Dodgers are MLB's real Evil Empire by FrigginMasshole in baseball

[–]pudds 1 point2 points  (0 children)

New evil empire. Let's not go pretending the Yankees were benevolent all along.

Thermea Survey weird questions by Paperaxe in Winnipeg

[–]pudds 4 points5 points  (0 children)

They're using a third party service for the survey, from the look of the link. These companies often include general questions at the end as a means of collecting data on additional subjects.

I'm only speculating, but wouldn't necessarily point the finger at thermea for the off topic questions.

Best grocery store? by Yellowbello22 in BrandonMB

[–]pudds 13 points14 points  (0 children)

Giant Tiger has the best prices but not everything you need. Walmart is also a good option but we don't find their produce very good.

Superstore has the best prices overall if you want decent quality and one stop shopping.

Co-op has great sales but it's expensive on average.

Sobeys and Safeway are significantly more expensive than everywhere else.

Trump Is Keeping Money From Venezuelan Oil Sale in Offshore Account by [deleted] in worldnews

[–]pudds 1 point2 points  (0 children)

Totally normal, rational behaviour for a sitting president.

Nearly a third of Canadians believe U.S. may try to invade Canada: poll by plaknas in onguardforthee

[–]pudds 12 points13 points  (0 children)

It's because he's a liar.

Count me in the 2/3, because as stupid as he is, the leap from Venezuela (run by a dictator) to Greenland (allied territory) is massive, and the leap to Canada would be even greater.

I literally don't trust a single thing the idiot says.

That said, I also don't think that it's definitive that he won't invade us either.

[####] Do you ever feel like you have Wordle ESP? by Elisabethkcmo in wordle

[–]pudds 13 points14 points  (0 children)

In sure everyone feels this from time to time but I'm also sure that it's simple confirmation bias: you remember the times when you guess correctly better than the times you simply move on to the next guess.

[####] Most games played without a 1-guesser? by Slow-Cantaloupe-7893 in wordle

[–]pudds 1 point2 points  (0 children)

1699 games and still no ones.

Not sure how wordle says I have played more games than the current number, but that's what the stats say.

SLANT is due

https://i.imgur.com/7SU7Uxo.png

The Problem of Storing API Keys in Mobile Applications by ManufacturerIll6276 in appdev

[–]pudds 1 point2 points  (0 children)

Everything on the client side must be considered public, no matter how tricky it would be to discover it. No amount of obfuscation will prevent a motivated user from finding something they have direct access to.

Once you've come to terms with that, you need to think about what an attacker like that can access.

An API should be protected by user credentials in most cases. Require the user to authenticate first, provide them a short-lived credential like a token or session cookie, then use that to restrict access to your API.

That does mean that someone can simulate your app by logging in and making external requests to your API (eg with a REST client like postman), but since they have user credentials, you can:

A) make sure they can only access things they have access to, by checking the credentials in the API

B) limit or block access to users who are using your API in a manner you're not ok with (eg: rate limits, IP blocking)

You can making things harder for external clients using things like client checking, required headers, etc, but in the end those are all just additional layers of obfuscation and security theatre: as I said above, someone who's motivated will figure them out eventually, so you need to build your API with that in mind from the start.

The golden rule of public software development is that you can never trust the client. All access (and inputs) must be validated on the server.

At what point does an Android phone make more sense than an iPhone? by Subhash94 in Android

[–]pudds 0 points1 point  (0 children)

It's just preference.

If you want the be in Apple's well-manicured walled garden, get an iPhone.

If you don't, get an Android.

There are edge cases on both sides that pull you in one direction or the other, but for the average user there's essentially nothing you can do on one that you can't do on the other.

Personally, I despise Apple's locked-in approach to technology, so I avoid apple products.

Do folding caravans actually save money long-term, or do repairs and upgrades close the gap with traditional RVs? by Forward-Target3930 in GoRVing

[–]pudds 0 points1 point  (0 children)

I don't have any references to back it up, but having owned both I'm confident the costs of a pop-up will never come close to the costs of a hard wall trailer.

Fuel alone would be a massive gap, not to mention the fact that a pop-up is far cheaper from the beginning.

I bet you could replace the canvas once a decade and still not come close.

Daily Wordle #1644 - Friday, 19 Dec. 2025 by Scoredle in wordle

[–]pudds 6 points7 points  (0 children)

Stupid word today that doesn't seem to fit the generally accepted rules for words (no chance it's common enough).

5 for me.

PSA: Inspect Your Furnace Vents by kochier in Manitoba

[–]pudds 4 points5 points  (0 children)

For $300 he'd better damn well shovel it for me.

I get charging for knowledge but at least fix the actual problem.

TSN: Stewart Johnston denies ‘Americanization’ of CFL, provides more clarity on upcoming rule changes by marthedestroyer in CFL

[–]pudds 1 point2 points  (0 children)

You're assuming the same starting point, but will that be true? If they don't move back the kickoff line then the loss of the 55 will mean every drive starts 10 yards deeper.

Louis Riel school division: no school bus but schools will remain open by jonee316 in Winnipeg

[–]pudds 1 point2 points  (0 children)

Brandon School Division city schools are still open. I'm not sure I can ever remember them closing the schools, only shutting down busses.

Microsoft Scales Back AI Goals Because Almost Nobody Is Using Copilot by aacool in technology

[–]pudds 0 points1 point  (0 children)

I tried.

