Hacker Newsnew | past | comments | ask | show | jobs | submit | mabufo's commentslogin

cross domain script blocking should be enforceable in all browsers


CORS allows you to whitelist what domains you accept certain requests from. This is a good thing.

One thing I never understood really is why a webpage is able to load scripts from a different domain. That will I suppose remain a mystery to me forever. Imagine how many fewer ads and junk we might see.


this is a cool feature but the actual whitelist has to be held internally, in responding to an OPTIONS request, you can respond with * or concrete domain name. you can't return something like "www.example.com, www.foo.com" .

if you want to whitelist multiple domains you have to resolve this server side and check the requesting domain against your list of accepted domains.

this took me a little while to figure out.


Right - it is a good safety feature. Also worth noting that responding with a wildcard will not allow you to set cookies in the browser when using `withCredentials` in the client and `access-control-allow-credentials` on the server. You've got to return a specific origin (one that is a match in your whitelist)


What are you skeptical about? That this person's friend is actually injured? That it happened because of tesla? People get injured at work. Maybe not where YOU work, but it absolutely happens.

Also, the subtext of your comment - that this person OF COURSE would have contacted a news organization if their claim was legitimate is frankly very weird.


> What are you skeptical about? That this person's friend is actually injured? That it happened because of tesla?

What I (not the original poster of the comment you are questioning) is that they were injured in the workplace at Tesla as en employee and unable to get anything from Tesla to deal with that, since workers compensation is a bright-line legal requirement for all employers and covers all employees.

Now, bureaucratic difficulties dealing with Tesla’s WC insurer resulting in annoying runarounds, poor doctors in inconvenient locations, and disappointing care quality would be credible. Crickets, though, stretches belief.


[flagged]


So, let me get this straight: because you are dick and purposefully pollute another forum with lies you think that someone who relates a story about a friend is also automatically a dick and a liar.

This comment says a lot more about you than it does about the OP and from now on I will consider everything you write on HN to a lie.


Tut tut, komali2 is performing a valuable service. You're being a boor.

It's foolish to believe anything you read on the internet: it's a tissue of lies and propaganda. Something like 83.2% of everyone you talk to online is actually someone else.

Why, I myself am a marmoset, but would you ever know it if I hadn't told you?


Is this skepticism consistent? If I browse a few weeks of your comment history, will this tendency to doubt “anything posted on the internet with nothing more than an email requirement” be your norm?


I hope so, but if you were willing to take the time to help me find my biases, I would be more than grateful.


I looked, but as far as I can see you’re right, and it’s consistent. That’s really impressive, and I’m sorry for calling you out like that, I was wrong.


That is absolutely baseless.


> We wouldn't judge a carpenter on e.g. his/her ability to use a saw

What? Yes we absolutely would.


I think the point is that we don't judge on the tools, but the results. If he/she did a good job, why would you care? you wouldn't. Which is the parent's point. I think.


If you can't use the basic tools, there are not going to BE any results.

The metaphor is ridiculous.


Can anyone actually explain to me the _exact_ differences between Elixir and Erlang?

What does Elixir offer me that Erlang does not on a LANGUAGE level?


The ecosystem is miles ahead. I started with Erlang and I've never thought the syntax of Elixir was any better, but the developer experience of getting a basic web-app up and running using Phoenix compared to say cowboy or yaws is 10x better


In no particular order:

* Proper binary string.

* AST level hygienic lisp like macros.

* Doctests.

* In general easy documentation.

* Tooling in general. Erlang had no reliable package manager before piggybacking the elixir one has an example.

* Protocols for polymorphism.

* You lose nothing from erlang because you can call all of erlang and its library really easily.

* Better errors message.

The better tooling is large. Elixir ship with a great unit testing library, a build tool that works, a package manager that works really well, a way to build documentation etc etc.

The ecosystem is also easier to use imho. Ecto is miles away of most database wrappers and Plug and Phoenix are far more easier to use than erlamg equivalent imho.


It’s very easy to consolidate multiple erlang modules (files) in a single elixir file. Simple to translate erlang to elixir.

Functional programming is a big win, but don’t forget the virtues of static type systems and compile-time code verification.

https://github.com/cieplak/examples/tree/master/elixir


Macros are also another big plus for elixir IMHO (of course you have alternatives, like LFE).

Some may argue that macros should be avoided, but that's a different subject.


readability


They should be shut down permanently. Full stop.

Furthermore, the very existence of these credit agencies should be sincerely alarming to most normal people, and probably already is. These databases should not exist.


Agreed. We don’t wait for a bomb to go off before arresting a terrorist. We arrest them for having the bomb.

Equifax, TransUnion and the others are clearly bombs waiting to explode.

Arrest the bastards and shut them down before they go off!


>These databases should not exist.

Especially since consumers have no say in the matter at all.


[flagged]


Oh C'mon!!! -1?! lol

Immediate dismantlement of the credit-bureaus outside of a police-state would lead to...for example, pissed off sys-admins who want to sell the last valuable thing they have access to: MOAR consumer information that they already have about you.

Additionally, personal-lending would either cease for a period (and break the economy,) or they'd come up with a new way to judge our ability to re-pay & it would undoubtedly be bad/reactionary, & we'd have an version of 2008.

There's a natural tendency to want to "BURN IT DOWN!!!" b/c it's bad; I get that, but we haven't done the work to come up with something better & a transition plan. This is how the Arab-Spring turned into MF Admiral Sisi (or whatever) in Egypt, despite good initial intentions.

We are completely entrenched in this consumer-lending system whether you like it or not.

You need a "what comes after?" plan. I feel like this is common sense????


YOUR HATRED FEEEDS MEE


Could you please stop posting unsubstantive comments to Hacker News?

https://news.ycombinator.com/newsguidelines.html


you shouldn't have to shop around for medical care


Why not?


70% of americans live paycheck to paycheck. There is no money to put into an HSA - let alone to put into a savings account.

Medicare for all is the only sense making option, truly. Insurance doesn't make sense in the context of healthcare.

Everything else is just a half measure. Healthcare makes zero sense as a market; it is completely busted.


...to compose async code in Java?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: