Etzos

12 ms·

61.
by Etzos 10y ago
I think the bigger problem is that people on bicycles don't always obey the laws which are in place to protect both them and motor vehicle drivers. The parent mentioned cyclists who run through traffic lights and similar infrastructure
62.
by Etzos 10y ago
You seem to be splitting hairs and I'm not entirely sure why. Following the flow of conversation it should be pretty easy to infer the parent was referring to programming languages. Originally you said you don't think there should
63.
by Etzos 10y ago
Ha, thanks for pointing that out. You're obviously correct about it being a command dispatch framework. I've only ever used it as an interface to build and never realized what it actually did behind the scenes. And after reading a
64.
by Etzos 10y ago
In addition to their sites (which have already been mentioned), their build tool "mach" uses Python[1]. [1] https://developer.mozilla.org/en-US/docs/Mozilla/Developer_g...
65.
by Etzos 10y ago
I can't think of any scenario when one would be relying on a specific structure being in the node_modules/ directory. And if there is such a need, then it's likely the code is doing something very strange or very special in w
66.
by Etzos 10y ago
One certainly does not need to implement a parser, just use one of the many available. As the sibling here pointed out the time it would take to parse and walk the AST is negligible compared to the downloads happening.
67.
by Etzos 10y ago
I'm not sure how this could happen as one shouldn't be depending on the directory structure in the node_modules/ folder anyway. Do you have an example of where this might cause issues?
68.
by Etzos 10y ago
It has to open and read a .js file already, it can certainly turn that into the representative AST for said file and then use the data from that. It will be slower, but it will also be more accurate and less likely to turn up false positiv
69.
by Etzos 10y ago
You actually said it yourself without realizing it: because it's single process but multi-threaded.
70.
by Etzos 10y ago
I agree that many times conversation here gets sidelined by the distraction of complaints about a project's name. Usually because a piece of software has a name used by another older piece of software or a program or something of that
71.
by Etzos 10y ago
I think the issue I have is that the author is taking an all or nothing approach. Either something is all wrong and a larger discussion must be had or nothing is worth noting. There is a huge range of things in between there, many of which
72.
by Etzos 10y ago
But there are ways of eliciting critical thought about the choices made and even about alternatives that the person in power has. It is "bad communication" in that the person in power is communicating their desire in a way that is
73.
by Etzos 10y ago
I think this is the crux of the issue. The author's examples seem to have the sound of authority because they are coming from a person of authority. There are however, ways around this. For example, using the first quote the author u
74.
by Etzos 10y ago
The checksums and PGP signature are on the HTTPS page which links to all the downloads. You have to trust that page from the start no matter what (or establish the PGP signature trust from other ways, which is quite possible just far more i
75.
by Etzos 10y ago
If the source server is compromised then nothing can help you. All source links can be changed to something malicious and all verification methods can be different to match the ones of the bad file. If the source server is compromised there
76.
by Etzos 10y ago
I don't think the table really covers the everything quite well enough. In reality it doesn't really matter if the download is over HTTP or HTTPS as long as you can safely verify that the file you have is indeed the correct file.
77.
by Etzos 10y ago
Wow, I completely missed that (largely because I assumed a Go implementation could not guarantee constant time), sorry about that and thanks for looking deeper than I did. On that note, how much of a guarantee is there in the Go implementat
78.
by Etzos 10y ago
I was actually at this talk (excellent way to go over this kind of topic!) and I have just a small thing to add. You'll notice the "Asymmetric Signature" section mentions using ESDSA on P-256 because "the Go implementati
79.
by Etzos 10y ago
A quick search turns up that it is indeed a Firefox bug and not a bug in the spec[0]. Honestly it is very disappointing that such an obvious issue has been left open for so long. This is part of a very old spec and that any browser doesn&#x
80.
by Etzos 10y ago
You'll notice that list includes US/Eastern which links to America/New_York as the correct "standard" for that timezone. Edit: Just want to clarify that "Eastern" and others are indeed on that list and eve
81.
by Etzos 10y ago
I can't comment about the IE situation but the page looks nearly identical in Chrome for me. I don't see any alignment issues at all actually; the text is supposed to sit just to the left of the center of the page.
82.
by Etzos 10y ago
They are actually already doing this[1]. [1] https://github.com/mozilla/positron
83.
by Etzos 10y ago
Actually... There's a specific exemption for this kind of thing[0] on Google Play. [0] https://play.google.com/about/monetization-ads/ Edit: Relevant section: "Developers . . . must use Google Play In-ap
84.
by Etzos 10y ago
Was it really a potshot at Go? Maybe I read it incorrectly but what I thought was being said was that all the "modern" features that Julia/Python/other newer languages have are not available in Go (think stuff like list
85.
by Etzos 10y ago
Saying that the earth orbits the sun is actually a bit more than just a choice in reference frame. When you have two bodies (or more, although it gets more complicated) orbiting where one is significantly larger you can end up with a cent
86.
by Etzos 11y ago
In order to cause enough damage to need this kind of backup system it would have to be huge. Something of that magnitude would also cause similar (if not more immediately catastrophic) problems for a dam or even wind turbines. Making the po
87.
by Etzos 11y ago
No power generation facility is passively safe for an extended period of time. Solar panels will leech harmful chemicals into the environment if they sit long enough. Coal plants will degrade and leech. Dams will degrade and fall apart. So
88.
by Etzos 11y ago
There are risks associated with all kinds of power generation. Most of the things you list would apply to a lot of them. However, I'll attempt to address most of the ones you listed (and I'm assuming a boiling water reactor, there
89.
by Etzos 11y ago
It's very easy to say that one can filter out certain things, but in practice I think it's far more difficult. Especially in Tor's case where the goal is to provide truly anonymous access. Do you have a proposal for filtering
90.
by Etzos 11y ago
I personally turn invisible characters on so mistakes like that are a bit harder to make. Along that line of thinking, the code should probably be reviewed by at least one other person before being officially committed, so one would hope th

More ›