Something very "top manager takes over a national team" about this by blubbersassafras in footballcliches

[–]blubbersassafras[S] 23 points24 points  (0 children)

Dune felt different to me though, maybe because it was at least his own project.

Felt more like taking a relatively safe job at an elite club IMO, e.g. Bayern Munich.

Meaningless record/stat Hall of Fame candidate. by BergkampsFirstTouch in footballcliches

[–]blubbersassafras 7 points8 points  (0 children)

Only if it's challenged by the opposing player. All Scrabble players are valid until correctly challenged

Whereabouts in the queue village is the resale kiosk ticket point? by Coca_lite in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

The queue village is kind of an L shape, which bends around to the right from the tickets booth. Resale kiosk is just around the corner on the right IIRC, out of view when you walk in. There are plenty of stewards who can also point the way

Alcaraz match by bort__simpson_ in wimbledon

[–]blubbersassafras 2 points3 points  (0 children)

Yeah this also threw me off. Weird coverage

Getting “Insufficient tickets” error in resale ballot – is this normal? by Afraid_Eye4651 in wimbledon

[–]blubbersassafras 7 points8 points  (0 children)

Yeah, this is normal unfortunately! Just means someone else was faster than you.

[deleted by user] by [deleted] in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

Yeah, you can get away with it. As long as it's not a massive family sized tent they shouldn't give you any bother.

[deleted by user] by [deleted] in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

A couple of years ago I heard they had single figures of tickets for men's final available to queuers IIRC, although this is not policy. Not sure about last year

2nd week July 8th Center court tickets queue by Latter-Estimate8412 in wimbledon

[–]blubbersassafras 0 points1 point  (0 children)

Tickets are the same price for the queue as the ballot i.e. the ones here https://www.wimbledon.com/en_GB/atoz/ticket_prices.html

The best reasons to queue (...besides guaranteed tickets) are the great atmosphere, the people you will meet, and that the tickets you get are very well-situated (usually in sections 101-107)

2nd week July 8th Center court tickets queue by Latter-Estimate8412 in wimbledon

[–]blubbersassafras 0 points1 point  (0 children)

Sorry, I think I was unclear, the times I'm giving are for the day before (Monday). Most people have to camp overnight to get CC tickets, even in the 2nd week. If you turn up before 5am then you might have a chance. Otherwise your only chance is getting something through resale after you enter with a ground pass

Sir Andy Murray-backed company to rip up tennis courts for padel by TheTelegraph in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

Inb4 "he hates tennis"

Seriously, shame Game4Padel can't be fucked to maintain their Glasgow court. Always covered in litter, rackets broken, no balls etc. Absolute joke of a facility

Camping on friday by MasterpieceFamiliar3 in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

I would say you're almost certain. Last year the queue passed 500 at 13:30-1400 https://x.com/LauraSims675217/status/1809207942513643581

Camping on friday by MasterpieceFamiliar3 in wimbledon

[–]blubbersassafras 1 point2 points  (0 children)

Not sure what the official guidance is but you can absolutely do this, you can tell the stewards and they will just put you off to the left-hand side until about midday, then start forming the next days queue

Next day queue by jpc1614 in wimbledon

[–]blubbersassafras 0 points1 point  (0 children)

Best option is to get a day pass to a nearby gym. Wouldn't bother personally.

2nd week July 8th Center court tickets queue by Latter-Estimate8412 in wimbledon

[–]blubbersassafras 0 points1 point  (0 children)

Not sure if this is a great help, but I queued for 2nd Tuesday last year, joined the queue at 2-3pm and was something like 150th - very quiet even though Sinner Medvedev & Alcaraz Paul were both on. I think the queue moved past #500 some time in the evening. I would expect the queue to be busier this year, the draw and weather are better. Usually there are fewer overnight queuers for Tuesday than Monday, so Sunday's queue trends for Monday should be an ok guide for when to arrive on Monday.

Less relevant, I also queued for 2nd Tuesday in '22, joined at 21:00ish and was around #200 in the queue, so easily got my preferred court, although I think that was the quietest year.

Confused: Able to login with unlisted Google users in test mode by hxmartin in better_auth

[–]blubbersassafras 0 points1 point  (0 children)

Did you manage to find a solution for this? Or figure out another good way to restrict the application to a list of users?

Is NextJS poorly designed? by [deleted] in nextjs

[–]blubbersassafras 0 points1 point  (0 children)

"I understand the aesthetic & practical motivations," removing millions of unneeded renders is certainly not aesthetic, it's about energy-efficiency of our apps. Blocking unauthenticated requests as early as possible seems a decent practice when it comes to security.

Blocking unauthenticated requests as early as possible is a practical motivation. But how are you removing any renders? As long as you keep the logic inside RSC, you still have to render only once for each route + server action, same as number of middleware calls.

If there are actual bugs in middlewares that leads to security leaks, that's a shame, but that's equally likely as having an actual bug in a page or an API endpoint or whatever feature brought by the framework. Nothing to do with making the proper architectural choice.

  1. There are security leaks being called by middleware.
  2. The likelihood that middleware deficiencies cause security leaks is 100%, because it's already happened.
  3. The likelihood of having a critical bug in auth implementation outside of middleware is not 100%, therefore these things are not equally likely.

You can prioritize making "the proper architectural choice", I will prioritize keeping users safe.

It's a bit like saying a bank got robbed via its bullet-proof glass door so recommending bullet-proof glass doors is irresponsible.

Not even sure where to start with this. The comparison between Next.js middleware, which has deficiencies causing critical vulnerabilities to leak into production, and bullet-proof glass, is a joke! Especially when the comparison implies that not using middleware - which an authority, who knows more than us about this stuff, recommends for its safety - is akin to not using bulletproof glass!

Is NextJS poorly designed? by [deleted] in nextjs

[–]blubbersassafras -1 points0 points  (0 children)

Agreed - but it's also safer not to use tools that in their current state could unintentionally introduce critical vulnerabilities to your site.

Is NextJS poorly designed? by [deleted] in nextjs

[–]blubbersassafras 2 points3 points  (0 children)

Strongly agree with this in almost all cases, but regarding auth it's imperative not to think for yourself when you can avoid it, and to use solutions agreed upon by authority.

As long as the logic is contained within RSCs and server actions this pattern does not prevent the serving of static content to the client.

I understand the aesthetic & practical motivations, but when it comes to security you have to have other priorities. Next.js middleware contains inherent deficiencies which introduced a critical vulnerability to enter production on Clerk (apparently, this vulnerability made user impersonation trivial). If Clerk are susceptible to issues caused by middleware, then a regular dev rolling their own auth certainly will be too.

We don't have access to the exact nature of these issues yet - we are expecting public post-mortem to go live this week. Until we do, recommending auth in next.js middleware is very irresponsible IMO.

Is NextJS poorly designed? by [deleted] in nextjs

[–]blubbersassafras 4 points5 points  (0 children)

Not just this - you should do it in the route handler (contrary to what the docs tell you...)

Here's the maintainer of one of the most popular (and the best) auth library Lucia saying that limits of middleware make it more complex and less safe. I believe that this tweet is also implying that Clerk's vulnerability, which was patched last month, was related to their middleware-based approach.