Joel relayed

That said, these kinds of things are helpful for imposter syndrome things because they remind me that oh yeah, you have learned a thing or two in the last decade of building things, hurrah!

And also yes, everyone needs to learn sometime, but if you're actively recommending sanitization to someone who is asking about escaping, you are making the web a less secure place, please read up and stop doing that. It's not a failure to not know, the internet is terrible and complicated, but if you're a web person please do take the opportunity to learn and grow!

Here are a couple good posts that cover things pretty well:
benhoyt.com/writings/dont-sani
blog.presidentbeef.com/blog/20

Show thread

I am currently asking questions on Github about HTML escaping in Javascript (in the context of a specific framework), which is apparently a mistake because I've had multiple people tell me "oh just use dompurify" and NO

I specifically said escaping!! I know about sanitization, I use it when I need to, but here I do not need to render HTML at all, stop recommending an inherently less safe option to people who just want to not render any HTML! :blobfacepalm:

(I'm not particularly looking for recommendations here, `stringify-entities` and `html-escaper` both seem perfectly fine for my uses, but I guess if you have a different favorite knock yourself out)

Joel relayed
Joel relayed

This book just described octopuses as having "haphazard sex lives" and like...yeah, I feel ya buddy!

(comment on "Other Minds")

@nihilazo Ahh, what a delight! "It is objectively worse than most other options but I love it" is a category I am well familiar with 😄

Joel relayed
Joel relayed

"The chemistry of life is an aquatic chemistry. We can get by on land only by carrying a huge amount of salt water around with us."

-- "Other Minds"

I'd never thought of it this way, but it tracks! Love this observation.

@friend Thank you, this is valuable information, I stand corrected! And "ugly planet" is indeed some consolation 😄

(For those following along at home, "Wüste" actually means desert, which makes a lot more sense and is still disappointing)

Show thread

So I just randomly happened upon a picture of a German edition of , and discovered the German title is "Der Wüstenplanet", which I _know_ doesn't mean "the worst planet" but now I really really want it to.

At least I can console myself with the fact that it _is_ one letter away from "the sausage planet" which is also pretty great.

Huh, on that note I should probably update my profile picture now that my hair is literally a foot longer 😅

Show thread

@clarity I just finished ASL 1 and really enjoyed it, gonna take ASL 2 next term, all on Zoom. Both with Prof. Worthylake, I like his style - all communication is signed or written, it's pretty friendly and informal while still learning a lot, and he focuses on deaf culture and things which is great. We did through lesson 6 of LifePrint I think.

Zoom has its pros and cons, but means I don't have to transit down to wherever PCC is, which is nice!

@clarity I'm taking ASL classes through PCC right now, and LifePrint is the curriculum that my instructor uses. It seems pretty great!

Current gender: using the beveled corner of a Mini SIM to Micro SIM adapter as a cuticle pusher

You know how they have those toothbrushes for kids that play a song for two minutes? I want one of those but with a two-minute podcast instead.

It looks like the Telegraph already has a twice-daily two-minute news briefing podcast, even! It looks pretty UK-focused but I'll take what I can get.

I do have some extra ESP32-based boards laying around, but I don't need another project!

@JordiGH It looks like they were migrating away from their own colocated hardware, not AWS, so I don't think this report has anything to say about the efficiency of AWS over GCP or any other cloud provider, just cloud providers vs colocated physical hardware.

It would be nice if they had numbers for AWS, but understandable why they don't!

Yesterday was the kind of day at work where I started this morning with `man perlop` as the last command run in my terminal.

A pipeline of linter -> awk -> bash while read -> perl? Why not!

@sunfun Hey friend, I'm gonna give you the benefit of the doubt and assume you're just repeating this old chestnut without thinking about it.

But please reconsider this post. This joke turns entirely on "haha non-native speakers have funny names and talk funny" which is pretty shitty to those folks and is racist as heck, regardless of your intent, and is probably against your server TOS to boot.

We all gotta learn sometime ❤️

@benhamill Well I'll be damned, so I am, I'd never made that connection before! Thanks!

And to think I was just reading about fossil words, which is when obsolete words get preserved in expressions or compounds like this. Neato!

Show older
Cybrespace

cybrespace: the social hub of the information superhighway jack in to the mastodon fediverse today and surf the dataflow through our cybrepunk, slightly glitchy web portal support us on patreon or liberapay!