AgentME

89 ms·

961.
by AgentME 7y ago
This paragraph mirrors something I'd been thinking for a while: >For a relatively new class of consumer-products start-ups, there’s another method entirely. Instead of making sense of a sea of existing stuff, these companies claim t
962.
by AgentME 7y ago
Those are bad examples because they both run unsandboxed. The recent CPU vulnerabilities aren't uniquely bad for Javascript specifically. They're bad for wanting to run unprivileged code. Javascript in regular web pages just happe
963.
by AgentME 7y ago
Memory unsafe languages are already the perfect generator of exploitable bugs with how easy they are to make exploitable mistakes in. Few exploits need more explanation than that. (It would be interesting if the popularity of memory unsafe
964.
by AgentME 7y ago
In the robot repair demo in Valve's "The Lab", when GLaDOS shows up, she's menacingly huge. It was never noticeable to me in the non-VR games, but it's the same model. I instinctively physically flinched away to pro
965.
by AgentME 7y ago
You can't do arithmetic with numbers and bigints, so when would you ever accept a parameter that could either be a number or a bigint? The places that `typeof a === `number` || typeof a === 'bigint'` could be used seem rare
966.
by AgentME 7y ago
I find the video super interesting to watch. It's not like previous Mario bots I've seen that were programmed with path-finding and a go-right goal which race through the level perfectly. Instead, this makes me think of a very you
967.
by AgentME 7y ago
CSP would only be necessary if the SRI-covered stuff had bugs that let it accidentally load unverified resources. (To be clear, I think CSP is a necessary defense-in-depth measure for everyone, but this case doesn't uniquely require it
968.
by AgentME 7y ago
Cloudflare is an extremely-common service that does SSL-interception on tons of websites. If I hosted a website (with some kind of user-messaging functionality) on Cloudflare, and I trusted Cloudflare to not modify the data that went throug
969.
by AgentME 7y ago
The only case that obfuscating code from the user is useful for is DRM. That's not what end-to-end encryption is about. End-to-end encryption is about allowing two users to send messages to each other using keys of users that each user
970.
by AgentME 7y ago
UE4's pricing model is a lot like Unity's pricing model nowadays as far as I can tell.
971.
by AgentME 7y ago
Personally, I think it's possible that abiogenesis is so rare that we are the only life within the observable universe. I don't know if that's more or less depressing.
972.
by AgentME 7y ago
Different groups of people get along because we're all still human and very similarly culturally and understand each other's desires and goals. Things start going badly when there's major social and technological differences.
973.
by AgentME 7y ago
I'm going to make a wild guess that it was more than that, given that they were the type of person to harass the conference organizer after the fact.
974.
by AgentME 7y ago
Why does he care what the sponsors think? His problem would be solved if he stops paying attention to Twitter, his sponsors, money, friendships, etc... /s
975.
by AgentME 7y ago
The account still is up. They just deleted their tweet.
976.
by AgentME 7y ago
The official names of the different versions are "Java Edition" and "Bedrock Edition". Java Edition is the one that lets you run your own server, is more moddable, and works on Windows, Mac, and Linux. Bedrock Edition is
977.
by AgentME 7y ago
I meant that a datetime string is generated from the combination of a Unix timestamp and a timezone together, not that it lossily retains both of those inputs. For example, if I want to show the time of day of an event like "3:12 AM&qu
978.
by AgentME 7y ago
The article's assertion that Unix time treats days as 86400 appears correct to me. Both Python and Javascript report 12-01-2019 UTC as the Unix timestamp 1575158400, 12-01-2000 UTC as Unix timestamp 975628800, and the difference betwee
979.
by AgentME 7y ago
Isn't this the opposite of what the article says?
980.
by AgentME 7y ago
I think that's a better way of putting it. The main lesson is that there's no operation called "changing the timezone of a Unix timestamp", and any code trying to do that is wrong. A date string is a function of a Unix t
981.
by AgentME 7y ago
I think it's a common misunderstanding worth bringing up here that probably affects more people than the falsehoods listed in the article. On roughly 3 out of the 4 times I've had a coworker run into a timezone issue (different pe
982.
by AgentME 7y ago
In your case, you're not doing the specific thing I prohibited. I only meant you should never do arithmetic on a timestamp to try to "convert" it to an equivalent representation of the same instant (as Java 8 defines it) in a
983.
by AgentME 7y ago
Here's a falsehood I've seen a bunch of times: the idea that Unix timestamps need to be converted to your local timezone. Unix timestamps are the number of seconds since a specific date in a specific timezone (UTC)! If a user give
984.
by AgentME 7y ago
"XSS" usually refers to the vulnerability that happens when user input is treated as HTML and shown on a site in a way that allows the user to inject javascript, not the general practice of a site author intentionally adding a &lt
985.
by AgentME 7y ago
The issue isn't that someone can force you to vote a certain way or check that you voted in some way. The issue is that someone can make it outrageously convenient for you to make a whole set of uninformed votes. Imagine you're ve
986.
by AgentME 7y ago
>But you're probably a troll, because a real Linux user would actually make a useful complaint. I thought it was clear enough that my complaint is that there's no button in any of the settings screens to disable middle-click pa
987.
by AgentME 7y ago
Clementine is ridiculously laggy for me and uses a lot of CPU, even when idle. Maybe I have too big of a music collection for it? I'm baffled. I've never had performance issues from a music player before. SMPlayer's homepage
988.
by AgentME 7y ago
That would make the list of supported video codecs a better fingerprinting mechanism.
989.
by AgentME 7y ago
I accidentally middle-click paste into terminals all the time while scrolling. I would love to just disable middle-click paste in Linux. Juggling two different clipboards with different behavior is terrible. If it were a good idea, some oth
990.
by AgentME 7y ago
Unless he had said otherwise, I'd think "it all went to me" is the default for the entirety of funds sent to him on a donation page on his own site with his name on it. Maybe he could have been more explicit that it was a sal

More ›