bjorney

The local Loblaws near me (the Canadian devil chain) set theirs up with like a 5% weight tolerance, so if you put something down too fast? Sensors go off. Bag it then put it on the scale? Sensors go off. Manufacturer put too many chips in your package? Sensors go off.

I don’t shop there anymore

I’m thought @Honytawk@lemmy.zip was being sarcastic, but lo and behold, people actually consider 33g of sugar per serving “unsweetened”

If you order an iced tea in Canada you are getting Nestea/Brisk like 95% of the time. Both are sweet teas, but are marketed and labelled as “Iced Tea”, not “Sweet Tea” - ask our American beverage overlords Coke/Pepsi why

If you are in a cafe, or some other place where the expectation is that they brew their own, then yes, it’s generally unsweetened - but it’s also usually explicitly labelled as such on the menu so you know whether you are getting brewed tea vs a glass of corn syrup

I’ve definitely ordered one when I was down south, poured 2/3rds out, and topped it up with water, and it was still comparable to nestea

It’s sweet tea in the United States.

In Canada “Iced Tea” means “sweet tea” most of the time

The other commenter cropped their image right before the last massive drop in 2015

You should look at how OPs example works first maybe

The python interpreter isn’t parsing comments, the add() function is just getting the current line number from the call stack context, and using a regex to spit out the numbers to the right of the “#” on the current executing line of the source code.

Do you stay away from C++ too? You can do this there too

https://en.cppreference.com/w/cpp/utility/source_location/line

This stuff is normally used for creating human readable error messages. E.g. printing the line of your code that actually set off the exception

The add function in the example above probably traverses the call stack to see what line of the script is currently being executed by the interpreter, then reads in that line in the original script, parses the comment, and subs in the values in the function call.

This functionality exists so when you get a traceback you can see what line of code triggered it in the error message

What does git add xxx do then

Git doesn’t automatically recursively add all files in the directory to the repository though - VSCode decided that should be the default behavior, while other editors (intellij) ask if you want to add newly created files to version control

The library is a mile from me too, that’s a 30 minute round trip, or I have to drive and pay for parking

I bought a $60 inkjet 10+ years ago. Every 3-4 years I buy a multipack of aftermarket ink for $30. Every 18 months when the cartridge dries up half full in my printer I chuck it knowing the $5 of ink I just wasted saved me $400 in billable hours

1. if I didn’t have a printer I would need a standalone scanner, which costs almost the same amount

2. Driving to Staples to print a $0.10 page wastes $50 worth of time and gas

A cheap printer pays for itself very quickly.

AFAIK if you spend at least 2 years studying here you automatically qualify for a 3 year work permit. I think rolling that into permanent residency is a lot easier than just applying for a work visa or PR out of the gate

International student tuition is way more expensive here in Canada than it is for citizens, but I’m not sure how it stacks up against normal US tuition.

Grain of salt, everything I’ve said is based on anecdotes from people I know who went through it

Or if you are on a Boeing plane and a side panel/door spontaneously flies off off you don’t get sucked out

/s, but not really /s

That assumes that an adversary has control of the browser

No it doesn’t, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account

The big reason you don’t want to send passwords over https is that some organizations have custom certs setup

What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways

It is better to just not send the password at all.

How would you verify it then?

If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in

Client side verification is just security by obscurity, which gains you very little.

If someone is capable of MITM attacking a user and fetching a password mid-transit to the server over HTTPS, they are surely capable of popping open devtools and reverse engineering your cryptographic code to either a) uncover the original password, or b) just using the encrypted credentials directly to authenticate with your server without ever having known the password in the first place

You are acting like someone checked off a “log passwords” box, as if that’s a thing that even exists

Someone configured a logger to write HTTP bodies and headers, not realizing they needed to build a custom handler to iterate through every body and header anonymizing any fields that may plausibly contain sensitive information. It’s something that literally every dev has done at some point before they knew better.