cbsmith

31 ms·

481.
by cbsmith 3y ago
I just realized there's a whole generation of people young enough that they weren't reading headlines back when CDOs destroyed the world's economy. I feel old.
482.
by cbsmith 3y ago
Just to be clear, I wasn't criticizing Mozilla. I think they did what they had to do, but it's unfortunate the skills can't be harnessed.
483.
by cbsmith 3y ago
Fair advice.
484.
by cbsmith 3y ago
I wasn't saying he has learned from his mistake. I'm just saying he no doubt has expertise.
485.
by cbsmith 3y ago
Effectively, yes.
486.
by cbsmith 3y ago
Because it's effective.
487.
by cbsmith 3y ago
I think there's a distinction between criminal activity and the usual conflict of interest.
488.
by cbsmith 3y ago
You could, particularly since protection rackets actually do compete with each other. I wouldn't want to hire a criminal, but if someone did, they'd likely be effective.
489.
by cbsmith 3y ago
We hire black hat hackers to help with computer security.
490.
by cbsmith 3y ago
Yes, I get it. It's just they buried the lede of how far they have to go.
491.
by cbsmith 3y ago
"XB-1 met all of its test objectives, including safely and successfully achieving an altitude of 7,120 feet and speeds up to 238 knots (273 mph)." Seems just a bit shy of the speed of sound (760 mph).
492.
by cbsmith 3y ago
I get the concerns about conflict of interest, but I can get behind the CEO's point that their expertise in the space helps them to build better defenses.
493.
by cbsmith 3y ago
I'm looking forward to phone companies being targeted by these lawsuits.
494.
by cbsmith 3y ago
Includes.
495.
by cbsmith 3y ago
Some modern languages have protections from some types of mistakes. C++ has some protections for some types of mistakes as well. I agree that there is decades of evidence that people can create security vulnerabilities in C++. I cou
496.
by cbsmith 3y ago
> It’s been holding up pretty well for the specific memory safety guarantees offered by modern languages That seems unrelated to whether people need to be perfect to avoid security exposures. In fact, it would seem to be in contradiction
497.
by cbsmith 3y ago
The rate of deaths has dramatically declined. A lot more people are driving, and they're driving a lot more.
498.
by cbsmith 3y ago
> If only people were perfect, then things would be perfect. That argument doesn't hold up too well, considering that people are involved either way.
499.
by cbsmith 3y ago
> Tbf without frames neither mechanism made much sense, (even back than) because it would be horrible to use with form fields. Frames were the common way to deal with that, but I even did stuff with having a separate "named" br
500.
by cbsmith 3y ago
I thought it was more that the Document object had to stay alive. ...although, these days a lot of mobile browsers will kill that thing off if the page is not in the background, so yeah...
501.
by cbsmith 3y ago
> actually you can use transfer encoding chunked to stream data , but it will get appended and the page would never finish loading, that worked back than it works today but that is not useful for several reasons and wasn’t back than. Oh
502.
by cbsmith 3y ago
The hit rate for fallback is pretty low. It was less than 5% the last I checked.
503.
by cbsmith 3y ago
Old Android handsets seem to be the big ones.
504.
by cbsmith 3y ago
> Unfortunately, the way browsers implement WebSocket it undermines TCP's flow control. It's trivial to crash a browser tab by opening a (larger than RAM) file and trying to stream it to a server using a tight loop sending on a
505.
by cbsmith 3y ago
Chunked transfer encoding (which is indeed the underlying mechanism behind server-push) predates XHR, and AFAIK is still supported and will continue to be as long as HTTP/1.1 is still supported. You can use a frame/iframes, but yo
506.
by cbsmith 3y ago
I don't know about long gone. I still support a websocket solution that needs to have server-push as a fallback because of browser incompatibility issues.
507.
by cbsmith 3y ago
I've switched to using SSE to get around problems with the refresh button. It's pretty simple and reliable.
508.
by cbsmith 3y ago
> WebSockets lack flow control (backpressure) and multiplexing, so if you need them you either roll your own or use something similar to RSocket. Yes, head of line blocking is an issue, but TCP provides flow control, and if you're n
509.
by cbsmith 3y ago
You can do mobile push notifications to a phone even if they aren't connected to a mobile carrier. That said, I'd argue SSE is the browser equivalent of mobile push notifications.
510.
by cbsmith 3y ago
Honestly, all the techniques for this stuff have their problems, including the refresh button.

More ›