|
About a week ago I was near crater lake and went hiking on a portion of the pacific crest trail (PCT). I expected that the snow will have melted by June. Instead, the forest floor was covered by nearly a meter of snow and we had to walk through snow, and follow small markers posted on the trees in order to keep on the trail. We went about four or five miles into the trail. At every step we needed to keep looking up on the trunks for the b....
|
|
This article has been translated to Japanese by Kana Takahashi on POSTD. The display property is one of the most important CSS properties we use for layout.…
|
|
The Accordion ui pattern is a vertically stacked list of items. Each item can be opened/closed to reveal more content similarly to a Tree however unlike the Tree the Accordion is designed to include containers or arbitrary components rather than model based data. This makes the Accordion more convenient as a tool for folding/collapsing UI elements known in advance whereas a Tree makes more sense as a tool to map data e.g. file..
|
|
Having read Are You in Despair? That’s Good , I was encouraged to expand my emotional vocabulary. As a zone.el fan (checkout nyan , sl , and rainbow ), I looked into writing a zone program . When zone-when-idle is set, zone acts as a screensaver of sorts. We can use this to display random emotional vocab whenever Emacs is idle for a period of time. Let's get to it… Zone keeps a list of programs to choose from when kicked off. Bel....
|
|
The ruby I'm talking about is not the Ruby programming language. As a native Mandarin speaker, this element is pretty relevant to me. If you have seen how East…
|
|
WebUI Security Vulnerability Resolved in uTorrent/BitTorrent
-
engineering.bittorrent.com
-
10 years ago
-
eng
On Feb 1, 2016 we were informed about a DLL planting[1] vulnerability in uTorrent/BitTorrent by the team behind The Zero Day Initiative[2]. All versions of uTorrent prior to 3.4.7.42330 and BitTorrent 7.9.7.42331 are affected. Older versions of uTorrent/BitTorrent would “pin” netprofm.dll at startup in an attempt to mitigate a (an old) crash due to premature […]
|
|
We often talk about the growing number of npm dependencies, and how they make us productive and fast or fragile and insecure. But what exactly is an npm dependency? This post defines the ways to look at an npm dependency.
|
|
At trivago we are building and using a Pattern Library which is based on Brad Frost's Pattern Lab adapted to our needs; our patterns are written in Twig. This Pattern Lab is based around Brad's Atomic Design, which is also something that we are embracing.
|
|
At trivago we are building and using a Pattern Library which is based on Brad Frost's Pattern Lab adapted to our needs; our patterns are written in Twig. This Pattern Lab is based around Brad's Atomic Design, which is also something that we are embracing.
|
|
This has been a tremendous week with a lot of news & next week will be even more hectic! Next week we will turn on the new iOS build servers by default which means a huge change is coming the biggest is probably http connection problems but I’m sure we’ll run into quite a few other issues… Please let us know immediately as you run into issues… Onwards to the activity on stackoverflow this week:
|
|
Released by the nice folks at Drud, EveGenie is a tool for making Eve schema generation easier. Eve’s schema definitions are full of features, but can take a good amount of time to create when dealing with lots of complex resources. From our experience, it’s often helpful to describe an endpoint in JSON before creating it as an Eve schema. This allows you to make quick decisions about the structure of your entities without spending ..
|
|
Released by the nice folks at Drud, EveGenie is a tool for making Eve schema generation easier. Eve’s schema definitions are full of features, but can take a good amount of time to create when dealing with lots of complex resources. From our experience, it’s often helpful to describe an endpoint in JSON before creating it as an Eve schema. This allows you to make quick decisions about the structure of your entities without spending ..
|
|
Released by the nice folks at Drud, EveGenie is a tool for making Eve schema generation easier. Eve’s schema definitions are full of features, but can take a good amount of time to create when dealing with lots of complex resources. From our experience, it’s often helpful to describe an endpoint in JSON before creating it as an Eve schema. This allows you to make quick decisions about the structure of your entities without spending ..
|
|
Released by the nice folks at Drud, EveGenie is a tool for making Eve schema generation easier. Eve’s schema definitions are full of features, but can take a good amount of time to create when dealing with lots of complex resources. From our experience, it’s often helpful to describe an endpoint in JSON before creating it as an Eve schema. This allows you to make quick decisions about the structure of your entities without spending ..
|
|
It’s funny. When you learn to ride a bike—you’ve got it. Hop back on a bike after a few years and you still remember.
|
|
We’ll be migrating to the new iOS build servers this Sunday & this does entail one major thing you need to be aware of. With the new version of xcode http URL’s are blocked by Apple . We blogged about this a while back but this bears repeating as it’s something a lot of you will start running into. To get an overview of the issue check out this article or the actual document from Apple . In a nutshell http URL’s are no l..
|
|
Note: I'm currently publishing pieces from my vault. This was supposed to be published on 2016 July 31 when I was on the fence about dropping out. In the end, I didn't.n. a carbohydrate-rich environment composed of "virtual reality", "startups", and a bunch of empty space in betweenn. where I currently find myself in
|
|
An iOS developer's critique of Apple's 2016 keynote — when emojis and animations overshadowed the innovations developers actually needed.
