Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
altfredd
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
10 ms
·
91.
▲
by
altfredd
7y ago
Facebook and Twitter timelines are bad examples. There is no reason to avoid indexing by date and those services do in fact index by date. Those services may even be able to use custom database engines and build excellent date-based paginat
92.
▲
by
altfredd
7y ago
Unfortunately, the "so long as they are stable" constraint is incompatible with idea of mutable database backend. SQL pays massive performance price for OFFSET and it's results are still neither fast nor stable.
93.
▲
by
altfredd
7y ago
eval() has no economic purpose. It hasn't been removed by browsers purely because that would break backward compatibility. Non-same origin Javascript does not have economic purpose either. I believe, that it will be completely eradicat
94.
▲
by
altfredd
7y ago
That's a bold demand, considering that majority of free games in Play Store monetize themselves via partner installs. For all we know, developers of involved apps are paying a "legit" advertising company for installs, and mal
95.
▲
by
altfredd
7y ago
I imagine, that ASLR uses get_random_u32(), because it is needed during earliest phases in boot, before random pool is initialized. It might not necessarily be the proper function for making kernel random numbers — rather such function migh
96.
▲
by
altfredd
7y ago
The problem with creating such wrapper function is that someone like systemd/Wireguard developers will doubtlessly exploit it to drain entropy pool (whatever that means), at which point kernel drivers may start locking up, waiting for
97.
▲
by
altfredd
7y ago
> If those supervisor cores want, they can literally just tamper with the entropy in your pool directly Go ahead and try to tamper with that pool. On all existing and future kernel versions. After undoing kASLR. Not arguing, that it is i
98.
▲
by
altfredd
7y ago
I don't like the stated justifications for enforcing telemetry — even if it is genuine, it is basically self-deception. In my experience, access to analytics is a quality of life improvement for programmer, that does not actually resul
99.
▲
by
altfredd
7y ago
And then they removed "Hot Network Questions" altogether (replaced them with "Network Questions, Manually Featured by Moderators"). And then all of moderators left. Wow.
100.
▲
by
altfredd
7y ago
Java support all sorts of memory barriers via VarHandles (see GET_OPAQUE/SET_OPAQUE). VarHandles can be created from contents of ByteBuffers: https://docs.oracle.com/javase/9/docs/api/java/lang&
101.
▲
by
altfredd
7y ago
Hey, we have just gotten a enormous phone directory for free! Why are you complaining?
102.
▲
by
altfredd
7y ago
It appears, that FB app indeed uploads copies of specific system files: https://twitter.com/wongmjane/status/1167463077748436993 At first glance, the amount of damage being done is close to nil — even if they reve
103.
▲
by
altfredd
7y ago
That depends on the person, who tracks attendance. If the teacher sells attendance reports (together with detailed lesson transcripts and audio recordings) to Google, Amazon, Netflix, US and Russian governments, all major data brokers and T
104.
▲
by
altfredd
7y ago
The description of A2 standard features sounds very similar to the new Linux multi-queue block device framework. From quick look at latest Linux source code, there are couple mentions of "blk_mq" in drivers/mmc, but there see
105.
▲
by
altfredd
7y ago
> I see little connection between today's JS frameworks and ActiveX controls. XMLHttpRequest used to be a popular ActiveX control, that introduced ability to programmatically perform web requests at programmer's discretion. Mos
106.
▲
by
altfredd
7y ago
> It's a webpage built on web standards and designed for web developers. There are a lot of web standards. XHTML and XSLT are web standards. Server-side rendering is web standard. Being able to save a page with search results and vi
107.
▲
by
altfredd
7y ago
The idea itself isn't bad, but Google's implementation of it is terrible. Good actors are forced to show security prompts, that literally scream "this application is malware!!". Bad actors enjoy ability to share MAC/
108.
▲
by
altfredd
7y ago
> Why shouldn't I buy Google's explanation? Because Google is notorious for coming up with bogus explanations whenever they get caught red-handed. Every month there is a bunch of news articles, where high-ranked Google employe
109.
▲
by
altfredd
7y ago
Scoped storage does not prevent applications from sharing PII with each other. There are already advertising networks, using BroadcastReceivers and ContentProviders to share analytics data — it is simple and does not require individual apps
110.
▲
by
altfredd
7y ago
To be fair, denying application knowledge of _device own_ MAC address is beyond absurd. If Google really wants that, they should buy their own MAC block, and regularly rotate the addresses within it when network is off. A lot of Android own
111.
▲
by
altfredd
7y ago
> The most active Wayland developers are not only also Xorg developers but have been so for a very long time Amusingly, I often hear this argument from Wayland proponents. Do they realize, that those very same developers have failed at m
112.
▲
by
altfredd
7y ago
12 years ago I considered using Windows. I liked some Windows applications and, above all, I wanted to play games. Windows looked like it was almost there, so I intended to give it another try next year. Then Vista happened. As of present d
113.
▲
by
altfredd
7y ago
What is there not to get? Javascript in browser simply sucks as platform. 1) No memory limits (technically, there is a limit, but it is much bigger than, say, app heap limit on Android) 2) Background tabs can use setTimeout() to indefinitel
114.
▲
by
altfredd
7y ago
> Interesting, so our current method is to do just what you said -- start a foreground service and acquire a wakelock. But we only do it if our network request takes longer than n seconds This won't work. One of the less documented
115.
▲
by
altfredd
7y ago
If you receive "actual contents" separately from GCM ping, you are probably being hit by Doze Mode. Doze is disabled for foreground Services, so your best bet is starting a foreground Service (via startForegroundService) _and_ tak
116.
▲
by
altfredd
7y ago
> This new thing is actively lying when you don't use Firebase It is lying, alright. That said, I don't think that this lying notification is the best example of Android designers being nefarious jerks. The notification lies to
117.
▲
by
altfredd
7y ago
Covert spam? 1) Spammer uses a bot to post harmless automated comments 2) Waits for a while, than looks which of his comments ranks higher in Google 3) Edits some of top-ranked comments to include usual viagra ads with hyperlinks to promote
118.
▲
by
altfredd
7y ago
And spying on people used to be illegal as well. Now it is going to become legal in Maine — as long as you are an ISP.
119.
▲
by
altfredd
7y ago
> The bill prohibits a provider Nobody cares, what provider does. What matters is whether or not you sign a damn consent form. Suppose, that there is a popular mobile App, written by Zhang Li Ltd. The App allows you to buy travel tickets
120.
▲
by
altfredd
7y ago
This law sound like it was written by data brokers. It does nothing at best and legitimizes corrupt practices at worst. WTF is "consent" doing here? Why would ISP ever need to sell someone's data in order to operate? Do they
More ›