diesal11

I've dealt with backends that refresh a CSRF token on each valid request and return it in the response as a cookie. In those cases a solution like this may be needed. Not optimal but, we don't always have control over the backends we use, especially then they're provided by a third party.

Eh, the implementation is all Javascript and can be approached in any language. They're just providing function signatures with types so the candidate knows what they're working with.

Also the signatures are Typescript, which really isn't that far off in the context of an interview. Even in a pure JS codebase it's not uncommon for IDEs to pull the TS definitions of packages to provide basic type checking. But even pure JS libraries will normally provide typed signatures in their documentation.

If anything I'd say this shows that the interviewer is prepared, by ensuring the candidate has what they need to complete the question.

> They probably do make more money… actually. At least in net profit.

It's my company so I think I'd know :)

Also what exactly are your estimates here? Where are you getting that kind of capacity for $240 a month?

To be blunt that sounds like operator inexperience. Throw someone who's spent their life setting up Windows servers on a Linux box and you'd hear similar resentments.

At the end of the day you still need to configure the instances for things like auto scaling, security patches, logging and so on. IAM & VPC still come into the mix when running on EC2, so you've avoided nothing.

My company doesn't make more $$$ because i decided to spend a day setting up an EC2 over Lambda or a similar PaaS solution. If anything i've lost valuable time that could be spent elsewhere. Especially when stuff starts going wrong or i have to schedule time to manually apply OS/Runtime security updates.

> The cloud has made otherwise smart people into unthinking drones. The cloud has allowed smart people to focus their time on unsolved problems, not waste hours/days setting up linux for the upteenth time.

Out of the box lambda costs $0 when not in use, built in autoscaling, automatic runtime security updates, stdout straight into Cloudwatch, docker support...the list goes on.

I'm pretty sure they outsource/fund a fairly large amount of the work, the article mentions Igalia & from memory Codeweavers are largely responsible for Proton.

Valve itself is a pretty small shop. Although their own efforts & funding absolutely should be praised.

Function components with MobX Observers are a godsend and far better than anything Redux. MobX doesn't get enough credit imo.

Massive fan of Secretive myself. Use it for all my SSH keys.

> The platform is open source.

Android is Open Source, Google Play & Google Play Services are not. Developers are free to build Android apps that don't use anything related to Google Play.

Naming things can be hard.

How would you describe the distinction between these two command types?

There's Checkboxes for iPhone, iPad & Mac, if Mac is unselected then this error will appear.

Very much up to the developer

Initially but has been maintained by Valve for some time now.

Having said that, it's built on Valve's Source Engine, so still faced many of the same issues

> If there were alternatives you wouldn't be forecd to use them.

That's just not true. If App Developers choose to only release their app on one store then i am forced to use that store.

Say this Apple loses this battle and are forced to let companies run their own Stores on iOS. What's to stop a company like Facebook moving their suite of apps to exclusively be distributed through their own Store, which conveniently bypasses the App Review process, severely undermining user privacy. If i wanted to keep using these popular apps to communicate with my friends I'd have no choice but to use their alternative Store.

> You are putting a lot of trust in a company that may change its ways. If they change, where are you going to go?

Then I'll switch to Android

I have a 7 and cannot see this option.

"Because NVIDIA" is blatantly false.

CUDA support for docker containers is provided through the open source Nvidia-Docker project maintained by Nvidia[1]. If anything this is a great argument for NVIDIAs usage of open source.

Searching that project's issues shows that Nvidia-Docker support on MacOS is blocked by the VM used by Docker for Mac(xhyve) not supporting PCI passthrough, which is required for any containers to use host GPU resources.[2]

xhyve has an issue for PCI passthrough, updated a few months ago, which notes that the APIs provided by Apple through DriverKit are insufficient for this use case[3]

So your comment should really say "Because Apple"

[1] https://github.com/NVIDIA/nvidia-docker

[2] https://github.com/NVIDIA/nvidia-docker/issues/101#issuecomm...

[3] https://github.com/machyve/xhyve/issues/108#issuecomment-616...

What are your thoughts on newer ML based approaches like MITs "Eye Tracking for Everyone"?

https://gazecapture.csail.mit.edu/

I believe the T's & C's of the FB developer platform specifies that you can only use the Android/iOS SDKs for auth. You can probably get around it using openid, but you risk your developer keys being revoked.

The Paper includes some higher resolution examples which are quite convincing

The Switch also runs on FreeBSD, not custom.

Has been deprecated since 10.8 (2012) and was never ported to 64 Bit. It was pretty clear they weren't working on a Carbon replacement imo.

I've been using reactstrap[0], it's everything you'd expect from bootstrap react bindings and has been great while i've been leaning React this year.

No doubt there would be better solutions more tailored to react out there.

[0] http://reactstrap.github.io/

Spotify is web based but not electron

There's a VKMT. So they could double up and go DXVK -> VKMT.

It's not a dubious claim, just his personal experience. I switched to uBlock for a few years ago and had the opposite problem, it just seemed to break a few websites. I didn't really dig into it, but from memory it seemed to be blocking a lot of requests it shouldn't resulting in things like Facebook Messenger breaking. So it's interesting that you point out they both use EasyList.

Perhaps I'll give it another try, but honestly, i don't notice any adverts with ABP so i tend to forget it's even there. I definitely noticed when uBO was installed.

Advertising isn't just about clicks/conversions. It's also about brand/product exposure.

just make it search for files or variable assignments named "password" or "secret". That will catch the majority.

In comparison Gmail doesn't catch all cases either, if you say something like "here are" instead of I've attached it misses it.

My partner made their name '<script>alert("xss");</script>'

Good effort but didn't work.