|
An iOS developer's critique of Apple's 2016 keynote — when emojis and animations overshadowed the innovations developers actually needed.
|
|
SocialBoo originated from the same app design vault set of designs that brought us the Chrome Demo. This demo uses a somewhat outdated but still reasonable gunmetal look, it also features different UI styles when running on a tablet/phone. Notice in the screenshot above that the UI for the demo differs when running in a phone/tablet and even changes when the tablet flips between portrait and landscape… This demo was originally cr..
|
|
Are you interested in selling your custom made themes, templates & libraries for Codename One? Eric Dodji Gbofu founder of Codename One Fr and author of the French language Codename One book is launching a Codename One store . This is meant as a Codename One equivalent to sites such as theme forest that provide ready made templates of various kinds for a reasonable price. It answers a very common need within the community t..
|
|
What does it mean to half-ass something? It means to do less than you’re able to do. To cut corners. To be mediocre. To sacrifice “being effective” for “being efficient”. I have a hunch that half-assing any task is not worth it. That it is better to just drop, abort and cancel tasks and obligations which we cannot do at maximum quality. Lets look at an example. A young professional usually has a demanding job and personal relationships,....
|
|
The Toolbar is a pretty flexible API for handling the title area. It allows a lot of things including search but up until now that very common use case was not a standard part of the API. It is now, we just added a new API that effectively allows you to bind search to a form and just get the text searched as part of the callback. The Toolbar handles everything else including replacing the title area and returning it back to its ..
|
|
Hello fellow readers, In this post I’ll list some of the projects and experiments I’m working on or just finished. My last projects update was in February.
|
|
Variadic templates Variadic templates are templates accepting any number of template parameters. To understand the need for variadic templates, we’ll have to look at the history. As far as my research can tell, the first C compiler to support variadic methods was the WatCom C compiler from 1990s the first to support variable number of elements. The concept of having variable number of elements, is much older. It’s a mathematical term f..
|
|
This shot took 86 attempts to get as trying to co-ordinate the penguins and the children proved… challenging.
|
|
Historical note: Codename One’s UWP target was discontinued in release 7.0.229 . This post is preserved for historical context only, and its build/setup instructions no longer apply to current Codename One projects. After many months of work and effort put in by all of us but especially by Steve Hannah and Fabrício Carvalho Cabeça we are finally live with the Windows Universal Platform (AKA UWP) native build target! As far a..
|
|
It’s been a while since my last post, and a lot has happened since then. I’ve hit my one-year truckiversary, surpassed $15,000 in monopoly money savings, and paid off the remainder of my student loans. Expect posts for these things in the coming weeks. As for my absence: I’ve been dedicating the majority of my free time to building an app for a small nonprofit to help Syrian refugees apply for scholarships. I like to think it’s a worthy eno..
|
|
It’s been a while since my last post, and a lot has happened since then. I’ve hit my one-year truckiversary, surpassed $15,000 in monopoly money savings, and paid off the remainder of my student loans. Expect posts for these things in the coming weeks. As for my absence: I’ve been dedicating the majority of my free time to building an app for a small nonprofit to help Syrian refugees apply for scholarships. I like to think it’s a worthy eno..
|
|
My current work involves many microservice (ish) node.js projects. Each has its own git repository hosted on github. My team follows a pull request workflow requiring all code to hit our main branch via pull request. We have slack chat integration so we can see when a new pull request is created, but even with that I found myself confused about whether or not there were any pending pull requests that I needed to review. Scripting to the r....
|
|
My current work involves many microservice (ish) node.js projects. Each has its own git repository hosted on github. My team follows a pull request workflow requiring all code to hit our main branch via pull request. We have slack chat integration so we can see when a new pull request is created, but even with that I found myself confused about whether or not there were any pending pull requests that I needed to review. Scripting to the r....
|
|
At PyCon 2016 it was my honor, for a third year in a row, to host a Trivia Dinner on the first evening of the conference! This year’s venue was the storied Crystal Ballroom , a music venue in Downtown Portland’s west end. To make sure that our event took full advantage of the big stage, I booked the Adventure Capitalists , who followed up the trivia dinner with a rousing set of punk startup tunes: Have a conference pass? Come by the Cr..
|
|
This week has seen a lot of announcements and looking at the submission queue for next week it looks like it will be jam packed with updates and new features. Today we have a new plugin update which is jam packed with features and changes, the biggest of which is the removal of all the skins (they are now in the More menu item). We also have a lot of great new features in this plugin including Windows UWP build preview, new settings..
|
|
Using a programmable SQL interface such as an ORM (Object Relational Mapping) is a good way to reduce risk of SQL Injection, which is a very bad vulnerability to have. However, ORM packages are not bullet proof. This post explains why you shouldn’t put all your SQL Injection protection eggs in the ORM basket, and what more can you do.
|
|
Quick note to let you all know that Eve v0.6.4 is out with a few significant updates . Thanks to James Stewart for contributing to this release. Work on v0.7, which will include MongoDB Aggregation Framework support ( docs ) and many other new features , continues steadily.
|