|
Snyk Learn just released a free learning path for the OWASP Top 10, a widely-recognized list of the most critical security risks facing web applications.
|
|
Surveillance Camera Extermination Thread Hello, Lain! Upon scanning the catalog I noticed that, while there is a little bit of discussion of lockpicking and physical security bypasses, there is not much talk in securing your identity as you traverse mea
-
lainchan.org
-
3 years ago
-
eng
Surveillance Camera Extermination Thread Hello, Lain! Upon scanning the catalog I noticed that, while there is a little bit of discussion of lockpicking and physical security bypasses, there is not much talk in securing your identity as you traverse meatspace, so I have brought to you a slew of questions and propositions relating to exactly that. The main goals of this thread are: - Especially, to determine the most cost-effective, s....
|
|
This post proposes combining three complementary thresholds — shift, ratio, and effect size — for more reliable tests of practical significance. In Pragmastat, these correspond to Shift , Ratio , and Disparity — the recommended robust two-sample estimators. pragmastat.dev github.com/AndreyAkinshin/pragmastat When we design a test for practical significance, which compares two samples, we should somehow express the threshold.....
|
|
This post proposes combining three complementary thresholds — shift, ratio, and effect size — for more reliable tests of practical significance. In Pragmastat, these correspond to Shift , Ratio , and Disparity — the recommended robust two-sample estimators. pragmastat.dev github.com/AndreyAkinshin/pragmastat When we design a test for practical significance, which compares two samples, we should somehow express the threshold.....
|
|
Introduction In episode 15, Bill architected a solution to ensure all the users on his blockchain were given a unique identifier. His approach consisted of essentially leveraging the randomness of a user’s private key to ensure each identifier is unique. A disadvantage Bill pointed out with this is that a user may forget their private key and ultimately lose access to their account. To circumvent this issue, Bill proposed the usage of a mn..
|
|
Introduction When an API requires implementation details from the user, many developers use an interface for help. However, another way to allow developers to provide implementation details for an API is to accept a function instead. Go supports declaring function types which can be used to define a contract similar to how interfaces define a contract. A good example of an API that uses functions over an interface is the HTTP package. The ..
|
|
Introducing Baxter: deep-dive event analytics on your data warehouse
-
vikramoberoi.com
-
3 years ago
-
eng
I wrote this while investigating a product opportunity in the product analytics space. We started and stopped this work in the first half of 2023, but I’m leaving this here for posterity. Related posts: Baxter’s free funnel analysis SQL generation tool is out! Funnel analysis in SQL using window functions, range frames, and regular expressions All these posts were on our product blog. I recently wrote about how I don’t like any of the funne..
|
|
This is the third post in my series about writing an Emacs core in Rust. The first post laid out my initial observations and ideas about the language runtime. The second post focused on building a safe garbage collector in Rust using the type system. I initially stated that I wanted to reach the point where I could bootstrap bytecomp.el (the elisp byte compiler). That goal is reached1, so I am providing an update on my latest learnings.
|
|
Yep, you read that right! Thanks to all of you, the MiscDotGeek YouTube channel hit 1000 subscribers this month. This might be small beans for YouTube, but to me it’s a huge deal and a big milestone! To mark the occasion, MiscDotGeek will be doing its first ever Live Stream… okay well Second, if you … Continue reading The post 1000 Subscriber Live Stream 1/18/23 @ 5PM PST appeared first on MiscDotGeek .
|
AWS will now encrypt all new data in its Amazon S3 storage service by default. Huge announcement, secure default for the win, sure, but it *may* give a false sense of security. Here’s how.
|
|
Yesterday, it seemed no app on our phone (a Pixel 6 running GrapheneOS, for that matter) was able to connect to the internet, despite having clearly been granted the network permission. After repeatedly trying to fix it through a reboot, we looked into our adblocker, Blokada 5, which was, after all, controlling all of our network traffic. It turned out that in fact it was erroring, stating an issue with connecting to some sort of API. So, w....
|
|
Making “Widgets for Google Reviews of Trustindex” a bit more GDPR compliant
-
jaimemartinez.nl
-
3 years ago
-
eng
So I found this topic on why Trustindex’s plugin Widgets for Google Reviews uses an external 3rd party CDN to load their images. I solved it by overwriting the HTML of the plugin’s shortcode HTML: And overwrite the CSS of the plugin so that the plugin’s CSS rule won’t be loaded. You need to save […] The post Making “Widgets for Google Reviews of Trustindex” a bit more GDPR compliant appeared first on Jaime Martinez .
|
|
Admittedly, I’m often too positive on assumptions and not sceptical enough. This is a good article to help fix that or change the approach.
|
|
I spent an unfortunate amount of time writing and re-writing my recent blog post about Jupyter notebooks, mostly double checking that I liked the overall style and tone. After I put it up on the shiny new website, I hesitated and finally submitted it to Hacker News, the message board most likely to care. I put my computer away and focused on brunch with my friends, and a few hours later logged on to see what had happened: nothing at all..
|
It is with no small thanks to MDN, StackOverflow, Firefox's support for countless open tabs, JavaScript's support for first-class functions, and first-class supportive colleagues, I learned it is possible for a web front end novice to program "text art animations". Whatever that is even. Because I thoroughly enjoyed doing just that for Hanukkah of Data 2022. Here's how it went down.
