altfredd

17 ms·

121.
by altfredd 7y ago
Possession of an IPv6 address does not automatically imply that your ISP allows incoming connection to your ports.
122.
by altfredd 7y ago
It have always been known how to exploit them. But doing so used to be slower and there have been fewer opportunities for attacks. OS kernels used to have Big Locks (AFAIK, OpenBSD still does), that significantly deterred programs from mess
123.
by altfredd 7y ago
> Google will not be able to receive any events/messages unless they're sent by not-google.com Exactly: the integration requires cooperation from both websites, and there is zero reasons, why child website would want to coopera
124.
by altfredd 7y ago
If portals really were iframes, there would be no reason to create them. Google is completely open about their intentions. Citation from https://github.com/WICG/portals/blob/master/key-scenarios.md : >
125.
by altfredd 7y ago
> IE6 gave us XMLHttpRequest because they wanted it to build Outlook for the web. That seems like it turned out ok. That depends on one's definition of "ok". I don't think that modern web is ok.
126.
by altfredd 7y ago
> In what way loading a site on a portal would be different to loading it on the main window? The difference is made crystal-clear in the draft [1]: > Every browsing context has a portal state, which may be "none" (the defau
127.
by altfredd 7y ago
> Phage therapy is a blind spot for Western medicine. It's a new category of drug It is a branch of traditional medicine, approximately 100000 years old and counting. "Western medicine" ignores phage therapy, because growi
128.
by altfredd 7y ago
>> we have a giant for loop that iterates over all of memory over and over and over > How is that not how garbage collectors work?... I'm assuming we're talking about a standard, generational mark-and-sweep gc GCs do not
129.
by altfredd 7y ago
I don't care about goals (or competency level) of browser makers. But it is hard to deny, that they are repeating the same mistakes Sun committed in late 90's with browser applets. They don't learn.
130.
by altfredd 7y ago
> the idea that one can look at a modern browser, which are some of the most complex software packages being developed, and think "clearly these people don't know how to add an 'origin' column to a SQLite database&quo
131.
by altfredd 7y ago
You seem to be confused about meaning of "CSS tracking". Detecting that user clicks on the link, that you have shown him, is harmless — as demonstrated by Google, a website can always track it's own outgoing requests by repla
132.
by altfredd 7y ago
What exactly do you want to block here? The user clicked a form control, the form control sent a request to server. It is no different from clicking a link. You know, that HTTP allows websites to "track" you each time you visit th
133.
by altfredd 7y ago
> tl;dr css hover selectors that change the background image don't actually cause the browser to GET the specified background image until you hover over it This specific page uses :active, not :hover, so it is really no different fr
134.
by altfredd 7y ago
> That assumes that the nameserver and the actual server are run by the same party which quite often is not the case. Cloudflare can check if nameserver and the actual server are run by different parties, and if so omit subnet informatio
135.
by altfredd 7y ago
Cloudflare uses "privacy" and "caring about users" as excuses to sabotage competing CDNs (including whatever CDN is used by archive.is). Most recursive DNS severs on Internet can be categorized in two groups: local DNS s
136.
by altfredd 7y ago
> So how is this "JVM world" escaping the grip of Oracle? Why would you? What is the point of "escaping"? It is like asking, "how would Go world escape the grip of Google?" — no one cares to, because nobody
137.
by altfredd 7y ago
> Too little too late, and I highly doubt that (5-year-old) Valhalla will deliver even one of the promised features (value types) in the next 3 years I never understood the purpose of Valhalla. They should just introduce a 128-bit scalar
138.
by altfredd 7y ago
This is a very bizarre justification for an obvious bug. Code-signing does not work that way anywhere else — neither in Android, nor on iOS, Windows or any other common platform. There is a possibility that Mozilla implemented their backwar
139.
by altfredd 7y ago
Fortunately, it is no longer necessary to run malicious software on user computers. With latest "advancements" in Firefox security everyone can publish malware directly in Firefox addon center [1]. No review needed! "We accid
140.
by altfredd 7y ago
> The glibc people literally think that nobody should be using signals. That's their objection, not anything you've talked about. I don't believe, that everyone holds that opinion. Even if they did, the world does not revo
141.
by altfredd 7y ago
> It's possible to do much better than sigaction(2). I wrote up a detailed proposal for improvement in [1]. Thanks for interesting read. That said, I can see why glibc people didn't appreciate the proposal. The first part of ar
142.
by altfredd 7y ago
> The idea that fume events are somehow linked to mass exposure to a neurotoxin that the FAA and every other major government are suppressing information about is a conspiracy theory. Alternatively, there is no conspiracy, and every maj
143.
by altfredd 7y ago
It does not matter, what they are spending those money on. In fact, spending them on development only made things worse. As soon as Mozilla started relying on Google's money, they were doomed. Now they are staffed by lots of well-paid
144.
by altfredd 7y ago
If you want to simply limit amount of unwanted traffic, implement conventional image captcha with some minor twist. State-of-art bots do not (yet) have a human-like AI, so you will be safe(r) until someone adapts all existing bots to solve
145.
by altfredd 7y ago
Smartphones tune down brightness in power saving mode (and so do e-ink books). Most websites are barely legible under those conditions, because web designers have been so heavily corrupted by backlight.
146.
by altfredd 8y ago
Ah, right. The "that guy did it" excuse. If they aren't legally obliged to purchase "broadcasting right" from "members", they can always stop doing so. If they ARE legally obliged (or forced by corporate m
147.
by altfredd 8y ago
There are less complaints about 2018 model. They didn't really fix it. If my (non-Apple) laptop is anything to go by, the keyboards with that crappy low-rise design have average life expectancy of one year. The 2018 modification will n
148.
by altfredd 8y ago
Unless the type of your file is unknown to system. Like, say, a new music format.
149.
by altfredd 8y ago
Privacy? What??! Each time your app opens and reads a file, the application on other side of ContentProvider can monitor user activity down to number of bytes read. Each time you open a directory, that action can be noted. If anything, that
150.
by altfredd 8y ago
This is a very alarming move. Google's external storage ContentProvider is terrible: slow, buggy and lacks a number of basic features. It does not work as replacement of existing file managers, since it does not properly support search

More ›