Viewing profile — holtalanm

then you're hitting the db on every request just to do auth. if you _had_ to do that, I would put the counter into something like redis instead.

watched the whole thing. was very informative. Actually havent used RSA in any capacity in years (AES is a lot easier to use), but always viewed RSA as a battle-tested encryption m…

> 1. Massively increases server strain and bandwidth usage A short-lived JWT that fits into an HTTP Header is not going to _massively_ increase your bandwidth usage. At most, you w…

that would be insanely illegal.

Yeah, if you need that kind of control over token access, then im not certain a jwt is the right tool for the job. For most use-cases a short-lived jwt is fine, as it expires in a …

I can see that. I suppose when people say they need 'server-side session storage' I start thinking of app state, but in reality it could be as simple as storing a jwt refresh token…

i have never seen anything anywhere advocating for moving away from RSA. i'm curious to see what their sources are for this claim.

> in reality you still need server side state for useful features like logging out im curious about this. normally 'logging out' just involves deleting the secure http-only cookie …

well, good luck getting buy-in from the cli tool devs, then? the other option requires absolutely zero buy-in from homebrew, gatsby, dotnet, or any other cli.

are there documented cases of these cli tools abusing their telemetry? are they entirely used to pinpoint performance issues and bugs within the tools that implement this telemetry…

my question here is: are we really concerned about console tools overreaching their telemetry? personally, I am not. I would love to know why others think this is some kind of huge…

I liked the Gatsby comment/suggestion a lot better: a tool for automatically setting the do-not-track env flags for all different dev tools.

you don't have to clone it. cloning the object and putting it in Vuex will still result in it being reactive. `Object.freeze` is what I used. This causes Vuex to not traverse the o…

> In my experience it has never, ever been the JS rendering layer which has caused unresponsiveness in an application. Implemented a undo/redo stack on top of Vuex once that worked…

> The site is called "JavaScript Is Weird", not "Weird Javascript" am i being punkd?

> Calling these things weird is fair enough but I can't help thinking this is code you'd never actually write outside of the context of a "Look how weird JS is!" post. That is the …

Most of the comments are completely dunking on Amazon for this, though.

best solution is to use int/long primary keys, with a uuid column that has a unique index. then the uuid can be used with public-facing apis.

Doesnt this just mean that 80% of orgs that were hit with ransomware attacks just didn't bother to fix their infosec, and got hit again because they left the same holes open to be …

almost like having competition drives innovation up and prices down. too bad most ISPs have literal monopolies over entire regions of people.

Might explain why Reason seemed to have fallen off the face of the earth for me. I wasn't really keeping heavy tabs on it, but was more waiting for its tooling to be more mature. W…

> I like where Skypack is headed and this seems like the opposite direction. I did a quick google search because I had never heard of Skypack. Skypack seems to be a far cry away fr…

I'm not sure what the complaint is here. Isn't it something like 90% of the browser market is chromium-based, now that edge is on the bandwagon? Supporting chrome/chromium doesn't …

Yeah, now that you mention it, yeah. Elm is the natural progression down the functional programming rabbit hole for the frontend. Either that, or ReasonML, which I haven't seen muc…

completely agree. every React app that I have ran across that used 'best practices' for React development has been an unmaintainable dumpster fire.