Jbuilder gives you a simple DSL for declaring JSON structures that beats manipulating giant hash structures. This is particularly helpful when the generation process is fraught with conditionals and loops.

I tried leaking session and page data and indeed it's easy. Too easy. So I definitely agree that session data should not be readable from anywhere but the request itself.

You can afford to make a proper PR to upstream.

These are sequential because build:ssr imports the public/index.html that build:dom produces.

It's super promising for web apps, just maybe not for web pages. I went from React to Svelte to Flutter for my current app project, and every step felt like a major upgrade.Flutter provides the best developer experience bar none, and I think it also has the potential to provide the best user experience. But probably only for PWAs, which users are likely to install anyway. Or other self-contained experiences, like Facebook games. It does have some Flash vibes, but is far more suitable for proper app development than Flash ever was while still feeling more like a normal website to the average user. It won't be the right choice for everything, but I believe it will be for a lot of things.

I also find that a lot of the complexity of Flutter can be avoided, and I mostly use it to define the UI as a more app-centric alternative to HTML/CSS.

Svelte by itself is great, but doing a complete PWA (with service workers, etc) that runs and scales on multiple devices with high quality app-like UI controls quickly gets complex. Flutter just provides much better tooling for that out of the box IMO. You are not molding a website into an app, you are just building an app. If I was building a relatively simple web app that is only meant to run on the web, then I might still prefer Svelte in some cases.

After i've stabilized the library i can start to discuss about adding new components and features!

Svelte makes the pit of success larger because it hides all of this from us at compile time.

At the start this is hard to get right, and bad practices will sneak into the codebase.

So handling the interop upfront will avoid users writing invalid ES6 and make sure that they write ES6 that loads CommonJS in the right way.

Some of these values are suited for development and some for production. For development you typically want fast Source Maps at the cost of bundle size, but for production you want separate Source Maps that are accurate and support minimizing.

We expect a certain pattern when validate devtool name, pay attention and dont mix up the sequence of devtool string. The pattern is: [inline-|hidden-|eval-][nosources-][cheap-[module-]]source-map.

will only apply up the chain

Or even keep as is, the simplicity of this feels right in line with svelte's simplicity :)

Obviously we shouldn't rush into anything. But changes like these are best made earlier on in a project's lifecycle, so I'm eager to hear what people think so that we can start making some progress.

The make install task installs the following files:

Retagging the HTML/CSS questions to use html-heading seems the right thing to do. For the other uses, I don't have enough grounding in the geographic area to know whether the direction and bearing are replacements for heading. But the tag information for heading should be created and should firmly point at the other tags — at least until it is expunged.

We could broadcast a warning if we find the variable to be set in the environment, but that is more likely than not to annoy people who intentionally set it.

You may want to execute validations in a given specific order (this can be tricky especially when you have got asynchronous validations).

Yeah I see what you're saying. In my case, I had a group of classes that relied on each other but they were all part of one conceptual "module" so I made a new file that imports and exposes all of them. In that new file I put the imports in the right order and made sure no code accesses the classes except through the new interface.

Doing so also means adding empty import statements to guarantee correct order of evaluation of modules (in ES modules, evaluation order is determined statically by the order of import declarations, whereas in CommonJS – and environments that simulate CommonJS by shipping a module loader, i.e. Browserify and Webpack – evaluation order is determined at runtime by the order in which require statements are encountered).

Specifically, since Root, Rule and AtRule all extend Container, it's essential that Container is evaluated (and therefore, in the context of a Rollup bundle, included) first. In order to do this, input.js (which is the 'gateway' to all the PostCSS stuff) must import root.js, root.js must import rule.js before it imports container.js, and rule.js must import at-rule.js before it imports container.js. Having those imports ensures that container.js doesn't then try to place Root, Rule or AtRule ahead of itself in the bundle.

Replaced nested `require` statements with `import` declarations for the sake of a leaner bundle. This entails adding empty imports to three files to guarantee correct ordering – see https://github.com/styled-components/styled-components/pull/100

Modules from the following layer can require anything from all the previous layers, but not vice versa.

Any software that makes HTTP requests to other sites should make it straightforward to enable the use of a cache.

Note that the <WarningEngine/> component must be at the bottom of the form to guarantee that all the fields have registered.

Furthermore, JSX encourages bad non-dry code. Having seen a lot of JSX over the past few months, its encourages copypasta coding.

Yet it can be deceivingly difficult to properly encode (user) input

Generating engine-specific code from a DSL (HTML in this case) seems like the right abstraction.

object orientation

If there was a place I thought reactivity would be weak, I embraced it and I worked on it until I was happy with the results.

but everything they were doing started to make sense

This was the piece that made all their other recent work all gel and I gazed into the sun for the beauty that was there.

I kept on wanting them to work like Fine-Grained reactivity, since it was much more intuitive.

Vue was always felt contrived for me.

I couldn't land on how I wanted to box primitives. Should I use a getter/setter, or function form like Knockout, or explicit get/set like MobX? These were all ugly.

There's one downside to Reacts reactivity model - the hooks (useState and useEffect) have to always be called in the same order and you can't put them inside an if block.

createState and createSignal are improvements over React's useState as it doesn't depend on the order of calls.

It's designed for Single Page Applications (SPA). If you need Server Side Rendering then consider using Sapper.

For an API used by many third parties with many diverse uses cases, GraphQL is the right tool.

Whilst

Ontologically

let:hovering={active}

let:active={hovering}

The feature is highly likely to be implemented, the API and implementation are the only real topics of discussion right now.

6to5 attempted to ship a quick and dirty TDZ static checking feature but had to retract it immediately afterwards due to various bugs in the algorithm.

itis necessary for the sovereign to conduct his business himself, because he will, if he is wise, pursue only the public interest, which is his own

Can't upvote this enough. It is highly irritating to see language destroyed (and we wonder why kids bastardize the language..).

Then when giving answers I'm even less certain. For example I see occasional how-to questions which (IMO) are ridiculously complex in bash, awk, sed, etc. but trivial in python, (<10 lines, no non-standard libraries). On such questions I wait and see if other answers are forthcoming. But if they get no answers, I'm not sure if I should give my 10 lines of python or not.

I went against the grain, applying other tools that people have written over the years to directly perform the job at hand which do not involve entering a program for awk or a shell to run, with answers like https://unix.stackexchange.com/a/574309/5132 and https://unix.stackexchange.com/a/578242/5132 . Others have done similar. https://unix.stackexchange.com/a/584274/5132 and https://unix.stackexchange.com/a/569600/5132 are (for examples) answers that show alternative tools to answers employing shell script and (yet again) awk programs, namely John A. Kunze's jot and rs (reshape), which have been around since 4.2BSD for goodness' sake!

There is an observable widespread tendency to give an awk answer to almost everything, but that should not be inferred as a rule to be followed, and if there's (say) a Python answer that involves less programming then surely that is quite on point as an answer for a readership of users.

Java may have been designed as a completely object oriented language, but when Java SE 8 was released in 2014, it added Lambda expressions (aka closures), which added some functional programming elements. Not every problem is best served by OOP, and by adding Lambdas, Java became more flexible. 

Ruby has some really nice libraries for working with linked data. These libraries allow you to work with the data in both a graph and resource-oriented fashion, allowing a developer to use the techniques that best suit his or her use cases and skills.

The meta charset information must also be the first child of the <head> tag. The reason this tag must be first is to avoid re-interpreting content that was added before the meta charset tag.

Under the GDPR, users have the right to object to certain processing activities in relation to their personal data carried out by the Controller. In a nutshell, the user can object to the processing of their data whenever the processing is based on the controller’s legitimate interest, or the performance of a task in the public interest/exercise of official authority, or for purposes of scientific/historical research and statistics. The user has to state a motivation for their objection, unless the processing is carried out for direct marketing purposes, in which case no motivation is needed to exercise this right.

