I do also have those, but they got bored and lost interest. They do still occasionally get triggered by my username though 😂

I remove my own default upvote from my comments because I’m a weirdo

Yeah… I like the syntax, but I hate the old jank. Still one of my favourite languages regardless. But definitely your first year will be variations of “why does JavaScript do that” 😂 I damn near quit when I had to do timezone and scheduling stuff with native date objects

I know, but a lot of people don’t click the article, they just look at headline + comments, so it’s still a reduction of visibility or an extra step. My comment is like exposing the endpoint right there front and centre. Plus, I don’t like being personally responsible for any data breach. Maybe it’s just a tiny thing but it felt like the right thing to do

JavaScript is a bit funny and doesn’t actually have native integers… every number is a floating point, which means even whole number math gets weird sometimes. Not often, but enough that cents were lost and people were upset.

I haven’t looked at how Dinero works under the hood, but I never had any problems at all with it after we started using it. Front end works in cents, back end works in decimal, is what I’d suggest for anyone else reading this. Statically typed languages are much easier to control and you don’t need a library at all if you’re careful.

Maybe I should remove that from my comment lol, I feel like I’m contributing to a data breach or something

I don’t know much about GDPR… is it illegal to have badly written software like this? Technically the user is bypassing normal usage and “hacking” the API

They probably meant 6 digit and it was a typo. The rest of the article references 6 digits. If it’s just an integer (highly likely) it would go up to 10 digits or roughly 2 billion max users. My old coworkers and I used to joke that hitting INTEGER.MAX_VALUE for your customer ID is a good problem to have

the API endpoint GET [redacted] will return user data for any account - not just your own account - so long as you supply a valid, five-digit user ID. It doesn’t perform any authorization check or ownership validation. “Just increment the number and get someone else’s data,” she wrote.

This data includes users’ email addresses, first and last names, country, dates of birth, and whether the account has been deleted, and the API exposes all 719,517 accounts on the prayer site. “With sequential user IDs and no rate limiting, an attacker could enumerate every single account on the platform,” the hacker explained. “One GET request per user. for i in range(1, 719518): scrape(). That’s it. That’s the exploit.”

My God, that’s horrific. Plus it doesn’t even delete your data if you delete your account, it’s still vulnerable.

I remove my own default upvote from my comments because I’m a weirdo

They do, but you can’t say “this isn’t medical advice” and then turn around and give medical advice. Especially to the point of discouraging seeing a doctor.

It didn’t used to. There was the whole “memories” thing that it kept between conversations. I hated it

They still have a good export tool, that’s a reliable canary for enshittification in my experience. See: how Google butchered their export tools to be as annoying as possible for “security” reasons. The harder it is to leave, the more they care about trapping you via friction rather than keeping you via good customer experience

As far as I understand, it seems to sacrifice accuracy at larger numbers, for more accuracy at smaller numbers. As they say, that seems like a reasonable tradeoff, because we tend to mostly use smaller numbers in our software.

In my honest opinion though, if accuracy is a concern, I reach for decimal or integer based mathematical libraries. For example, in a JavaScript project that needed to handle currency, I used Dinero, because $0.1 + $0.2 needs to actually work properly. As far as I understand, it just does all math in integers, and then you can display it as a string in the UI or export it as an integer for storage as a realised decimal in the database.

Can you explain how this works exactly? Do you mean you have like a “third type” or “fraction”: 3 and you just store 00 for 0/3, 01 for 1/3, 10 for 2/3, 11 for 3/3? If it’s an object, struct, or class type to store the context, then it’s not a primative and has a lot of overhead for arithmetic and I don’t see how you could possibly even do simple things like 1/3 + 2/6

This is a pretty good video that goes into the intricacies of it

https://youtu.be/2DOd4RLNeT4

Yes this is what A.I. does. It shows you a somewhat glitchy alternate reality where that photo is coloured in instead of black and white. So it might do seemingly strange things like upgrading technology and clothes and stuff to match what people wore when colour photos were a thing.

However, it’s relatively trivial to take the A.I. photo and use it as a colour-only layer in Photoshop, while preserving the original grayscale photograph as the source of truth. It might not line up perfectly but you can smudge it around a bit to fit.

It’s really good for turning off the RGB

I completely deleted my Reddit account, which is not a decision I took lightly, after more than 10 years of using that website frequently. I didn’t use any of the purge apps, my comments can be fossilized under [deleted] incase it helps anyone.

Makes me wonder if that’s a good indication of quality? I highly doubt bot accounts and astroturfers would ever delete their account, it’s too valuable for them. Deleted users are kind of verified human in a way.

I’ve noticed this. Phones take really distinctly “strange” photos. They’re mostly good for everyday use, but struggle to make something look really nice