WingNews logo WingNews GitHub [2]

bnb's comments

bnb | 2 years ago | on: Node.js 20 is now available

Koa is relatively outdated at this point. Fastify is generally what I and most people I know look towards when starting something "new". Express is still in a lot of things, though.

bnb | 3 years ago | on: 1x Engineer

it’s intended now but wasn’t initially.

source: I committed it.

bnb | 8 years ago | on: XSS Attacks: The Next Wave

Who said this is a small open-source repo? Node.js has one of the most active OSS communities on the web, with many contributors and developers looking at the code, consuming and working on security and fixing bug reports daily.

Also, a single company provides limitations - you've got blinders on, and your project isn't open for those with a different perspective to come in and take a look and notice something. I honestly think that fresh, open, and global perspective is truly key the success of OSS.

bnb | 8 years ago | on: XSS Attacks: The Next Wave

IIRC the GitHub Open Source Survey noted that the people surveyed were more likely to trust OSS software in terms of security because of the transparency with vulnerabilities and the community surrounding it.

This article mentions increased use of OSS libs as a rising source of XSS. I'm really not sure what's worse - OSS that can be fixed and audited easily or proprietary software that's closed and lacking visibility.

bnb | 10 years ago | on: A strange Firefox address bar behavior

That's different... That's just the standard UX of their mobile autocomplete. It's the same on iOS (I type "f" and it autofills a URL - next letter I type is appended to the end of that URL, slash and all).

This is a problem with how it's interpretations the encoding of characters - they should be escaped by default and be able to be enabled with a flag if there's a valid use for them.

bnb | 10 years ago | on: Tinychat.com wants my tiny.chat domain for free

You'd probably have to look into whether TLDs count toward copyright, e.g. if company ABCXYZ (TM) could claim against abc.xyz.

The reallllly important thing is that you're not calling your chat app TinyChat, but Tiny. If you are calling it TinyChat and started after they opened, you'love need to reassess. If you're calling it Tiny, then you're better off.

Not a lawyer, just what I've experienced the laws around this to be.

bnb | 10 years ago | on: The ShapeShift Hack

Someone who has made a lot of money using one-off tactics to make a lot more money? Why would they do that!

bnb | 10 years ago | on: Visual Studio Code is now open source

If it were opt-in, I would absolutely opt-into it. I want the companies who make products I use/consume to succeed - that's why I never install ad-block. I watch tons of shows on YouTube and niche video sites, and I know the ads are what help these companies stay alive.

While I know installing ad-block is still opt-out (not -in), it's still a choice of a click that I'm making. I want to support you, but I don't want the choice of privacy made for me.

page 1
more