ChrisSD

79 ms·

871.
by ChrisSD 7y ago
Has this theory been tested in similar cases at all or is it entirely untested ground? Is this perhaps what mingw and WINE did?
872.
by ChrisSD 7y ago
I didn't know what to expect which is why I asked the question. Microsoft is much more friendly towards the open source community than in times past and the header files only define the API not the implementation of it. So it wouldn&#x
873.
by ChrisSD 7y ago
Ah, it seems very restrictive beyond developing Windows programs internally. Right to Use and Distribute. The code and test files listed below are “Distributable Code”. * REDIST.TXT Files. You may copy and distribute the object code f
874.
Ask HN: What is the license for Windows header files?
38 points by ChrisSD 7y ago|18 comments
875.
by ChrisSD 7y ago
The article I linked to gives 1794 as an example of using singular they to refer to a specific person. And as it also points out, there's nothing particularly unusual about using they in the context of a specific person as well as bei
876.
by ChrisSD 7y ago
Considering singular they has been in common use for centuries[0], changing it now would be an uphill struggle. People have used words like "ze" but they haven't caught on. [0] https://public.oed.com/blog&#x2F
877.
by ChrisSD 7y ago
Because they already have the run of the user's profile. Why add additional complexity for less access?
878.
by ChrisSD 7y ago
I'm just surprised that file:// works better (when it's allowed).
879.
by ChrisSD 7y ago
Does`python -m http.server 8000` not work for local development?
880.
by ChrisSD 7y ago
Sure but you can get much more if you use a more exploitable file type in the first place. Why would you willing jump back into a browser's sandbox when you've just persuaded the user to bypass it entirely?
881.
by ChrisSD 7y ago
Perhaps this should be addressed but the fact it requires the user to download and open a file means it's of limited use to attackers. If you can persuade a user to do that then you needn't bother with browser exploits to get acce
882.
by ChrisSD 7y ago
Yes the machine can do those things, you're right. If that's all you meant then sure the abstraction is enough. But you can learn those broad concepts using Python if you want to. However, what the machine is actually doing can di
883.
by ChrisSD 7y ago
It's not a case of parts being out of date. It's the C abstract machine that is a different model to the machine's. More specifically, C was designed in the PDP-11 era. Hardware has evolved since then which makes it a poor ch
884.
by ChrisSD 7y ago
I find assembly is better for that. The trouble with C is the model it uses is 30 or 40 years out of date by now. Computers have changed a lot in those years.
885.
by ChrisSD 7y ago
I understood this to be more a journey in discovering languages than a direct comparison. Personally I found it interesting to see how someone used to high level languages (like Python and Go) adapt to using Rust for a project.
886.
by ChrisSD 7y ago
That seems old, especially as error-chain is no longer maintained so I wouldn't recommend it. [0]: https://users.rust-lang.org/t/error-chain-is-no-longer-maint...
887.
by ChrisSD 7y ago
Is this about BoringSSL or The Boring Company? There's so many new and exciting boring technologies to follow that it's hard to keep track.
888.
by ChrisSD 7y ago
Even with ASOP it tends to be more of a code dump than an open source development process. If you're an OEM you get to see it earlier in development (and get to dump your own OEM patches in there) but for most people the actual develop
889.
by ChrisSD 7y ago
The submission title has now been changed to better reflect the content so my comment no longer applies.
890.
by ChrisSD 7y ago
On the client side I've been living with my browser set to accepting a minimum of v1.2 without issue for a long while, aside from the odd random page found in search but that's no loss. I just recently tried bumping it up to the n
891.
by ChrisSD 7y ago
Indeed the title is wrong though I can see how someone could get confused. These are all "recommend" configurations depending on how bleeding edge (or not) you want to be. But intermediate is the recommended of the recommended con
892.
by ChrisSD 7y ago
The majority doesn't have to but journals should. The majority will pick it up if and when someone has proven its utility above and beyond current techniques. However, it should be noted that most "radically new" ideas are ne
893.
by ChrisSD 7y ago
They already have an adblocker built in (well a tracking blocker but that often amounts to the same thing).
894.
by ChrisSD 7y ago
It is possible to restrict ads using CORS headers, sandboxed iframes and cross origin restrictions. However this is rarely done effectively. Often the ads have a ridiculous level of access.
895.
by ChrisSD 7y ago
Comment collapsing is a useful feature. The problem with giving the largest weight to the most upvoted comment is it also gives a large weight to all replies (unless they're heavily downvoted). It's useful to be able to skip those
896.
by ChrisSD 7y ago
Unless you're using Python where exceptions occur every time you finish looping. https://docs.python.org/3.7/library/exceptions.html#StopIter...
897.
by ChrisSD 7y ago
Again, I was talking about Docker's initial security considerations. I think it wasn't until about 1.10(?) that it got user namespacing.
898.
by ChrisSD 7y ago
Yep. And it's not necessary for a language to be pure to get that benefit on a per method basis. Rust is OOP but you define in the method signature whether or not that method mutates state. So if a method has the signature that include
899.
by ChrisSD 7y ago
Aye they did a lot of work after people responded to its lack of isolation. My point was that was not a focus initially.
900.
by ChrisSD 7y ago
It would be fairer to say they weren't initially trying to provide a security layer. More like an alternative packaging system that was distro independent. The idea was that such a packaged system should be doing all the security thing

More ›