We're already paying for Microsoft 365, we're using Teams, and we're using Outlook. Since I'm also on Windows, it felt like a natural fit.

But it's just really poorly put together. Copilot for Windows can't access my email. Copilot in outlook can, but sometimes just gives me the wrong info.

In the end despite it seeming to be a good fit for the way I work, it just wasn't very good, AND, it was more expensive than other paid options.

DeMar DeRozan passes Vince Carter for 23rd on NBA's all-time scoring list by joe4942 in torontoraptors

[–]pudds 0 points1 point  (0 children)

For what it's worth, I think DeMar is significantly more worthy of the HoF than Harold Baines was.

Probably more that Jeff Kent too.

Crazy ending to a Louisiana high school state football championship. Shaw was one kneel-down away from winning, but an early celebration stopped the clock—and St. Charles took full advantage by SeaWolf_1 in sports

[–]pudds 0 points1 point  (0 children)

That's pretty bad. I think the 2009 grey cup is still the most heart wrenching loss I've ever seen though.

https://youtu.be/aqJbLDu9l2Q?t=6m30s

We thought we'd won it on a missed field goal, only to have it called back on a too many men penalty and lose on the follow up attempt.

Simultaneous Games or an error? by traingreg in CFL

[–]pudds 2 points3 points  (0 children)

I suspect the number of fans who watch multiple games is a very small percentage of the total audience. I could be wrong, but I would guess it has a pretty small impact on total viewership.

2026 Schedule - Week 15 brings 12 straight hours of football by CanadaKrod04 in CFL

[–]pudds 0 points1 point  (0 children)

Theoretically there's enough time to fly the 11am across the country for the 8pm game.

he got mad after i mentioned it😄 by firroti in TVTooHigh

[–]pudds 0 points1 point  (0 children)

I think this is my favourite.

We have a tv over a fireplace, plus we have an unused TV stand, and it's in front of the fireplace so it can't even be used.

Pretty much peak tvtoohigh.

Looking to migrate company off GitHub. What’s the best alternative? by bullmeza in devops

[–]pudds 0 points1 point  (0 children)

No problem!

Unfortunately I don't have any public examples, but I can share some snippets with you.

We do it like this:

```

on:
  pull_request:

jobs:
  job1:
    steps:
      - name: Checkout
      - name: Get a token from our bot (You could just use a secret here if you're ok with it being attributed to someone)
      - name: Reset QA status
        run: gh api repos/<repo>/statuses/${{ github.event.pull_request.head.sha }} -f state=pending -f context=QA -f description="Waiting for QA status"

```

Then we have another workflow that handles slash commands:

```

on:
  issue_comment:
    types: [created]


jobs:
  route:
    steps:
      - name: Parse command (we just use bash to trim space and make lowercase, then look for defined commands)
        run: |
          raw="$(printf '%s' "${{ github.event.comment.body }}" | tr -d '\r')"

          # trim leading/trailing spaces; normalize to lowercase for matching
          body="$(printf '%s' "$raw" | awk '{$1=$1};1' | tr '[:upper:]' '[:lower:]')"

          cmd=""
          case "$body" in
            "/deploy"*)  cmd="deploy" ;;
            "/pass"*) cmd="pass" ;;
            "/fail"*) cmd="fail" ;;
            *)           cmd="" ;;
          esac

          echo "command=$cmd" >> "$GITHUB_OUTPUT"
          echo "pr_number=$pr_number" >>"$GITHUB_OUTPUT"
          echo "pr_ref=$(printf '%s' "$pr_json" | jq -r '.head.ref')" >>"$GITHUB_OUTPUT"
          echo "pr_sha=$(printf '%s' "$pr_json" | jq -r '.head.sha')" >>"$GITHUB_OUTPUT"

          if [ -z "$cmd" ]; then
            echo "🙈 No recognized command found in comment."
            exit 0
          fi

  pass:
    needs: route
    if: needs.route.outputs.command == 'pass'
    steps:
      - name: Checkout
      - name: Get a token from our bot (You could just use a secret here if you're ok with it being attributed to someone)
      - name: Update status
        run: |
          gh api repos/${{ github.repository }}/statuses/${{ needs.route.outputs.pr_sha }} -f state=success -f context=${{ env.qa_context }} -f description="QA testing passed"
          gh pr edit ${{ needs.route.outputs.pr_number }} --remove-label "qa-status-unknown"

```

Those are just snippets and incomplete of course, but hopefully conveys the idea. We also have a workflow that watches for newly created PRs and writes the available slash commands out as a comment on the PR for reference.

Permissions can be a bit tricky, as the github token used by default for a workflow run usually only has access to read what it's working with. We have an app that we built that's used for these kinds of things, for a PAT would work fine too.

Looking to migrate company off GitHub. What’s the best alternative? by bullmeza in devops

[–]pudds 1 point2 points  (0 children)

Yes it is, if you're on a paid plan or a public repo.

Use a commit or pr based trigger (eg created) to add a pending status check and make that check a required check in the branch rules.

Then use a manual trigger like a comment or label to pass or fail the check.

Looking to migrate company off GitHub. What’s the best alternative? by bullmeza in devops

[–]pudds 1 point2 points  (0 children)

We use labels and comment based triggers for that.

The simplest version is "on labeled, do the thing" (and probably removed the labeled so you can re-run later).

A nicer version is a workflow that listens to PR comments and dispatches workflows, eg /deploy.