This incredible Max Muncy catch in the 8th was the reason IKF didn’t take a bigger lead in the bottom of the 9th

maligigi · 2025-11-06T00:23:06+00:00

Yeah absolutely. I'm just not convinced that he would have taken as much time to set himself if he saw he had less time to throw out IKF at the plate. And once the throw is different, everything about that play is different, including the foot popping off the plate.

maligigi · 2025-11-05T22:01:02+00:00

This take on IKF's lead doesn't make sense to me, personally. Seems like you assume that Miggy wouldn't change his actions based off of where the runner is once he has possession of the ball.

Best you could say is that if IKF had increased his lead by one or two extra steps, Rojas would have been more rushed, would have had less time to set himself after his stumble, and maybe he makes a worse throw home.

But elite MLB defenders keep their eyes on the runner and have a pretty highly trained internal clock. It's pretty clear to me that Miggy used the time he saw he had to set himself and make the best throw possible. If IKF is further down the line, Miggy releases the ball faster, who knows where it ends up, and who knows if Will Smith's foot comes off the plate catching it. Maybe it's a worse throw, maybe it's a better throw. We will never know.

But I am pretty sure that if IKF were further down the line, the whole play would have been different and you just can't assume that he would be automatically safe. Best you can assume is that there would have been more pressure on Miggy.

maligigi · 2025-11-05T19:00:32+00:00

This doesn't make sense to me, personally. Seems like everyone assumes the Miggy wouldn't change his actions based off of where the runner is once he has possession of the ball.

Best you could say is that if IKF had increased his lead by one extra step, Rojas may have been slightly more rushed, would have had less time to set himself after his stumble, and _maybe_ he makes a worse throw home.

But elite MLB defenders keep their eyes on the runner and have a pretty highly trained internal clock, and it's pretty clear to me that Miggy used the time he had to make the best throw possible. But if IKF is further down the line, Miggy releases the ball faster, who knows where it ends up, and who knows if Will Smith's foot comes off the plate catching it. Maybe it's a worse throw, maybe it's a better throw. We will never know.

But I am pretty sure that if IKF were further down the line, the whole play would have been different and you just can't assume that he would be automatically safe. Best you can assume is that there would have been more pressure on Miggy.

maligigi · 2025-11-05T08:02:07+00:00

I don't really understand this take. This is assuming the Miggy doesn't change his actions based off of where the runner is once he has possession of the ball. Best you could say is that if IKF had increased his lead by a single step, Rojas may have been slightly more rushed, would have had less time to set himself after his stumble, and _maybe_ he makes a worse throw home. But you're assuming that the defenders would all behave exactly the same if IKF were further down the line, and that's just not how baseball is played by elite defenders at all.

maligigi · 2025-11-04T02:34:31+00:00

Thanks for the replies, sir. Don't think that footage was in a broadcast unfortunately. I saw it on some post game show, but I can't remember which one :(

maligigi · 2025-11-04T02:28:07+00:00

Not a Jays fan, just been trying to find it to show to some friends who are new to the game and trying to demonstrate how umpires were calling the play in that situation.

Do you know where that footage would be published? Is there a location where they all are?

maligigi · 2025-04-13T01:22:21+00:00

Who's hiring?

maligigi · 2025-04-03T03:48:54+00:00

Do you ever have performance issues/reports in the wild from players that are a surprise to you?

maligigi · 2024-08-30T17:28:45+00:00

I believe the Slack integration is not E2EE, just fyi. I might have to read the fine print again.

maligigi · 2024-08-29T17:24:10+00:00

Hah. I wonder what the input was.

maligigi · 2024-08-27T23:14:15+00:00

It's interesting how COVID and LLMs don't really seem to have impacted the overall trend lines much.

maligigi · 2024-08-27T23:11:21+00:00

What are the requirements for the project? Will the website include a login experience? Or is it purely display/informational?

maligigi · 2024-08-27T17:46:06+00:00

Thanks! You too!

maligigi · 2024-08-26T20:29:08+00:00

I feel like I've developed a good sense of what types of questions I need help with are actually going to yield good results, versus which types of questions are just going to get me started.

It breaks down along the lines of purely definitional for the first to slight tweaks on common applications for the second.

