81 Matching Annotations
  1. Jun 2025
  2. Feb 2025
  3. Jan 2025
  4. Feb 2024
  5. Dec 2023
  6. Nov 2023
    1. Implement restrictive defaults (potentially allowing an explicit bypass) I understand that easy usability and rich out-of-the-box functionality is likely essential to this library's appeal to its users. Nevertheless I'd like to propose making the authorization properties ransackable_[attributes/associations/etc.] empty sets by default, forcing the developer to explicitly define whitelists for their use case. To soften the usability blow, a new ransack_unsafe(params[:q]) or ransack_explicit(params[:q], ransackable_attributes='*', ransackable_associations=(:post, :comment)) method could be introduced to offer developers a shorthand to bypass or override the whitelists for specific queries (after they've had to read a warning about why these methods can be dangerous).
  7. Aug 2023
    1. Everything I'm saying to you right now is literally meaningless. (Laughter) 00:03:11 You're creating the meaning and projecting it onto me. And what's true for objects is true for other people. While you can measure their "what" and their "when," you can never measure their "why." So we color other people. We project a meaning onto them based on our biases and our experience.
      • for: projection, biases, bias, perspectival knowing, indyweb, tacit to explicit, explication, misunderstanding
      • comment
        • The "why" is invisible.
        • It is the thoughts in the private worlds of the other.
        • It is only our explication through language or other means that makes public our private world
        • We construct meaning in the world.
        • Our meaningverse is our construction. BUT it is a cultural construction,
          • it was constructed by all the meaning learned from others, especially beginning with the most significant other, our mother.
  8. Jun 2023
  9. Mar 2023
  10. Dec 2022
    1. There are different kinds of information, some of which don't make sense being recorded at all. I was struggling with what to record and what not to record for a long time. For example, I took notes on programming syntax that are just useless (most of these things can be googled in seconds and they are usually decently documented already).

      How was this not obvious from the jump? Was the author of the essay so distracted by shiny object syndrome they failed to see the obvious?

      It's like taking notes in a language class... the goal is to read and write with fluency, so you practice these things regularly and gain fluency over time. Taking notes about the grammar and syntax of a language is highly unlikely to get you to fluency. Note taking is the wrong tool for a number of processes and the user should very quickly get a gut feeling for what's useful and what is not.

      This author obviously missed the boat here.

  11. Nov 2022
  12. Jun 2022
  13. Apr 2022
  14. Jan 2022
  15. Sep 2021
  16. Aug 2021
  17. Jun 2021
    1. Giving peers permission to engage in dialogue about race and holding a lofty expectation that they will stay engaged in these conversations throughout the semester or year is the first of the four agreements for courageous conversation. While initially, some participants may be eager to enter into these conversations, our experience indicates that the more personal and thus risky these topics get, the more difficult it is for participants to stay committed and engaged." Singleton and Hays

  18. May 2021
  19. Apr 2021
  20. Mar 2021
  21. Feb 2021
    1. To understand this helper, you should understand that every step invocation calls Output() for you behind the scenes. The following DSL use is identical to the one [above]. class Execute < Trailblazer::Activity::Railway step :find_provider, Output(Trailblazer::Activity::Left, :failure) => Track(:failure), Output(Trailblazer::Activity::Right, :success) => Track(:success)
    1. Explicit intents specify which application will satisfy the intent, by supplying either the target app's package name or a fully-qualified component class name. You'll typically use an explicit intent to start a component in your own app, because you know the class name of the activity or service you want to start.
  22. Jan 2021
  23. Dec 2020
  24. Nov 2020
    1. This decorators proposal is based on a common model where each decorator affects just one syntactic element--either a field, or a method, or a getter, or setter, or a class. It is immediately visible what is being decorated.
  25. Oct 2020
  26. Sep 2020
    1. Svelte will not offer a generic way to support style customizing via contextual class overrides (as we'd do it in plain HTML). Instead we'll invent something new that is entirely different. If a child component is provided and does not anticipate some contextual usage scenario (style wise) you'd need to copy it or hack around that via :global hacks.
    2. Explicit interfaces are preferable, even if it places greater demand on library authors to design both their components and their style interfaces with these things in mind.
    3. Web developers are well aware of the mess you can get into with global CSS, and the action of writing <Child class="foo"/> and <div class={_class}>` (or similar) in the child component is an explicit indication that, while taking advantage of all the greatness of style encapsulation by default, in this case you have decided that you want a very specific and controlled "leak", of one class, from one component instance to one component instance.
  27. Aug 2020
    1. Now it is much clearer that id is really a family of infinitely many functions. It is fair to say that it is an abstract function (as opposed to a concrete one), because its type abstracts over the type variable a. The common and proper mathematical wording is that the type is universally quantified (or often just quantified) over a.