Other examples of detriment are deception, intimidation, coercion or significant negativeconsequences if a data subject does not consent. The controller should be able to prove that the datasubject had a free or genuine choice about whether to consent and that it was possible to withdrawconsent without detriment.

Controllers have an obligation to delete data that was processed on the basis of consent once thatconsent is withdrawn,assuming that there is no other purpose justifying the continued retention.56Besides this situation, covered in Article 17 (1)(b), an individual data subject may request erasure ofother data concerning him that is processed on another lawful basis, e.g.on the basis of Article6(1)(b).57Controllers are obliged to assess whether continued processing of the data in question isappropriate, even in the absence of an erasure request by the data subject.

Also,mechanisms for data subjects to withdraw their consent easily must be available and informationabout how to withdraw consent must be provided.

If a controller receives a withdrawal request, itmust in principle delete the personal data straight away if it wishes to continue to use the data for thepurposes of the research.

There's a few other questions on StackOverflow regarding how to structure YAML files for i18n, and I don't think there is a 'right' answer to your question. If it works for you, then great! I would say that any answer you get will be completely subjective, and more about i18n and translation management rather than anything specifically to do with the Rails way.

While the modifying version will occasionally be useful, in general, we should gently push people towards using non-modifying code.

As an engineer, it’s important to explore different technologies. It’s important to identify the tools available to tackle problems. And it’s important to expand your horizons because then you can look cool on your CV.

OK, so what about regular messages? Turns out they are not encrypted after all. Where Signal implements the security and privacy protocols right from the start, Telegram separates the two and offers an additional option. The problem is that not everyone is aware of the Secret Chat option and first-time users may send sensitive information in the regular chat window unknowingly.

doing the wrong thing quickly is a good way to bankrupt us and our customers

The order is important.

