bzbarsky

68 ms·

721.
by bzbarsky 8y ago
Last I checked, Chrome blocks autoplay of videos with sound on websites. Except for YouTube, where they allow it. If they were a monopoly, that would seem like a pretty clear abuse of market position.
722.
by bzbarsky 8y ago
user.js is the supported and reliable way to set preferences that should just be set no matter what the default configuration is or what about:config says. prefs.js is the storage for the current non-default pref values. At runtime, defaul
723.
by bzbarsky 8y ago
> Why would it make it random? https://bugzilla.mozilla.org/show_bug.cgi?id=56002 has the long discussion about it, but briefly: the profile directory name randomization was introduced to prevent web sites from being abl
724.
by bzbarsky 8y ago
Indonesia seems to be doing OK. Though arguably Suharto did some of the "brutal totalitarianism" bit.... That said, that's over 20 years in the past, and I'm not sure radicalism has really been spreading that much in I
725.
by bzbarsky 8y ago
> The browser is now overriding the OS level resolver, and pointing to the Cloudflare stuff. If you're in the study. Which it asks you whether you want to be.
726.
Next Steps in DNS-Over-HTTPS Testing(blog.mozilla.org)
4 points by bzbarsky 8y ago|3 comments
727.
State of Mozilla 2017: Annual Report(blog.mozilla.org)
9 points by bzbarsky 8y ago|0 comments
728.
by bzbarsky 8y ago
Wouldn't matter, if the attack works as described. It's already exfiltrating data cross-process due to the processes sharing a resource (the CPU cache). It doesn't matter whether the processes are the same browser or differ
729.
by bzbarsky 8y ago
> I am unhappy you condensed my points down to something akin "taxation is theft mkay". I was definitely not aiming at that, and I'm sorry if that's how my comment came across. I was trying to point out that saying &
730.
by bzbarsky 8y ago
In the particular case of web standards, my impression is that some companies that develop browsers (1) tie individual performance evaluations (e.g. bonuses) to whether the engineer has added stuff to standards and (2) _really_ like over-en
731.
by bzbarsky 8y ago
One casualty you do not mention is the actual physical goods that consumers do not get as a result of the tariff 'war'. That is, consumers spend the same amount of money, but get fewer goods in return. This is an economic loss fo
732.
by bzbarsky 8y ago
There's a difference between advocating for social justice and being a "social justice warrior", as the term is generally understood today (the meaning has shifted a good bit in the last 20 years). As far as I can tell, at th
733.
by bzbarsky 8y ago
How do you square that opinion with the fact that the parts of academia that are least one-sided politically are the parts which actually do the best job of using the scientific method in practice? https://www.nationalreview.com&
734.
by bzbarsky 8y ago
I'm not saying I don't understand why they are doing it. But I also understand why news media in a totalitarian regime toe the party line, say. And they are also damned if they do, damned if they don't. Again, I am not claim
735.
by bzbarsky 8y ago
Google has no problems with promulgating falsehoods that are not classified as "fake news". Unfortunately, that definition involves a lot of motivated reasoning, on all sides. > anything and everything that google does or does
736.
by bzbarsky 8y ago
> Google isn't trying to control or limit what people think. Google's efforts against "fake news" are exactly trying to do that. And just because one agrees with them in this one instance doesn't change the prece
737.
by bzbarsky 8y ago
Desktop-only, not on Android, right? Also, a program that only works in one browser, and only due to that browser being willing to open security holes other browsers are not willing to open, is arguably still defective. That said, that mig
738.
by bzbarsky 8y ago
For most of that time China was not a "large economy". That said, your "50 years" number is conveniently eliding https://en.wikipedia.org/wiki/Sino-Vietnamese_War which was closer to 40 years ago.
739.
by bzbarsky 8y ago
Your theory about WWI is hard to reconcile with the fraction of the upper classes in the relevant age brackets who were in the army and were casualties, especially on the western front. In WWI, a lot of the people making the decisions in f
740.
by bzbarsky 8y ago
Right, at Fukushima it wasn't just loss of power that was the problem, it was the loss of all the backup power sources too, _combined_ with a design that required power to operate the cooling system. I agree that this is something we s
741.
by bzbarsky 8y ago
You can go to Three Mile Island just fine as long as you don't go inside the Unit 2 containment vessel itself. The meltdown was fully contained inside said containment vessel. Unit 2 has since had its core removed from the site entir
742.
by bzbarsky 8y ago
Iran is far enough away from Israel that it would be difficult for Israel to actually project power there. The distance from Tiberias (northeast of Israel) to Ahvaz (southwest Iran) is ~780 miles. If you go to Tehran instead of Ahvaz, it&
743.
by bzbarsky 8y ago
By any reasonable definition of "state of war", a state of war exists between Israel and Iran and has for a long time. The only reason it's not official is that since 1979 Iran has not recognized the existence of Israel at a
744.
by bzbarsky 8y ago
40-45% is not extremely high for California for someone unmarried with a mid-6-figures income. For lower income levels than that, or if you're married, or live in a state with lower state taxes, the numbers look much better.
745.
by bzbarsky 8y ago
It depends on the exact situation. In this case there is coordination happening among multiple vendors who are working on various fixes in this space, which complicates things. Also complicated is that apart from "don't use Chro
746.
by bzbarsky 8y ago
Google won't give me a payout for a problem they already know about. I know they know about it, because we have discussed it with them. In case it wasn't clear: I work on a web browser that is not Chrome. > why not pull a Goo
747.
by bzbarsky 8y ago
The last proposal I saw floated involved sites sending a header to opt in to SharedArrayBuffer and the browser ensuring that all successful loads such a site does are done with CORS enabled. That ensures that such a site only has access to
748.
by bzbarsky 8y ago
No, that's not enough. I can provide examples in a non-public venue.
749.
by bzbarsky 8y ago
To be clear, Chrome re-enabled it without implementing mitigations that other browsers are likely to consider a basic requirement before re-enabling. A clear case of product or marketing trumping security...
750.
by bzbarsky 8y ago
It's not fully fixed by those, for what it's worth; I'm happy to provide examples outside a public venue. Chrome just decided it doesn't care about the security holes it's creating in websites. Other browsers are w

More ›