Adam P

Adam P Chaiken, Clinical Social Work/Therapist, Merrick, NY, 11566, (516) 219-9854, You didn

Getting the length of a string seems simple and is something we do in our code every day. Limiting the length of a string is also extremely common in both frontend and backend code. But both of those actions - especially length limiting - hide a lot of co

While reviewing a co-worker's results-paging design I realized there was a bug in some paging code I wrote 1 a few years ago. It's unlikely to manifest and kind of subtle, but I thought that describing it here might be useful to others writing such code (

These are some parenting tips/tricks/techniques that I'm capturing for a friend. I'm not pretending that the ideas are good or unique or will help anyone other that me, but… maybe? My frame of reference: I have one 8-year-old son, healthy and neurotypical

Here's a quick-and-dirty explanation of why two-factor authentication is good, and why U2F/WebAuthn keys (like YubiKeys) are better than the alternatives. (So I have something to point friends and family at.) Note that when I use the word "attacker", I do

We all know by now that the leftmost values in the X-Forwarded-For header can be spoofed and only the rightmost IPs - added by your own reverse proxies - can be trusted. The Forwarded header ( RFC 7239 , 2014) has that same problem, and a new one: If the

When I first saw this machine in the doctor's office (waiting, bored) I thought the duplication of the labels - especially on the power button - was silly. Then I realized that I was being Anglo-centric and that having both enables use by more people, in

There have recently been three different (but related) contexts where I have asked or been asked that question: When a reverse proxy is adding the client IP to the X-Forwarded-For header. When the client IP is being used for rate limiting. When checking i

Update 2022-03-23: Matt Layher created a Go issue about this. Update 2022-04-14: In response to that issue, two weeks ago a change was committed to Go that makes netip.ParsePrefix behave like net.ParseCIDR : they both return an error when a zone is presen

## Summary This post ended up being incredibly long comprehensive. I'm afraid that many people won't read enough to get everything that's important, so here are the key points: When deriving the "real client IP address" from the X-Forwarded-For header, us