Disqus - Latest Comments for mrclay

Re: ECMAScript proposal: JSON modules

mrclay — Fri, 18 Jun 2021 20:06:57 -0000

Do you really want: (await importConfigData('./config-data.json')).default ?

Re: The Neo Geo Mini comes up short

mrclay — Fri, 31 Aug 2018 18:44:16 -0000

You're not suffering, it's not clear at all from this article.

Re: Episode 132: The Retronauts new year(s) special returns

mrclay — Wed, 03 Jan 2018 12:26:29 -0000

What's the music at 1:01:22?

Re: UF Journalism School Dean: ‘Our Obligation As Journalists’ To Cover Spencer

mrclay — Fri, 13 Oct 2017 21:37:00 -0000

Respectfully, this was a bad decision. The public has tons of access to his views thanks to the internet and tech companies trying to be impartial in their hosting of racism and hatred. Major universities weren't interviewing champions of racism for how many decades, but we have to start now? No, we don't.

Re: The Rise of the Violent Left

mrclay — Sat, 19 Aug 2017 09:05:30 -0000

Thank you for publishing this. The misguided young people behind these groups need to be talked off the ledge by influential liberals like Obama and Sanders. At any heated confrontation they could accidentally kill someone. But the bigger reason is that mob destruction and violence is just wrong and I want nothing to do with it.

Re: Store cache in files in PHP - Antal Áron blogja

mrclay — Tue, 23 May 2017 16:08:47 -0000

Your var_export strategy fails to consider the benefits of the opcache and actual file storage. You need to write the file to disk as a PHP script with a single `return` statement. The cache read is then a statement like `$value = require $file_path;`.

Re: 28 videogame cameos in the movies

mrclay — Sat, 20 May 2017 16:19:51 -0000

At 45:30 into The Fury (1978) a couple characters play Tennis and Torpedo Alley on the Fairchild Channel F (from 1976). Besides stuff like Pong, this is the first 2nd gen console I've seen in a movie.

Re: The case for singleton objects, façades, and helper functions

mrclay — Tue, 16 May 2017 12:04:45 -0000

I highly recommend all these videos: https://youtu.be/-FRm3VPhse... He convinced me to ditch this pattern.

Re: How the Government Ruined U.S. Healthcare — and What Can Be Done

mrclay — Thu, 23 Mar 2017 21:32:47 -0000

PCCs seem like a fine model for routine visits (as some have said, where the big costs aren't) but do we know how these would handle much higher volume of patients? I think your "unlimited time with your doctor" claims might vanish.

The benefit here seems to come not from getting rid of "government", but getting rid of insurance-related staffing and hassles... I dunno, this seems like an argument for single-payer.

Re: How the Government Ruined U.S. Healthcare — and What Can Be Done

mrclay — Thu, 23 Mar 2017 21:22:40 -0000

You say the "government increased demand" in '65. How does a government create demand that isn't there? Is it fun to go to the doctor and get procedures? The more logical perspective is that the demand already existed, but tons of elderly and poor just lacked the funds and went without visits and treatments they wanted/needed.

Re: The Glenn Show - Feb 27, 2017 - Glenn Loury & John McWhorter

mrclay — Tue, 28 Feb 2017 17:47:40 -0000

Agreed that (some) of the media and partisan pundits are too focused on dumb analysis of Trump's mannerisms, etc. But that's *not* the media as a whole, which is plenty focused on what his administration is actually doing. The media (and we) have every right to expect the POTUS to not lie to us and to give us more than rhetoric like "we will defeat ISIS." Claims that he's "done so much already" kinda ignore that any president can issue executive orders any time and the GOP recently ended 8 years of complaining about EOs.

Please devote no more episodes to topics like whether Trump is really smart or not in various dimensions. What matters: Will he enact smart laws, veto bad ones, not screw up foreign policy, and leave the Americans better off and more unified?

Re: The Enviable Life of Instamom Amber Fillerup Clark - The Atlantic

mrclay — Mon, 20 Feb 2017 11:34:52 -0000

Don't hate the mommy bloggers, change U.S. labor laws. They're responding to the deep unmet desire of many American women (and men) to have a decent income and work/life balance that allows them to travel and enjoy their children while they're young. In America this is fantasy if you're not wealthy. https://en.wikipedia.org/wi...

Despite your contempt, mommy blogging sounds like a great gig for your kids. They'll travel, spend lots of time with the parents, go to schools in expensive zip codes, leave college debtless... Most American toddlers will grow up in daycare.

Re: The Glenn Show - Oct 13, 2016 - Glenn Loury & Steven Teles

mrclay — Mon, 17 Oct 2016 08:14:15 -0000

This "thought experiment" format was a failure for me. It made for a very confusing and less productive discussion that I would've expected from these two. When Glenn posed any question, Steven pivoted to a different devil's advocacy position or a different topic altogether. I just think Glenn and Steven were working under entirely different premises the whole time. Not talking past one another, just trying to reach different and seemingly artificial goals that weren't apparent, at least to me.

