HN user

leddt

398 karma

[ my public key: https://keybase.io/leddt; my proof: https://keybase.io/leddt/sigs/uuda0dSu9WbM_9e5JFqtcq_ZBtxP-oLJwAFp2xuerbo ]

Posts7
Comments112
View on HN
RegEx Crossword 9 months ago

That was pretty hard! It took me a bit over 2 hours. It took me a long time to get started, it felt impossible. But I found a lot of satisfying "ah ah!" moments that kept me going.

Really well done, but now I don't ever want to do one of these again.

More likely millions per hour. But even then it's not like all those sales will be lost. Most people will probably just come back later to make their purchase.

Factorio 1.0 6 years ago

Having played both, my opinion is that they are very different games. Satisfactory is much simpler in its mechanics.

Factorio is built on a custom engine and heavily optimized. I doubt you can build a factorio-style mega base in satisfactory and keep things performant.

Factorio has procedural map generation, enemies that build bases and attack you, blueprints, construction and logistics robots, logic circuits, incredible mod support, and you can play with dozens of people in multiplayer and things stay performant and enjoyable.

In the the two games chose a very different development cycle. Factorio released early and often and listened to their community by adding and changing what players were asking for. Satisfactory first released a game that was pretty close to finished, and released, so far, very few updates.

I will say that I enjoy both games, but for different reasons.

Bootstrap 5 alpha 6 years ago

That's one definition. Another valid definition of a framework would be something that is a fundamental part of your project, or something you build upon, whereas a library would be something that you use to enhance a particular part of a project. Bootstrap would seem to fit that definition in most cases.

The difference with PCs is that since the hardware is standard, developers can now create gameplay that depends on those capabilities.

Until all (or most) PCs are equiped with high performance NVMe SSDs, those kind of features won't be possible other than on consoles.

Also, the PS5's architecture is optimized end-to-end for faster loading times, it's more than just faster storage.

I have had a similar experience when first using a 144hz display. I was amazed how responsive the mouse was. How "in control" I felt.

Then, going back to a 60hz display, I couldn't NOT see the gaps left by the cursor's movement. I had never before seen this as a problem, but seeing something better ruined 60hz for me.

Since the refresh-token is single-use, the user will be logged out when trying to refresh their own token, and will presumably then login again, which should invalidate the attacker's refresh token.

But I agree it's not a perfect system. This is meant to specifically address the problems of long-lived tokens, since JWTs are hard to revoke without checking a blacklist on the server-side.

The main problem is that localStorage is more vulnerable to some classes of attacks than secure, http-only cookies.

In our app the JWTs have a 5m lifetime. When a JWT is generated we also generate a single-use refresh token.

When a client tries to use an expired JWT the request fails, and the client will then exchange the refresh token for a new JWT/refresh token pair, and finally retry the request with the new token.

The refresh operation can reject the request if the user has been deactivated (it's basically a new login request, using the expired JWT as the username and the single-use token as the password).

A passphrase can easily exceed 20 characters and be memorable. They are usually considered a good security practice for people not familiar with (or not willing to use) password managers.

Aren't many consoles sold at or near (or even below) cost, on the assumption that software sales will make up for it? Also, how would a console sold by Sony or Microsoft subsidize in any way a game sold by a third party publisher?

I don't see the scam here. If you have to go through password reset to get into the account and update the CC number, then the would be scammer does not have access to that account anymore (assuming Netflix logs you out of other devices when you change your password).

Sure, you end up paying for an account you don't use, but nobody gains from that (other than netflix). It certainly is an issue that can easily be fixed by netflix validating email addresses, but I don't see any incentive for scammers abusing it.