Professor Carson if you're in the comments I just wanted to say from the bottom of my heart thank you for everything you've contributed. I didn't understand why we were learning HTMX in college and why you were so pumped about it, but many years later I now get it. HTML over the wire is everything.
I've seen your work in Hotwire in my role as a Staff Ruby on Rails Engineer. It's the coolest thing to see you pop up in Hacker News every now and then and also see you talking with the Hotwire devs in GitHub.
Thanks for being a light in the programming community. You're greatly respected and appreciated.
well, at least he is (you are?) consistent in this style of criticizing others' ideas with satirical sarcasm fueled prose focused on tearing down straw men.
Solopreneur making use of it in my bootstrapped B2B SaaS business. Clients don't need or want anything flashy. There are islands of interactivity, and some HTMX sprinkled there has been a great fit.
I started using htmx relatively early on, because its a more elegant version of what I've been doing anyways for a series of projects.
It's very effective, simple and expressive to work this way, as long as you keep in mind that some client side rendering is fine.
There are a few bits I don't like about it, like defaulting to swap innerHTML instead of outerHTML, not swapping HTML when the status code isn't 200-299 by default and it has some features that I avoid, like inline JSON on buttons instead of just using forms.
I thought this article was going to be like "YouTube restricted one teenager's access to fitness videos"... but yeah, this is a pretty sane move on YouTube's part.
Human society has always been glorifying certain body types and physical violence all the way back to ancient Greek and very likely way earlier. There is nothing wrong with admiring and chasing after a fitness ideal.
To make a steelman out of this case, I guess we can argue overexposure and extreme promotions of unrealistic ideals can warp impressionable young minds. But even then I disagree that Youtube alone has the moral standard and authority to regulate and censor this. They are a corporation, one of the least moral entities currently around in modern time. They have no right to pick and choose what kids can and cannot watch.
They're not picking and choosing. YouTube didn't wake up one morning and say we should stop recommending fitness videos to teens. They are responding to massive social pressure from parents who for the most part are very sick of fighting their kids on one hand and rapacious enterprises determined to exploit those kids on the other hand.
Please note that Youtube is not preventing teenagers from watching fitness content. Rather, they are simply not recommending it as much in the Youtube recommendation algorithm. No new categories of videos will be age restricted.
Does this change your view of Youtube's new stance?
The article said "stop recommending" and to me that is functionally "stop providing access".
Personally, I believe for most people, the algorithm is all of Youtube. It controls what show up on the side bar and on the search page. How many people would go beyond those to find a video? By changing the algorithm, YT can effectively restricting access to certain contents.
Regardless, my point doesn't change. A corporation does not have the standing and should not be allowed to regulate moral matters. They operate on completely different principles and letting them control what a person can and cannot see or hear would not end well.
I don't understand your concern. The conversation surrounding the negative impact of social media has been going on for some time now. But also, they already pick and choose what most of us watch through their recommendation system.
I just attempted this myself by creating an issue, commenting a file, copying the link and not submitting the issue.
It seems to work initially, but then 5m later the file gets deleted and the link leads to a dead s3 asset page.
So I believe this is fixed. Though the solutions suggested below are crafty, trying to reproduce myself shows me this has been addressed by the GH team
Maybe. Haven't tried it. Though, that does make the attack vector a little less intense than persisting even without an issue. At least the attack vector can be tracked.
fwiw, I tested this out as well by clicking open issue and uploading a file and then not actually submitting the issue. the file is still accessible 2 days later.
Just want to point out that GitHub removing the asset after 15 minutes is actually worse than leaving it. The least appetizing aspect of this for adversaries is that your payload is now forever available to anyone with the logs. If it were adversary’s choice (submit the issue and it stays, only draft the issue and it gets wiped, good riddance, a phenomenal c2 stager indeed!)
- Abraham Lincoln
reply