Thanks for this. I've added a note to the post. "...consider having dedicated, lightweight pages for login and credit card collection that don’t ship any third party code (npm packages, advertising, analytics, GTM, etc.)"
I originally wrote "about half" but there was one too many words in the sentence. Also I figure for an eCommerce site max-traffic might be 7-9pm or something so even though there's more sleeping happening outside 7am-7pm, there might be equal traffic. Anyway ... close enough.
Author here. Someone in a comment pointed out that you if you could get your code in express middleware (or something depended on by express middleware or similar) you could potentially alter any CSP header in the responses (if it's set in middleware before your's in the chain).
Hey, I wrote that article :) - yes it was pure coincidence, I just decided with all the security stuff going on this week (Spectre/Meltdown, I hadn't heard about the npm stuff) I'd write and article about it.
Thanks for the useful feedback, it's much appreciated. Buttons are now full background colors, looks much better. It also should now be easier to see which nodes have children.
I need to have a think about (and see what other people think) how to deal with inheritance of 'scores'. If you click "I don't care" to WebGL, it should trickle down, but probably not for "I know it". So I need to cover the different scenarios but stay intuitive.
I also need to have a think about how to show some information about what's happening below an item in the tree. Maybe just a % unrated for each row or something.
Regarding flashcards, love the idea, don't love the amount of work it would be :) I left a reply to a comment on medium about this if you're interested.
I'm planning a follow-up post with all sorts of real validation just like what you mention here. Can't take too long to build an array of 'probably typos'. I wish had access to logs of failed emails.
If I was to carry on with it, I would look into using byteFrequencyData rather than timeDomainData. My initial attempts with the frequency data weren't great, but a few people have mentioned it so I'd take another look and see if I just wasn't doing something dumb.
I felt like the most fiddly work would be accurately sampling the sound. E.g. not recording when it was under (or maybe over) a particular volume, ignoring the initial thud of a key (particularly with the phone sitting on the piano), and making it so that the correct 'note' stayed blue as the sound trailed off and got less reliable.
From a career perspective, JavaScript has a pretty wide reach. Jobs range from designers that fiddle with JS to server-only NodeJS jobs and plenty in between. A demand for JavaScript devs writing mobile apps is growing with things like Facebook's ReactNative and there are decent desktop apps (VSCode, Atom, Slack) too, although it's not exactly a demand just yet.
Money is good too, here in Aus $600-$800 a day (or around $130-$160k a year) is the going rate for a decent developer with a few years under their belt.
Big Kev is asleep on the lounge next to me. Little Kev is under him somewhere.
Toula, Foula and Agape are curled up in the clothes dryer, it's still warm because I had to wash all my linen today.
Silkie is under the bed screaming again. I've given her some fox prozac and it seems to be helping. She is a troubled soul.
Mr Smithers will be missed, but has gone to a better place.
I find myself picking a PaaS for a client every few months so this would be great for me.
A bit of feedback (all IMHO):
- Having to scroll down to get to the meat of the site is kinda like 'Enter' pages from the late 90s.
- You have Heroku with Mongo support. But this is only by hosting your database elsewhere, right?
- I'm sure you've thought of it, but it needs pricing (e.g. 'from $12/mo') and a note if there is a free tier.
- Needs Azure
- I prefer buttons to drop-down lists. One less click.
I think this highlights that when it comes to anyone that has anything of yours, you never know what's going on behind the scenes. This is why I don't use things like LastPass. I know they say they're secure, I figure I would have read a news article if they weren't, I figure some sort of audit will have happened by independent experts. But if I read an article in The Guardian tomorrow telling me that one rogue employee had been decrypting and using passwords of certain people I would not be surprised (I'd be up on my high horse in no time).
I should say I'm not picking on LastPass - I mean any service that has data that I wouldn't feel comfortable giving to a friend.