policy might block my phone without the latest firmware.
shrew··on The 2020 iPhone SE
I could see why this might've entered into part of the discussion in a review for the original iPhone SE in 2016, but for a second iteration of this model it seems like trodden ground to point out that many average consumers don't like or need change, nor the price tag that comes with that change.

On the other hand, the 10s saw a dramatic increase in model variation in Apple's product line. It's been said before but I now have a fair amount of trouble knowing whether an iPhone model is current gen or not, I see people talking about iPhone 8, iPhone X, iPhone 11, iPhone XR, iPhone 11 Pro and now the iPhone SE has had a refresh again. A far cry from the canonical product line where Apple insisted one device was perfect for all... Whether that's a positive or a negative is up for debate. Samsung were doing fairly well until the S10 line where there were three versions of the Note and non-Note models. Google's Pixel line appears to be the last to keep with roughly one phone a generation (though the 3a slightly disrupts that rule).

shrew··on The 2020 iPhone SE
I'm with you here, I went through a period of moving to feature phones and ditching the smart watch to reduce the phone back to utility rather than a distraction. But feature phones, even those running kaiOS, just don't have the support for communication tools and things like 2fa authenticator apps.

I eventually went for an iPhone SE (2016) in the last year, after it was discontinued and managed to get a boxed, new unit for less than even the low-end android market phones go for. Thus far it's the most enjoyable phone to use having moved from an S8 which was certainly "better" on paper.

The size is incredibly portable and easy to handle, the battery, despite only being 1500mAh, does a very good job lasting me the day (though I certainly expect it won't continue to do so) and the screen is acceptable but annoying enough that I don't want to be using it for long stretches. It's got the lastest iOS and I fully expect the lack of iOS 14 support will be the reason I have to swap it for a new model once software support falls away.

It seems like this new SE model is still the smallest phone you can get despite the increase in dimensions and weight that you mention. It's nice to see a comment that shares my view and I hope a market for the smaller phone will come back around similar to that odd stage in the early 00s where handsets suddenly became impossibly small.

shrew··on Zoom has a signed binary that runs any unsigned script
Since all the lockdowns and social distancing rules have come into play for COVID-19, Zoom has seen a huge increase in consumer usage. That in turn has lead to increased scrutiny as more people use it.

Besides that, this certainly isn't the first time Zoom's shady practices have been exposed, where many other conferencing products haven't had such a track record.

shrew··on Show HN: Visual SQL
I think it's because your looped demos are autoplaying videos. Modern browsers can control media playback, and presumably these autoplaying videos are hijacking the currently played media for some people?

As an aside, I was actually looking for a comment about the opposite issue: I have a browser which blocks autoplaying videos, it took me a while to realise that what I thought were static images, were in fact videos without playback controls (and a little bit longer to work out how to re-enable playback controls!).

Either way, once I got them playing, it looked like a slick experience, congrats on the launch!

shrew··on Progressive Web Apps Will Replace Native Apps?
"Native apps don't usually remain authenticated"

Thanks for the correction, I admit I have limited knowledge of production ready native app development! As with the UI issue, a PWA developer could still use the JS crypto APIs to roll their own secure store for credentials, or store something similar to an API key issued on successful authentication? Handling this kind of data correctly has a lot of pitfalls, which is likely why most PWAs still use standard authentication processes.

There are APIs and specs [0] [1] [2] that have been floating about for at least the last couple of years which aim to solve credential and authentication management in a more formal way in the browser, but as with many of these features, they're slower moving than the native SDKs. I still don't believe that makes it impossible to achieve a similar flow in a PWA but I certainly concede it's much harder to get right (secure and convenient).

"Can you tell me how?"

As a disclaimer, I jumped ship to 1Password before I jumped ship to iOS, so I've never actually done this with LastPass. But this article[3] appears to offer a similar experience to what I have with 1Password:

- I go to an app or website

- A prompt above the keyboard offers to autofill with credentials

- I tap it and authenticate with 1Password (it normally pre-filters the list by app or website I'm using)

- When I make a selection it autofills everything it can

In 1Password, there is also the option to keep your OTP seed stored too, in which case it will copy the OTP to your clipboard for a short time (and slightly invalidate the purpose of 2FA...).

[0] https://news.ycombinator.com/item?id=16801858

[1] https://github.com/WebKit/explainers/tree/master/IsLoggedIn

[2] https://w3c.github.io/webappsec-credential-management/

[3] https://blog.lastpass.com/2018/09/get-in-app-autofill-with-l...

shrew··on Progressive Web Apps Will Replace Native Apps?
I'm not wild for PWAs but your suggested web app flow sounds like failings in the authentication setup of the PWA and of LastPass rather than the failings of PWAs in general.

If a native app can remain authenticated with whatever service it communicates with a PWA should be able to as well, that's an implementation issue rather than a PWA issue, no? Similarly if LastPass doesn't integrate correctly to the point where you're having to manually look up details rather than having details auto-filled across websites and apps (iOS and Android both support this), that sounds like an issue with LastPass.

With all that said, it's hard to deny that it's easier to keep a mobile app performant and flexible than it is a PWA. I'd also add to your list that native apps have familiar UIs by default, which is tricky to replicate in a PWA.

shrew··on Occam programming language
Our course was still using the occam-π revision, listed in the article, to teach concurrent programming ~10 years ago.

In a world of docs on tap and Q&A forums aplenty, learning an esoteric branch of a small, ageing language provided a crash course in concurrent programming and a DIY mentality to problem solving that our Java assignments maybe didn't insist on.

It doesn't look like much has changed but it was nice to re-read all the same!

shrew··on Fast – One-click sign up, login and checkout
Just tried the same and then entered my email again from another browser shortly after, as you suggested. The first sign in link expired but if your email client displays threaded messages you could very easily click the second and think nothing of it.

That would allow the attacker in straight away, while also allowing your original browser in with a bit of faff. There's an active session list, but presumably most users wouldn't be looking at that.

Certainly made me more sceptical as I was otherwise quite interested!

← PreviousPage 2 of 2