there’s 3 steps to building software: Make it work Make it right Make it fast

Contact Big and successful businesses are built on a talented workforce this is not just a saying but a solid fact. Hiring an employee is one of the most important tasks for a business and it becomes even more critical when it comes to hiring the right employee.  From Mark Zuckerberg to Richard Brandson every billionaire has similar thoughts when it comes to building the team and every one of them has one thing in common, they always seek quality, punctuality, and skills in an employee. Hiring an employee could be challenging also it may seem like a play of fate and this is a very common feeling but, having a guide or tips on how to hire the right employee could help you in tons. So, here is the list of 7 best tips on hiring the right employee. Make a Plan No matter what you do, planning is the very first step when it comes to achieving a goal. A written plan which contains essential components of the hiring like job descriptions, a skill required, Pay grade, timing, etc. is needed to hire a person. The plan that you make for hiring must contain various details regarding the requirement of the job. The details that would want to add in the plan is as follows-  Title  The post or title of the job that you’re looking for should also be given clearly. Someone who’s educated enough to be a CEO wouldn’t want to be a normal worker. Hence, the specifications of the position while looking for a new candidate should be clear.  Pay Grade  For hiring the new employees, you should first and foremost be true about the pay grade. Pay grades facilitate the employment process by providing a fixed framework of salary ranges, as opposed to a free negotiation. So, you should just align with the grading system to let your company work smoothly.  Reporting Person Reporting Person means the person who prepares reports on updates, progresses, accomplishments, etc. of the employees as well as the company in total. While hiring new employees, you should first submit their resumes to this person so that he can well-prepare a report and it gets easier for you to decide.  Timings You should also clearly mention the shift timings while looking out or hiring new employees. The working hours, the holidays, the relaxations should be clearly told to them and see if they can work with it or not.  Department Name You should also clearly defined the department for which you’re trying to hire the new employees. Human resource departments are often organized along with functions and may be hierarchical in nature. Common units in human resource departments include recruiting, training and development, compensation and benefits administration, health and safety, and employee and labor relations.  Job Summary, Purpose/Value A job summary is a brief, general statement regarding the important functions and responsibilities that comes with a job. Job summaries hold a huge role in enticing a qualified candidate to apply for the position and an employee’s performance of his or her responsibilities.  Challenges With a job, comes its challenges. So you should explain the kind of challenges that your newly appointed employee is going to face and mentally prepare. If your plan contains details like these then it becomes easy for you to post job requirements on job portals as well so, having a written plan on the hiring process is very important. Internal Job Rotation When we talk about hiring, we always think about finding a new person and use his services but, internal job rotation is something that no one thinks of and in certain conditions the best choice. If someone from your Department “A” has skills and talent to handle Department “B” then why not promote him/her to department “B”. There are many reasons why internal job rotation is better than hiring a new person, but to name a few- employee retention encourages development, eliminates boredom, and much more. Culture Fit If you want to hire the right employee, you need to make sure that they’ll fit in the company culture, your team, as well as the job. The best way to do that is by setting up a good interview panel. The interview panel is the one who asks questions and reviews the profile of the person to be hired. So asking a few cultural questions, liking, interest, hobbies, etc. helps the interview panel in deciding whether they’ll be a good match for our business or not. Go Beyond the Resumes Resumes are the best-foot-forward of a person. You need to go beyond that. A resume contains a person’s experiences, education, the last job is done, and much more but a person is much more than a piece of paper so, analyzing a person on the bases of personality, attitude, and style of speaking should also be analyzed thoroughly. Background reference Background reference is a very critical part of the hiring process. It is done to ensure that whoever you are hiring has a clean record. You can use the information provided by the employee like aadhaar card, social security number, etc. we can identify whether the person seeking a job is criminal or not. You can get police verification done along with enquiring with the previous employer. Competency Mapping Competency mapping is a process of identifying the competencies of an employee based on education and skills. When a person does a job basically he is using his skills and experiences in the job to get a favorable outcome. As a business manager or CEO, your job is to help your employee in bringing the best out of them and that can be easily done by working on their skills, education, and experience. Many business hire special corporate training specialists to train their employees and motivate them to achieve a better result in the job they do. When you are hiring a person it becomes hard for you to identify the competency of a person, at such situations you need to look at their previous work, question them on technical grounds, and watch their skill in action by conducting a test. Choose a Good Employment Agency Many small businesses often hire an employment agency to make their recruitment easy but they often miss out on key information on identifying a good employment agency. Basically, there are three types of recruitment agencies which are as follows- General Recruitment AgencyStaff Recruitment AgencyExecutive Recruitment AgencyAll in one agency Genera Recruiting Agency helps you find industry-based staff meaning this agency focuses on a niche industry like healthcare, engineering, etc. A staff recruitment agency is focused on temporary staffing solutions, this type of recruiting is done for seasonal businesses or project-based hiring. Executive Recruitment Agency is the agency that helps businesses in recruiting in executive positions like CEO, CFO, and Managers, etc. You can categorize the top-level position to C-level positions in this type of recruiting. As the name suggests, All in one recruitment agency is the agency that provides all these services like Yunic Solutions, We provide multiple recruitment services in every industry. After selecting the type of agency, you can decide your budget and go about researching the best recruitment agencies. Hiring the right employee in a nutshell Hiring the right employee is all about the experience. For some people, the first employee could be the right employee and for some people no employee is the right employee.But in general, Hiring is a core HR process that is essential for business and requires dedicated time and effort.

you honestly don’t have the time to decide which of these options is better.

Now personal data exports include users session information and users location data from the community events widget. Plus, a table of contents!See progress as you process export and erasure requests through the privacy tools.

What I think we're lacking is proper tooling, or at least the knowledge of it. I don't know what most people use to write Git commits, but concepts like interactive staging, rebasing, squashing, and fixup commits are very daunting with Git on the CLI, unless you know really well what you're doing. We should do a better job at learning people how to use tools like Git Tower (to give just one example) to rewrite Git history, and to produce nice Git commits.

If we can encourage people to create clean commits as they go, the example as you showed above should be far less common, because cleaning up such history as an after-math is most of the time almost impossible.

