anyzen

9 ms·

31.
by anyzen 8y ago
Thank you for the clarification!
32.
by anyzen 8y ago
Not sure if I understand this correctly, but the attacker's JS must load the pages in question to see if they are in cache, right? Wouldn't that put also them in cache, which means that next time this technique is used it will not
33.
by anyzen 8y ago
Execute better. It depends on the idea what this means, but in general your product should be a better choice for the customer than the competitor's. You probably won't be able to achieve that for all customers, but the more you c
34.
by anyzen 8y ago
No need to decrypt SSL, there are easier ways: https://xkcd.com/538/
35.
by anyzen 8y ago
These frameworks are inevitably much more generic than any in-house solution. On one side this is great, because it means that the abstractions need to be sensible - but it also means there is much more code to maintain. So yes, sometimes m
36.
by anyzen 8y ago
I made an opposite journey. While working in C and Java I commented heavily, but in Python I prefer to just leave a comment here and there if I'm not sure the reason for the code and its intent are clear - but at the same time a commen
37.
by anyzen 8y ago
> Why is docker better than virtualenv with a requirements.txt file? It's not, it solves a different issue. If you only have Python as dependency, requirements.txt are fine (well, user needs to install correct version of Python, pip
38.
by anyzen 8y ago
Old timer to 2 other old timers: Docker does solve a problem, and this is quite close to it... We had a solution that we needed to install on servers for multiple clients. Before Docker, we had to make sure the libraries were correct (on Ce
39.
by anyzen 8y ago
A few days ago I tried to install LibreOffice because a (legal) copy of MS Word gave me trouble and I needed a fast solution. However max. download speed I could reach was ~50k/s, bringing download time to almost an hour. Net speed tes
40.
by anyzen 8y ago
Just to show how absurd such practice is - if Mozilla wanted to do the same, they should intercept requests for Google.com and Bing.com, advising users to use Mozilla's search engine instead. I doubt Google would keep paying them if th
41.
by anyzen 8y ago
And iDefense is doing something similar?
42.
by anyzen 8y ago
What is that about? - 2018-04-03 - Verified existing and sent to iDefense’s VCP - 2018-04-04 - Validated and acquired by iDefense Is there a company that buys information about bugs ahead of time so they can protect their clien
43.
by anyzen 8y ago
I have been currently exploring the option of open sourcing a project of mine and have researched CLAs a bit, but would love to be corrected if mistaken. It is as simple - and it is not. You need to take care of special cases, like contribu
44.
by anyzen 8y ago
> In particular, I've always wondered why "GPL or ask me for permission" isn't being explored more. Maybe because then you need to have CLA's (Contributor License Agreements)? Otherwise, who is "you" th
45.
by anyzen 8y ago
> Moreover, projects do fail even with a fully experienced, fully vetted staff running the show. Sure - but in that case they usually don't fail because of technical decisions (which is what OP was talking about). There are however
46.
by anyzen 8y ago
I'm not sure if this is what you are looking for, but I have been using headless Chrome through Selenium (using nightwatch.js) for some time now and it works great. You will probably need to rewrite your tests though, but they will sup
47.
by anyzen 8y ago
And uMatrix! I don't know what I'd do without it.
48.
by anyzen 8y ago
> One might also argue that fixing it is as easy as replacing load() with safe_load(), but many people are unaware of the problem, and even if you’re aware of it, it’s one of those things that can be easy to forget. It’s pretty bad API d
49.
by anyzen 8y ago
This. I rewrote pure-JS implementation of some topology visualization in D3 and very much regretted it. The abstractions are simply weird, documentation poor and the resulting code difficult to reason about and maintain. Useful for toy proj
50.
by anyzen 8y ago
Exactly. (& sorry for late reply)
51.
by anyzen 8y ago
Same here. The CI is easy to use and makes sense, though it lacks some features - for instance being able to automatically run manual jobs as soon as their predecessors complete. Now I have to wait (!) and then click so the manual job start
52.
by anyzen 8y ago
Of course, JS has a problem in this regard that while it looks like a language, it is also a (de facto) assembler for the browsers. So disabling anything in JS will break lots of sites which will never be fixed. However as far as programmin
53.
by anyzen 8y ago
Not sure why you're being downvoted. Google has different business model than Apple and expecting it to care about user experience in the same way simply doesn't make sense. And yes, they mostly care about data, because that'
54.
by anyzen 8y ago
My point exactly... ;)
55.
by anyzen 8y ago
> If you want, you can build and sign your own apps and put them on your device on an iPhone. HA! Sure. For $100 a year. And from a Mac. > I presume you’re talking about the headphone jack, which google followed up by removing from th
56.
by anyzen 8y ago
There are always assumptions being made, no matter what you do. But "uppercase -> constant" is such a generic and cross-platform convention that it should always be followed. This code should never have passed code review for t
57.
by anyzen 8y ago
True. So, did any of the initial participants gain employment?
58.
by anyzen 8y ago
> ... with purely visual sensors So maybe they shouldn't use purely visual sensors until the problem is solved? It's not like they don't have any other option.
59.
by anyzen 8y ago
Genuinely curious about the statistics: does it count human corrections as if they would have resulted in the crash? Because if not, they are simply not valid.
60.
by anyzen 8y ago
Note that it's not (only) about colors... Human vision has trouble picking out colors in the dark, yet it still allows us to process world around us to a surprising degree. However until the "brain" of the car is good enough,

More ›