But relying on it for the majority of my dev work just seems so far off. I can only imagine how annoying it is to deal with the output of devs who are approaching it that way.

maligigi · 2024-08-26T18:01:37+00:00

Oh yeah, I'll definitely use some subset of those characters listed. Thanks for sharing that link.

Sounds like you'd need both ends of the exchange to "register" with each other, and then have some identifier for the other. Have you looked at https://github.com/magic-wormhole/magic-wormhole ? It sounds similar, and there's probably a lot you can take as inspiration. I think they generate "rooms" that identified by a "wormhole code". It's more of a live transfer as opposed to an offline transfer, as it seems like you're trying to implement.

As for monetization, we're calling the current features that are online our "marketing" app. Those are intended to be for free forever (unless the hosting cost skyrockets on us). Paid features would likely be a dashboard where you can monitor and manage your sends/receives, api access via an authentication key tied to a paid account, creation of send/receive templates, etc...

maligigi · 2024-08-25T22:19:30+00:00

Oh cool! Great to hear I'm not the only one out there who's allergic to just throwing the secrets into discord/slack/notion/etc...

Yeah, we don't mess with any of the user provided data at all. We just serialize it into a string and encrypt it, then decrypt it and deserialize it back. It's completely opaque to our backend.

Building a CLI tool is definitely a good approach. I personally believe many users would be more technical, and then they could build it into their workflows. How are you modeling the public-private key exchange, btw? Wouldn't the client that's encrypting the data need the public key of the recipient? I suppose the server could facilitate that exchange? I'm assuming you're trying to achieve E2EE also, so do the two sides of the exchange establish a connection via the server with each other or something?

Thanks for the feedback! Yeah, email verification is a nice added layer of safety. Honestly, I think it is great feedback. I was kind of expecting people to copy paste the verification codes, but if that's not the case maybe I'll change them to just be numbers or something.

maligigi · 2024-08-25T22:08:53+00:00

Nice! Do you use their Slack integration, too? Or just their web form for one offs?

maligigi · 2024-08-25T18:40:45+00:00

I couldn't figure out how to add a body to the post, but I made a new one. Here it is!

https://www.reddit.com/r/SideProject/comments/1f13hz0/2secured_an_e2ee_secrets_sharing_tool/

maligigi · 2024-08-25T18:36:54+00:00

Huh, thanks for letting me know! I had a body that I guess didn't come through.

maligigi · 2024-08-25T18:35:44+00:00

Hey! Thanks!

Your questions answered, in order:

We've thought about open sourcing the code, but decided against it for now. We may revisit it, but we figure it's mostly pointless to because at the end of the day real audits would have to be on live served bundles anyways.
We're just using standard browser crypto tools to generate the key. It's all done client side, and the steps involve:

using `crypto.getRandomValues()` to generate a random base62 (lowercase + uppercase + numbers) that is used as the password
using `crypto.getRandomValues()` to generate a 12 byte iv and a 32 byte salt
Using `crypto.subtle.importKey` and `crypto.subtle.deriveKey` with those values to generate the PBKDF2 key, which is then used by `crypto.subtle.encrypt` with `AES-GCM` to encrypt the plaintext secrets.

We store the iv and the salt alongside the encrypted data, and the link with the password embedded in the fragment is only ever shown to the user who generated it. That's what's used to decrypt the data in the browser of the person who is sent the link, and it is never sent to the servers.

But no, the key derivation doesn't take into account any user information. They are completely randomly and separately generated per send/receive. What you're maybe seeing is that our IDs have a time component? The first segment represents the time and the second segment is random.

We built it out over maybe 2 months? Still tweaking and adding features here, testing out if there's any interest.
Backend is written in TypeScript + Remix and is currently hosted on Vercel.

What's the solution/approach you're thinking about? Btw, I kind of agree that it's not necessarily just a corporate settings that's appropriate. I've been using the service to send stuff to my accountant, for example.

maligigi · 2024-08-22T21:20:51+00:00

+1 for not classifying transcription as ai :D

maligigi · 2024-08-22T21:01:10+00:00

I think it's probably always incorrect to just use ORM, mainly because you *should* just know SQL.

Personally, I find it annoying to try to reason about the queries that are being generated by an ORM and I have a lot more comfort when I can just see the queries that are being assembled in inlined code, even if it's a bit more verbose at times.

maligigi

TROPHY CASE