|
|
Getting Started With Java Development in 2023 — An Opinionated Guide
-
www.morling.dev
-
3 years ago
-
eng
Table of Contents 📦 Distribution 📆 Version 🔧 Installation 💡 Your First Java Program 📚 Learning the Language 👷♀️ Build Tool 📝 Editor 🧱 Libraries 🐢 Application Framework 🐳 Container Base Image 🔭 Next Steps 27 years of age, and alive and kicking — The Java platform regularly comes out amongst the top contenders in rankings like the TIOBE index . In my opinion, rightly so. The language is very actively maintained....
|
|
Getting Started With Java Development in 2023 — An Opinionated Guide
-
www.morling.dev
-
3 years ago
-
eng
Table of Contents 📦 Distribution 📆 Version 🔧 Installation 💡 Your First Java Program 📚 Learning the Language 👷♀️ Build Tool 📝 Editor 🧱 Libraries 🐢 Application Framework 🐳 Container Base Image 🔭 Next Steps 27 years of age, and alive and kicking — The Java platform regularly comes out amongst the top contenders in rankings like the TIOBE index . In my opinion, rightly so. The language is very actively maintained....
|
|
I grew up with BASIC and Turbo Pascal. My first programs were very simple graphical games. I still miss the era of BGI and BASIC’s painting commands. Those graphics were neither beautiful nor fast, but they were simple. Simple enough for a kid with only elemental geometry knowledge to build something exciting. Even today, whenever I want to prototype or visualise something, to experiment with generative art or to write a toy graphical app –..
|
|
I grew up with BASIC and Turbo Pascal. My first programs were very simple graphical games. I still miss the era of BGI and BASIC’s painting commands. Those graphics were neither beautiful nor fast, but they were simple. Simple enough for a kid with only elemental geometry knowledge to build something exciting. Even today, whenever I want to prototype or visualise something, to experiment with generative art or to write a toy graphical app –..
|
|
There are tons of Grafana and Helm tutorials out there, but I could not find any that did not use the default option of a Kubernetes persistent volume to store Grafana's data. It wasn't difficult, but wanted to document it here for the next person.
|
Starting a new project can be quite repetitive task. Fortunately, automating repetitive task is what programming is good at, right? So you’d expect to find plenty of options spitting boilerplate code around, removing the tedious setup, giving us more time for the fun stuff. Funny enough they are not that many options around (I mean there is some choice but if you want to know how many is too many option, try to count how many implementation..
|
|
Starting a new project can be quite repetitive task. Fortunately, automating repetitive task is what programming is good at, right? So you’d expect to find plenty of options spitting boilerplate code around, removing the tedious setup, giving us more time for the fun stuff. Funny enough they are not that many options around (I mean there is some choice but if you want to know how many is too many option, try to count how many implementation..
|
|
The waterfall that flows beneath the Humpback Creek bridge (~0.3 miles from trailhead). Arrived at 2:30pm for a quick snowshoe excursion up to the iron horse trail and back before sunset. Quite a short one, just over 2 miles round trip, almost 500ft elevation gain. We took our time going up, and got to the iron horse trail in ~55 minutes, and then got back down much faster in just ~30 minutes.
|
|
The waterfall that flows beneath the Humpback Creek bridge (~0.3 miles from trailhead). Arrived at 2:30pm for a quick snowshoe excursion up to the iron horse trail and back before sunset. Quite a short one, just over 2 miles round trip, almost 500ft elevation gain. We took our time going up, and got to the iron horse trail in ~55 minutes, and then got back down much faster in just ~30 minutes.
|
|
I think this book feels like a sketchpad—a group of people who fundamentally questioned what a company owes the world. It goes…
|
|
I spend roughly half of my programming time working in Jupyter notebooks 1 . Some is exploring data and building models, and some is experimenting when writing new code. I like notebooks - they make exploration much easier. For data science work, visualization with notebooks is just easier than what came before. However, opinions of notebook-style programming vary wildly, from love to mild dislike to hate . There are many tropes a....
|
Update: - Judge Beetlestone in PA dismissed the lawsuit without pre-trial discovery, ruling that it lacked personal jurisdiction. - Because the case was dismissed without prejudice, Mr. Hadnagy can refile and attempt to litigate in another venue. Additional context: During our investigation we spoke directly with Mr. Hadnagy about claims of his violations of our Code of Conduct. He confirmed his behavior, and agreed to st....
|
Can AI generate the perfect recipe for a chocolate yule log? I tried baking an AI recipe to find out.
|
|
How can you get more performance from your existing data science infrastructure? What if a DataFrame library could take advantage of your machine's available cores and provide built-in methods for handling larger-than-RAM datasets? This week on the show, Liam Brannigan is here to discuss Polars.
|
|
This is a super quick one, I have a Ryzen server running a bunch of VMs. I noticed it’s running quite hot and pulling a fair bit of power. As none of the VMs running are particularly performance sensitive I wanted to force the CPU to use a more conservative power setting. First up, how do I see what frequencies the CPU is currently running at? For that we’ll use cpufreq-info, this will tell us what frequency each core is at:
|
|
For clarification, this is discussing no other thing called Memex than memex.marginalia.nu, the website you’re probably visiting right now. That, or you’re reading this over gemini at marginalia.nu, which is serving the same content over a different protocol. I wanted to build a cross-protocol static site generator designed in a way that is equally understandable by both humans and machines. This groundedness is an appealing property I re..
|
|
I do find their decision to drop JPEG-XL from Chromium problematic because it was clearly an example of them ignoring everyone else, showing the limits of Chromium’s collaborative decision making. However, “pushing their own formats” wasn’t one of their reasons: Google also dropped plans to make its WebP2 project a real image format at around the same time Google helped define the JPEG-XL spec Google developed the Butteraugli project, wh..
|