styfle

Do you have a link to this feature/mode?

How does Glitch compare to Heroku or ZEIT Now?

As a developer, I find containers much easier to update, especially in scenarios where you need to update to a new patch with a fix for OpenSSL.

The solution, is to bump the version in the dockerfile, rebuild, and deploy.

This is especially useful when you want to test the latest version before deployment or when you need to deploy to many machines.

Conversely, using a VM and trying to patch it means the updates are not part of the normal development process so you would need to spin up a new VM to test before patching production VMs.

Now sysadmins and developers think differently so this is purely subjective (note I’m a dev), so surely there are merits to the other approach, but I prefer the container approach.

Snyke posted “The State of Open Source Security” not long ago

https://news.ycombinator.com/item?id=15729811

There was a fund raising website written 15 years ago that a team I was on was responsible for (I never actually worked on it).

There were fraudulent credit card donations for $1 which became really obvious when the zip code was garbage.

The “solution” was to disabled the credit card page until the month of the fund raising event when it was enabled again in hopes of the scammers would not try during that month.

I think you just gave me an idea for a weekend project :)

What about Amazon Prime Video? That still isn't on the Apple TV but is available on every other device.

Where can I find the formatting syntax for Hacker News? Clearly it's not markdown :P

> then when React has loaded, replace it with a React component

What you described is basically `hydrate` which is how to enable React event handlers like onClick after a server-side render.

https://github.com/styfle/react-server-example-tsx/blob/4586...

I believe you can stream the <head> while still waiting for any react components to render like so:

https://github.com/styfle/react-server-example-tsx/blob/4586...

Could the performance be improved if you call React.createFactory() and then stream the factory call like this[0] code?

[0]: https://github.com/styfle/react-server-example-tsx/blob/4586...

I use a combination of both template string literals and React SSR streaming.

https://github.com/styfle/react-server-example-tsx/blob/4586...

I've used a CSA before and it was nice to get random assortments of fruits/vegetables that I otherwise wouldn't buy. But the convenience of just shopping online for what you want is lost.

That's why my friend started Market Wagon[0] which acts as a middle-man between farmers who have crops and people who want to buy the food. The experience is like shopping on Amazon but you're buying local.

[0]: https://marketwagon.com

Also TypeScript and Turbo Pascal and Delphi.

> He currently works for Microsoft as the lead architect of C# and core developer on TypeScript.

https://en.wikipedia.org/wiki/Anders_Hejlsberg

I have one project[1] with 0% CTR.

I have another project[2] with 3% CTR.

[1]: https://github.com/styfle/copee

[2]: https://github.com/styfle/magnemite

Both have less than 200 impressions total.

I've been using Code Sponsor for a month or two now.

The best way to describe it is something between a generic Google Ads network and a invite-only Carbon Ads network. And it's really meant to go in your README.md file.

So this results in a few things:

1. Broker. Sponsors can select which repos/languages/tech/etc they want to advertise to and developers can select which sponsors are relevant to them.

2. Transparent. Developers can see which ads a sponsor will display and how much they pay per click (usually $0.40). The ads are usually just text with a couple emoji that fit well into the README.md design and are loaded as an svg.

3. Limited. Sponsors pay a fixed amount so if a repo is really popular and displaying ads, it may stop displaying after the money is paid out to the developers. This means you may just get a generic ad that recommends using Code Sponsor near the end of the month, like this repo: https://github.com/styfle/geoslack

Caveats: it seems the Code Sponsor is not open source :(

Google has produced APIs that only shipped in Chrome...SPDY, NaCl, WebSQL, chrome extension APIs.

I think the difference is Google wants other browsers to implement those APIs by providing a path to standardization.

SPDY was replaced with HTTP2.

NaCl was replaced with Web Assembly.

WebSQL was replaced with IndexedDB.

Chrome extensions kind of became Web Extensions.

> you look back at the code and wonder "what in the hell was the author thinking?" (and then you git blame and it’s you… because it’s always you)

I love this quote. I think I've heard it said a little differently but it is most definitely true if you work anywhere more than a year.

A couple questions with regards to the SQL -> ES:

1. Does it sync deltas or do you have to import the whole table each time?

2. Does it listen for changes to a table or does it require a manual invocation?

3. Can you explain more about the algorithm/implementation?

It was super interesting to hear how React was moving from team to team internally before it was finally open sourced.

My first thought is any SSMS specific plugins such as RedGate SQL Search and version control.

Are there historical records for number of "critical" vulnerabilities found in browsers? It would be interesting to compare the number for different browsers.

Update Maybe this:

http://www.cvedetails.com/product/15031/Google-Chrome.html?v...

http://www.cvedetails.com/product/9900/Microsoft-Internet-Ex...

> The same people might be scourging for hours on ubuntuforums because Ubuntu filled up their /boot partition with obsolete kernels and won't boot anymore. But its still perceived as "stable".

This is totally unacceptable. I started using ubuntu in production thinking it was "stable". After 6 months, the server wouldn't boot because of this reason. I don't think I ever manually installed updates. It just updated itself and broke itself.

I have similar experience but I'm not so quick to say I'm back to PHP. "Use the best tool for the job" is the way I think about it.

PHP is great for marketing websites that don't need a lot of javascript.

But Node.js still wins for javascript heavy web apps. This is because you can write a js validator that will run on the client-side and server-side. Sometimes this is called Isomorphic JS (or Universal JS).

For example, this app[0] shows how to render React on the server and the client with shared props.

That being said, my personal website[1] still runs PHP and I'm glad I haven't taken on all the build dependencies of a modern web app just to host a simple blog.

[0]: https://github.com/styfle/react-server-example-tsx

[1]: https://www.ceriously.com/blog/

What was your experience upgrading a dotnet-core app?

We had a couple experiments at my company but going from 1.0 to 1.1 had breaking changes so we couldn’t upgrade easily.

The problem is the implementation, not the feature.

The postMessage API provides a safer way for Windows/Tabs to communicate.

https://developer.mozilla.org/en-US/docs/Web/API/Window/post...

Agreed. This is one of the things people hate about type systems is fighting with them saying "I know better".

This example is quite interesting because javascript itself does not provide a way to check the type of an array, unlike a primitive. This is likely due to the fact that an empty array doesn't really have a type for it's items yet.

Here is an example where typescript can infer the type using the `typeof` runtime check but provide compile time checking.

https://www.typescriptlang.org/play/index.html#src=function%...

This would be great!

I’m actually dealing with this right now with a project[0] that was forked from an unmaintained repo that wouldn’t accept any pull requests.

[0]: https://github.com/styfle/geoslack

> Drag/drop list reordering, pan/zoom image cropper

I'm curious, were these implemented using a 3rd party library or developed in-house?

Did anyone's website or web app break because of this change in Chrome 56?

I ask because the article lists a couple things that could break such as drag 'n drop but I have not noticed anything breaking in my experience.