ChrisSD

29 ms·

301.
by ChrisSD 6y ago
You can lie about screen size. If you don't have your browser fullscreen then the browser can claim the screen size is the browser size. The TOR browser handles this by having certain fixed sizes meant for different sized displays so a
302.
by ChrisSD 6y ago
I wonder if something like Ruffle could one day be used to automatically and losslessly convert Flash files into other formats?
303.
by ChrisSD 6y ago
Wishing Apple did something differently does not make it so. Either you accept the stable interface for what it is or you accept your binaries may break. And you've only yourself to "blame" in the latter case.
304.
by ChrisSD 6y ago
> Apple (who broke every Go binary a few years ago) That's a really weird way to phrase it. Apple says that interface is unstable. Go uses it anyway. The unstable interface turns out to be unstable. It wasn't Apple that broke G
305.
by ChrisSD 6y ago
https://support.microsoft.com/en-us/windows/keyboard-shortcu...
306.
by ChrisSD 6y ago
They support C11 and C17.
307.
by ChrisSD 6y ago
See: https://github.com/microsoft/win32metadata#winmd-emitter-ove... It seems at least one of their hacks is not valid in the CLR, so that bridge has been crossed. Plus they do make use of attributes.
308.
by ChrisSD 6y ago
You don't need the msvc compiler to make use of the metadata. You just need something that can read the winmd format.
309.
by ChrisSD 6y ago
A Rust `bool` is not a WinAPI `BOOL`, for one thing they have different sizes. A wrapper function could translate between the two... but even that's not universally possible. Depending on the API, `BOOL` can sometimes have three or mor
310.
by ChrisSD 6y ago
It does not generate safe bindings. Currently the metdata is scrapped from Windows headers which don't have all the necessary information to go that far. In the future the metadata could be improved. The metdata format is the same as u
311.
by ChrisSD 6y ago
Sure! Presumably you're volunteering to track down the current rights holders for all code derived from third parties and will negotiate the relicensing of their contributions?
312.
by ChrisSD 6y ago
Previous discussion: https://news.ycombinator.com/item?id=25829966
313.
Again on 0-based vs. 1-based indexing(hisham.hm)
37 points by ChrisSD 6y ago|34 comments
314.
by ChrisSD 6y ago
Firefox used to have a "scratchpad" for doing code in the browser, albeit somewhat barebones. Unfortunately it was more or less abandoned and eventually removed. It would have been nice to see it expanded instead. A full on node e
315.
by ChrisSD 6y ago
> It's at risk of being forgotten Not by HN at least. It comes up fairly regularly in one context or another. Though usually when someone is bemoaning some aspect of POSIX or Linux.
316.
by ChrisSD 6y ago
Windows includes code from a lot of different companies and places. Sorting out all the licenses would be a major headache (especially as code is refactored/edited) let alone getting agreements from everyone for a new license.
317.
by ChrisSD 6y ago
As you ask for simplicity, I think this can be succinctly summed up as a lack of engineering leadership. I know having completely independent teams is the in thing but there needs to be some high level design and coordination. I'm not
318.
by ChrisSD 6y ago
They don't have to consult stockholders in order to make business decisions. They just have to be honest with them.
319.
by ChrisSD 6y ago
Yeah sorry, I'm just really confused about what's being asked for.
320.
by ChrisSD 6y ago
Right but as a general rule you'll mostly only be using `s.into()` to get a `String` from an `&str`. Or `&s` to deref `String` to a `&str`. I'm not sure why this would require a crate to handle? The other ways are more
321.
by ChrisSD 6y ago
I'm not sure what you mean by conversion between String and &str? To get an owned String from a &str you just use the `into` method, no?
322.
by ChrisSD 6y ago
Nothing much, it's like fighting the sea at this point. Internet comments run on a hype cycle. Firefox had its high relatively recently with the Quantum project. Now it's on the downward slope where everything big and small is not
323.
by ChrisSD 6y ago
Is this not what Linux's Framebuffer can be used for?
324.
by ChrisSD 6y ago
There seems to be some confusion in the comments about the nature of this exploit. This exploit is a kind of sandbox escape. It allow a low integrity process to run code as a medium (aka normal) integrity process. The exploit runs `splwow64
325.
by ChrisSD 6y ago
This vulnerability is about `splwow64.exe`. It's started by the malware but explorer has it on a whitelist that automatically elevates it to medium integrity. It's not running as admin or system.
326.
by ChrisSD 6y ago
This allows you to go from low integrity to medium. So it's a sandbox escape. It won't give you admin if you don't already have it.
327.
by ChrisSD 6y ago
To be clear, Chrome uses it as part of a "defense-in-depth" strategy, but its sandbox does not rely on it. From your link: > So, the integrity level is a bit redundant with the other measures, but it can be seen as an additiona
328.
by ChrisSD 6y ago
The OP was about how pop-sci reports the paper, not the science itself.
329.
by ChrisSD 6y ago
The character count isn't the important point. The point is that there's no way to use a `Option<File>` type as a `File` without first checking for null. And once you do get a `File` you know that from then on it can't
330.
by ChrisSD 6y ago
Essentially people would like to be able to move seamlessly between idiomatic Rust and C (or even C++) without needing any manual intervention. This also would ideally include having an automatically safe API but this may require some glue

More ›