Nitramp

20 ms·

151.
by Nitramp 10y ago
No, it's fully compatible.
152.
by Nitramp 10y ago
It's a bit more complicated. Yes, Angular itself is fine, and there's no problem with escaping or eval'ing per se. However there is a corner condition in which Angular being present in an extension might weaken some security
153.
by Nitramp 10y ago
Hey. I work on security for Angular. > It's probably possible to sanitize all external inputs used in the browser extension such that privilege escalation isn't possible, but the Angular team has tried hard with their sandbox s
154.
by Nitramp 10y ago
To test a distributed system, there's not a lot of value to simulate all the many different conditions that can happen on a machine. From the system's perspective, you don't really care what happens on a single computer. The
155.
by Nitramp 10y ago
I wrote this extension a long time back: https://chrome.google.com/webstore/detail/docomplete/onlplld... It removes "autocomplete[off]" from all input elements.
156.
by Nitramp 10y ago
You could imagine that owners of a more expensive car are more likely to use the original dealer for most repairs, and only seek a third party shop for very expensive repairs. Which, depending on methodology, might skew Your Mechanic's
157.
by Nitramp 10y ago
These statistics here are collected by the semi-government run German technical control organization. Every car in Germany has to be checked by them every ~two years to be allowed in traffic. http://www.anusedcar.com/ This
158.
by Nitramp 10y ago
> Almost assuredly the answer is yes. [citation required]. Google goes through great lengths to make sure that's not the case, both technically with legal defense against overreaching subpoenas.
159.
by Nitramp 10y ago
It is fully deleted.
160.
by Nitramp 10y ago
One thing many people underestimate is how easy it is to run into XSS, XSRF, XSSI when not using a framework, in particular XSS when using native DOM APIs ("location.href = ..." - pwned. "e.innerHTML = ..." - pwned. &quo
161.
by Nitramp 10y ago
Not sure about Canada, but the whole story usually is that people with lower social class/backgrounds commit crimes more often, and that aboriginals/black people/foreigners/... etc are overrepresented in that group. Once
162.
by Nitramp 11y ago
> goes against the Unix philosophy of "root can do anything." I don't think that's a useful perspective here. This is not a feature - nothing should ever want to permanently brick a motherboard, there's no use ca
163.
by Nitramp 11y ago
I see that the exact other way around. With other languages, every project decides on their weird local directory layout for no good reason at all, and then everyone has to write build scripts to keep things working. Learning from C++ build
164.
by Nitramp 11y ago
If other companies in the space are an indication (e.g. AdBlock Plus), "intrusive ads" are defined as ads that don't pay them, but somebody else.
165.
by Nitramp 11y ago
The document you link to is not about Hotspot, it's about Oracle's Java ME VM, which is a different product from all I can tell. It doesn't mention the term "Hotspot" at all.
166.
by Nitramp 11y ago
pjmlp: original poster above referred to Hotspot, not arbitrary JVMs. Clearly Android devices can run VMs with both JIT and AOT (they do, after all), what OP questioned was whether Hotspot in particular (not some arbitrary VM) is a good V
167.
by Nitramp 11y ago
Experienced readers of alphabetic languages recognise words by pattern matching their shape. That is, you do not individually decipher the characters that make up a word, but you pattern match on (mostly) the ascenders and descenders, and t
168.
by Nitramp 11y ago
Angular 2 is the framework for Google's AdWords products. So it's core to how Google makes its money.
169.
by Nitramp 11y ago
That doesn't work. We the people have invented these authorities a long time ago precisely because we the people suck at making individual decisions to improve global outcomes, and we need to organize ourselves in institutions such as
170.
by Nitramp 11y ago
We're super happy with TypeScript in Angular, it's working great for us, and having the option (!) to easily use it will be great for Angular users. A note on all the praise for type inference: local type inference is super cool a
171.
by Nitramp 11y ago
Maybe of interest: this is (amongst others) by Jeff Dean, famous for Bigtable, Map Reduce, Spanner, Google Web Search, Protocol Buffers, LevelDB, and many, many other things. He's a Google Senior Fellow, but also doubles as the patron
172.
by Nitramp 11y ago
Swing didn't have baseline alignment until Java 1.5 iirc, so you couldn't put a label next to a text box without it looking dorky. And the controls felt slightly uncanny on every platform. No thanks, wouldn't buy again.
173.
by Nitramp 11y ago
I think he does not do a good job of analyzing the value proposition of "freedom" in this context. Freedom definitely is a value by itself, but he just posits and accepts that being a contractor gives you more freedom than being a
174.
by Nitramp 11y ago
> Seriously, I'm quite surprised that basic URL handling is still a problem. Making a game to bring this to the attention of a wider audience is certainly a good idea. I think the problem is that a spec exists, but existing browser
175.
by Nitramp 11y ago
Yes, but that's a good thing. .d.ts files are reasonably straightforward to write (the external vs internal module thing is the exception), and easy to share on DefinitelyTyped. But that only happened because TypeScript requires .d.ts
176.
by Nitramp 11y ago
Yes, you sync you workspace to a particular revision and work within that. Syncing is a manually triggered process. And generally speaking, people changing APIs are required to find and fix all users (which isn't that hard with the inf
177.
by Nitramp 11y ago
What's particularly worrying to me is that the US government has repeatedly applied very odd standards in cases like these. E.g. for a long time, government agencies upheld that they were allowed to read anybody's email without ev
178.
by Nitramp 11y ago
Google has self driving cars, YouTube, various Android apps, and web search in the same repository. That does seem a lot more varied at the first look than e.g. OpenStack, and different products certainly have extremely different release cy
179.
by Nitramp 11y ago
My point is that the advertised separation of frontend and backend using stored procedures in your database can be a huge misfeature - it requires a lot of management and rigor to maintain a compatible API interface that allows that kind of
180.
by Nitramp 11y ago
I'm sure you'll further improve this, good luck! The single deployable server you advocate is a single point of failure. I'm not talking about a deployable server, I'm talking about a deployable as a unit of deployment

More ›