Maybe this premise would better be explored via op-eds. I do think another discussion between you too could be great, but just a regular discussion as two humans please.

Re: The Glenn Show - Oct 3, 2016 - Glenn Loury & John McWhorter

mrclay — Wed, 05 Oct 2016 06:32:32 -0000

> the person gave John that look precisely because of John's views

You and John assumed that. Take this person's perspective: John sees you, does not talk to you. You later find out John talked about you unflatteringly and speculated about your thoughts *during his show*.

It's not how you win friends or get show guests is all I'm saying.

Re: The Glenn Show - Oct 3, 2016 - Glenn Loury & John McWhorter

mrclay — Tue, 04 Oct 2016 23:42:04 -0000

It doesn't matter at this point. Glenn and John have poisoned the well with TNC and maybe now Blow. Hosts that speak ill of people not present rarely get them as guests later.

John even talked about someone giving him side eye at a party. Is that really helpful for the show, guys? Everyone has personal issues with/catches bad vibes from people, hold your tongue during the show!

Re: The Glenn Show - Oct 3, 2016 - Glenn Loury & John McWhorter

mrclay — Tue, 04 Oct 2016 15:09:14 -0000

You basically argued "we're alone because everyone who disagrees with us acts in bad faith and would not engage us." Exactly the wrong attitude to have if you want to get guests.

As show hosts, it's *your* responsibility to prove to the public that guests can disagree and still be respected and *have a great time* with you. You're doing the opposite--disparaging people not present who you'd like as guests.

Re: The Glenn Show - Sep 13, 2016 - Glenn Loury & John McWhorter

mrclay — Wed, 14 Sep 2016 14:14:26 -0000

G&J get it right that race identity politics is driving a bit too much, and this is much a product of the media coverage. The media knows any African American injured by the police will attract eyeballs no matter how that came to occur.

However, G&J seem to suggest that poor African Americans are making bad choices because of 1) more lenient criminal sentencing, and 2) lefty dialogue in books, op-eds, and upscale parties. They also speak as if no lefty ever talks about personal responsibility. Baloney.

While I certainly understand it may be an annoyance to successful African Americans that the left's discourse is so focused on oppressive forces, but these forces (biases and mistreatments in hiring, policing, public school punishments, etc.) are real, measured, and affect people directly. Discourse between 3rd parties isn't all that harmful.

I think the right has plenty of solutions worth trying, but I don't have a bit problem with attacking this problem on lots of fronts.

Re: Github auth token on TravisCI — Cees-Jan Kiewiet's blog

mrclay — Tue, 24 Nov 2015 18:11:08 -0000

For an open source project this seems unsafe. An attacker could submit a PR that alters the Travis config to echo the token, and then read it from the job.

Re: Homebrew - Install NGINX and PHP-FPM on Mac OS X

mrclay — Tue, 27 Oct 2015 12:02:37 -0000

Why disable opcache when installing PHP?

Re: Token Based Authentication for Single Page Apps (SPAs)

mrclay — Fri, 25 Sep 2015 14:53:14 -0000

HTTPS. The browser indeed uses "client-specific info" in the SSL handshake.

Re: Episode 30: Trouble, Trouble, Trouble... | The Laravel Podcast

mrclay — Sun, 28 Jun 2015 14:02:09 -0000

This is the presentation that sold me on the genius of webpack https://www.youtube.com/wat...

Re: Rate-limiting web application login attempts

mrclay — Fri, 08 May 2015 10:23:37 -0000

Just to reiterate the discussion on Twitter, an assumption made here is that each attack machine can only attempt serially. It would be trivial to launch a large number of attempts via isolated clients, even on a single machine. The delays experienced by the attacker can be waited in parallel, so almost all of the brute force attempts can be scheduled and put through in little time.

If you have the user's email/SMS, it's probably best to NOT cap the delay and instead, on the Nth failure, email/SMS the user an auth token requiring no delay.

Re: Web Application Security Quiz - The Answers

mrclay — Fri, 08 May 2015 09:44:16 -0000

Show spinner, submit creds over XHR, start separate process to compute hash and return to the client a token to check that process a second or so later. Poll until the hash operation is done and the full auth scheme can continue.

Re: Web Application Security Quiz - The Answers

mrclay — Fri, 08 May 2015 09:32:24 -0000

Thinking a bit about PBKDF2 and strengthening in general, I think the key is choosing an iteration count/strength based on a trusted authority's recommendations then somehow run it asynchronously so it doesn't block the app/UX. I.e. don't make slow local performance hurt too much.

Re: Injectors: Dependency Injection with Traits

mrclay — Fri, 20 Mar 2015 15:24:52 -0000

Yeah, our service locator has all the downsides associated with the pattern. We came from almost all global functions so this is just an iteration while we slowly migrate towards DI.