      This was very neatly put, and forall above is also spot on.

    1. Quantified Types

      My main issue with this book is that the difficulty is exponentially increasing, and by "keeping it simple" (i.e., trying to use simple terms) it is even harder to do a proper research.

      For example:

      1. The name of this chapter

      This chapter should have been called Explicitly quantified type or Explicit universal quantification as it is too general as is, and doing a search to get to know more when someone has no formal/previous functional programming background, makes very hard.

      Most importantly though, even if Haskell not mentioned, the word "explicit" would have been important.

      It is also more about generic parameters than about quantification itself, and forall is kind of introduced but it is totally misleading.

      2. forall

      The post “forall” is the type-level “lambda” (saved) is the best, most succinct explanation of forall that I ever found. Unfortunately not before going down the rabbit hole.. (See links below.) One still needs to know about

      • typeclasses
      • generic parameters
      • constraints
      • what pragmas are but after that, it is straightforward.

      (Jordan's Reference section on forall also doesn't help much.)

      forall is also mandatory in PureScript (which is also not mentioned when introducing it), and I believe a comparison (the way the above post did) with Haskell is important, but at the right time. At least Jordan's Reference tries to put it off until later, but still before explaining concepts required to understand it.

      3. The "rabbit hole" links

      These are all good resources, but not for uninitiated mortals, and at a lower level (such as where I am now) they raise more questions than answers.

  28. Jul 2020
    1. While Rails supports numbering of initializer file names for load ordering purposes, a better technique is to place any code that need to load in a specific order within the same file. This reduces file name churn, makes dependencies more explicit, and can help surface new concepts within your application.
  29. May 2020
    1. Explicit Form (where the purpose of the sign-up mechanism is unequivocal). So for example, in a scenario where your site has a pop-up window that invites users to sign up to your newsletter using a clear phrase such as: “Subscribe to our newsletter for access to discount vouchers and product updates!“, the affirmative action that the user performs by typing in their email address would be considered valid consent.

      Answers the question I had above: https://hyp.is/tpgdQo_4EeqPcm-PI0G2jA/www.iubenda.com/en/help/5640-email-newsletter-compliance-guide

    1. Does a China-based company selling goods over a website only drafted in Chinese need to comply with the GDPR just because it’s possible, from a practical point of view, that some EU-based Chinese persons might purchase something from it? In principle we’d say no, unless it can be proven, that the company is doing relevant business with EU-based customers, or is addressing them expressly (for instance, by informing that “delivery to the EU” or “payment from an EU bank account” are possible etc.).
  30. Mar 2020
    1. these active behaviors may include continued browsing, clicking, scrolling the page or some method that requires the user to actively proceed; this is somewhat left up to your discretion. Some website/app owners may favor a click-to-consent method over scrolling/continued-browsing methods as the former is less likely to be performed by user error.
  31. Feb 2020
  32. Sep 2016
  33. Sep 2013
    1. Very good then; as you profess to be a rhetorician, and a maker of rhetoricians, let me ask you, with what is rhetoric concerned: I might ask with what is weaving concerned, and you would reply (would you not?), with the making of garments?

      Socrates making his question as explicit and specific as possible. He may be anticipating some indirect answer.