With a recognisable, ever present icon, user's can easily manage their consent at any time.

The "'strict-dynamic'" source expression aims to make Content Security Policy simpler to deploy for existing applications who have a high degree of confidence in the scripts they load directly, but low confidence in their ability to provide a reasonable list of resources to load up front.

It even proclaims that "the processing of personal data should be designed to serve mankind."

make it as easy to withdraw consent as to give it. The latter gets particularly interesting when considering that in some contexts, consent may be obtained “through only one mouse-click, swipe or keystroke” and therefore “data subjects must, in practice, be able to withdraw that consent equally as easily” per the WP29.

it is a question of balance — if one mouse-click was all it took to consent, is it appropriate to require a phone call during business hours to withdraw that consent? Probably not.

statutory rights of withdrawal from your purchase contract

Under the FTC’s CAN-SPAM Act, you do not need consent prior to adding users located in the US to your mailing list or sending them commercial messages, however, it is mandatory that you provide users with a clear means of opting out of further contact.

So what’s the difference between returning a product on the grounds of withdrawal and returning it on the grounds of a guarantee?

You don’t need to have any reason for exercising this right — you can simply change your mind

they’ve contested its accuracy

Please note that users enjoy a specific right of opposition to ADM processes

the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

If you're wearing the same shoes as I have so many times before where you're trying to make yourself heard and do what you ultimately believe is in the organisation's best interests

it reminds me of IT security best practices. Based on experience and the lessons we have learned in the history of IT security, we have come up with some basic rules that, when followed, go a long way to preventing serious problems later.

The fact is that it doesn’t matter if you can see the threat or not, and it doesn’t matter if the flaw ever leads to a vulnerability. You just always follow the core rules and everything else seems to fall into place.

Data Erasure and Storage Time The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. The data may be stored beyond that if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the controller is subject. The data will also be erased or blocked if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

there's no reasonable way to communicate effectively with the less technically minded without acquiescing to the nontechnical misuse of the term "hacker"

The more easily relabeled of the two uses of the term "hacker" is the malicious security cracker: it is not only the more recent phenomenon to acquire that label, but also the one whose meaning is most easily evoked by an alternative term. This is why, when you read an article of mine that talks about malicious security crackers, I use the term "malicious security cracker"

IDEs and standard *nix tools like sed can help, but you typically have to make a trade-off between introducing errors and introducing tedium.

The mediastinal abnormality may suggest the location of the arterial injury (i.e., left-sided hematomas are associated with descending blunt aortic injuries [BAI], whereas right-sided hematomas are seen with innominate injuries)

letting them adjust consent decisions for specific purposes and exercise other user rights at any time.

There is no system that is equally well-suited to significantly different scenarios.

The higher the load on the system, the more important it is to customize the system set up to match the requirements of the usage scenario, and the more fine grained this customization becomes. There is no system that is equally well-suited to significantly different scenarios. If a system is adaptable to a wide set of scenarios, under a high load, the system will handle all the scenarios equally poorly, or will work well for just one or few of possible scenarios.

The personal data is no longer necessary in relation to the purposes for which it was originally collected or otherwise processed.

An example of reliance on legitimate interests includes a computer store, using only the contact information provided by a customer in the context of a sale, serving that customer with direct regular mail marketing of similar product offerings — accompanied by an easy-to-select choice of online opt-out.

This is no different where legitimate interests applies – see the examples below from the DPN. It should also be made clear that individuals have the right to object to processing of personal data on these grounds.

Rather than using NFS for this task, use explicit data duplication, via one of the long-established mechanisms designed for this purpose.

All of which means — per EU law — it should be equally easy for website visitors to choose not to be tracked as to agree to their personal data being processed.

The business had a policy that you should report safety incidents when you see them. The process around that was you fill out a form and fax it to a number and someone will take action on it. The safety manager in this company saw that and decided to digitize this workflow and optimize it. Once this process was put into place, the number of safety incidents reported increased 5 times. The speed at which safety incidents were addressed increased by 60%.