Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Thorrez
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
31 ms
·
601.
▲
by
Thorrez
2y ago
That's a good point. However, I think for the entity to do that in practice, the entity would need to also own the trademark and the Github repo (or wherever development takes place). So there's no real risk to assigning copyright
602.
▲
by
Thorrez
2y ago
>Centralizing copyright ownership in a single entity grants that entity the ability to lock down the project at any time and defeat the copyleft (e.g. Oracle killing off OpenSolaris). I don't understand how copyright ownership of FO
603.
▲
by
Thorrez
2y ago
We should be taxing PFAS. Are there significant health downsides of microplastics?
604.
▲
by
Thorrez
2y ago
I bought a special eco friendly floss that came in a glass bottle. I accidentally dropped it on my tile bathroom floor late one night while flossing and it shattered. Glass is heavier and more breakable than plastic. I'm not sure I wan
605.
▲
by
Thorrez
2y ago
Does Honey get the full amount from the affiliate programs? What if Honey only gets a fraction? Then the merchant might be happy to pay Honey 1/10 of the normal affiliate amount if Honey puts its own affiliate code there instead of som
606.
▲
by
Thorrez
2y ago
>Also CORS and SOP can be bypassed: https://dev.to/pssingh21/websockets-bypassing-sop-cors-5ajm Like I said, you can reimplement SOP by checking that the Origin header equals the Host header. Or alternatively check
607.
▲
by
Thorrez
2y ago
:) I have in fact done that.
608.
▲
by
Thorrez
2y ago
> they totally bypass CORS You can reimplement the Same Origin Policy serverside by checking that the Origin header equals the Host header. Even more secure would be to check both against an allowlist (this protects against DNS rebinding
609.
▲
by
Thorrez
2y ago
Netflix limits FF and Chrome on Windows to 1080p. On Linux it's even worse: 720p. And up through Dec 2023, FF and Chrome on Windows were limited to 720p. That's right, it wasn't until 2024 that Netflix on Chrome on Windows
610.
▲
by
Thorrez
2y ago
I used to sit next to Nate, the founder of cppreference.com . Humble dude. I had no idea he created it until a coworker mentioned "did you know that Nate created a website about C++". I thought cool, assuming it was some small sit
611.
▲
by
Thorrez
2y ago
Apple is a group of people. It's not run by AI. I was specifically talking about the people in Apple who work on the feature and wrote the documentation for the feature.
612.
▲
by
Thorrez
2y ago
I have a hard time understanding that sentence. Organizers of what? The businesses, or illicit tobacco? What does standing over mean? It's not clear to me why standing over would be a motivation for attacks.
613.
▲
by
Thorrez
2y ago
It says "9 hours ago" to me. Is this one of those situations where HN reposted the post and the comments as well? I wish the date and time were kept accurate instead of being confusingly changed.
614.
▲
by
Thorrez
2y ago
>not if you need to access from multiple devices (otherwise, what's the point of this feature?) I don't think the feature works perfectly fine on single device. You take a ton of pictures on your iPhone. You search your photos
615.
▲
by
Thorrez
2y ago
If we make it strict enough to block exfiltration, it'll block the external libraries from loading. So that means we have to load our scripts from the same origin instead of external origins (as jclarkcom suggested). But the whole reas
616.
▲
by
Thorrez
2y ago
Sure, but it's more than a promise that they won't look. Apple currently believes it's impossible to look.
617.
▲
by
Thorrez
2y ago
It sounds like there was an engine out due to a bird strike. The pilot might not have noticed the gear alarm because of the engine alarm.
618.
▲
by
Thorrez
2y ago
But wouldn't the homomorphic encryption prevent Apple's servers from knowing if there was a match or not?
619.
▲
by
Thorrez
2y ago
>regardless of “we promise we won’t look”. AIUI, even if Apple's servers tried to look, they cannot, because of the encryption.
620.
▲
by
Thorrez
2y ago
>The system is essentially scanning for the signature for some known set of images of abuse Huh? The system is scanning for landmarks, not images of abuse. >people will be caught this way Due to the homomorphic encryption, I don'
621.
▲
by
Thorrez
2y ago
Why? The CSP policy isn't setting default-src or img-src. So image loads are allowed from everywhere.
622.
▲
by
Thorrez
2y ago
I don't think the AI removed proper nouns, but rather uncapitalized the proper nouns. It sounds to me like the AI was trying to improve formatting, but instead made formatting worse.
623.
▲
by
Thorrez
2y ago
I don't think that will prevent data exfiltration. Malicious javascript could create e.g. an img element with the data to exfiltrate stored in a query parameter of the image URL.
624.
▲
by
Thorrez
2y ago
According to the Wikipedia article, Google pulled out of Project Maven due to employee protests. Microsoft and Amazon also worked on Project Maven and Wikipedia doesn't mention them pulling out. So I think Google is more anti-Maven tha
625.
▲
by
Thorrez
2y ago
It's possible to walk from Alaska to Russia when the ocean there freezes over. Russia won't be happy if you do that though.
626.
▲
by
Thorrez
2y ago
Reminds me of Karl Bushby, who's walking from Chile to England. He made it to at least Kazakhstan so far. https://en.wikipedia.org/wiki/Karl_Bushby
627.
▲
by
Thorrez
2y ago
There seem to be some problems with resizing windows. In the "Highlighting" example, half the time when I click the grab area in the bottom right corner, my diagonal arrow mouse immediately switches to a vertical arrow mouse, so I
628.
▲
by
Thorrez
2y ago
>He had more than 26 things to encode Ok, then hoten's comment had an error which propagated to my comments: >26 division of a circle was too much for reliable determination of which sign the camera was pointing at
629.
▲
by
Thorrez
2y ago
I didn't say it needs to be sent 2 digits at a time. The points of my previous comment: * Ascii is only needed if we need to encode things other than just letters (or if case matters). * Hex is only better than decimal if hex allows th
630.
▲
by
Thorrez
2y ago
You can't represent 26 possibilities with a single hex digit. So it'll require 2 hex digits. If you're going to require 2 digits, then that can be done with 2 decimal digits as well. So there's no need for hex, and no ne
More ›