Recent submissions

Comment · 8 years ago
> you dont figure it out for days or weeks?

If it was important and estimates on how long it will take are overrun, then don't wait to follow up on it and find out how it's going.

Unless the problem is more nuanced like a small component of a larger body of work? Like knowingly leaving flaws in an implementation, or something.

Comment · 8 years ago
Shortly after your post, they did revoke all access tokens:

https://status.npmjs.org/incidents/dn7c1fgrr7ng

> To protect potentially compromised accounts, npm is invalidating all npm login tokens created between 2018-07-11 00:00 UTC and 2018-07-12 12:30 UTC (about 2 hours ago). If you believe your account specifically was compromised we still recommend visiting https://www.npmjs.com/settings/~/tokens to revoke all your tokens.

> Posted about 20 hours ago. Jul 12, 2018 - 16:42 UTC

Then later:

> We have now invalidated all npm tokens issued before 2018-07-12 12:30 UTC, eliminating the possibility of stolen tokens being used maliciously. This is the final immediate operational action we expect to take today.

> We will be conducting a forensic analysis of this incident to fully establish how many packages and users were affected, but our current belief is that it was a very small number. We will be conducting a deep audit of all the packages in the Registry to confirm this.

>Posted about 18 hours ago. Jul 12, 2018 - 18:52 UTC

Comment · 8 years ago
> 30) Existential angst is part of life.

Definitely a 20-30 thing, never even crossed my mind before I was 25.

Comment · 8 years ago
Ah yes, makes total sense if you're setting up not just a Python environment, but an entire stack. Very cool.
Comment · 8 years ago
Interesting. So by that line of thought, aging would be an evolved trait giving certain species an evolutionary advantage over others without aging.
Comment · 8 years ago
I think I'm in the group that doesn't immediately see the obvious gain of teaching in a Docker container vs. teaching how to install pyenv/virtualenv.

Is it mainly cutting out troubleshooting differences between host OS's while also getting isolated python environments?

Maybe I do see the win there, after all?

Comment · 8 years ago
Comment · 8 years ago
Marathon swimmers swim 20+ hours depending on the swim.
Comment · 9 years ago
Consumer perception, mainly. It depends on the target audience of the page. Modern consumers have come to correlate certain appearances with quality. It's not an awesome cultural development, but you're not likely to gain much traction by fighting against that momentum unless you already have an oversized influence on that readership's expectations.
Comment · 9 years ago
I often hear people point to security as a reason to avoid shipping sourcemaps in Production, but it seems like such a non-issue given that anyone can unminify the code shipped out to their browsers. What kinds of secrets are able to be hidden via obfuscation? The answer traditionally is "none" so I'm pretty consistently baffled. We do strip comments explicitly so that devs don't need to be as concerned with exposing anything that way, but aside from that I don't really understand this angle.
Comment · 9 years ago
The winter can be a bit much if you're not used to it for sure, but the upside is that tourists leave and restaurants no longer need reservations :)

Plus, not far from some excellent (downhill and cross-country) skiing, snowshoeing, ice fishing.

Comment · 9 years ago
2 quick points:

- The paradigm shift in writing interactive web pages in the React "write your app like a game that re-renders every frame"-style is extremely compelling. You are correct that there are plenty of largely static sites that do not need JS-based rendering, but for people wanting to develop single-page web apps or other interactive content, that mindset is a godsend.

- We recently re-wrote an ecommerce site with React and it is WCAG 2.0 AA compliant. To our knowledge, and to the independent firms that have audited our application, screenreaders have no problem with it. You still have to go through the diligence of all of the standard a11y-friendly techniques like semantic markup and thoughtful keyboard navigation, but React at least does not get in the way.

Comment · 9 years ago
One funny (ab)use case that may not be immediately obvious: any public API that accepts payment for goods via credit card will sooner or later attempt to be used by carders to test purchased/stolen card lists for validity.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton