csande17

17 ms·

241.
by csande17 3y ago
> The scandal is another blow to the automaker, which had admitted in April to violating standards on crash tests on more than 88,000 cars, mostly sold under the Toyota brand in countries such as Malaysia and Thailand. Seems fair to ment
242.
by csande17 3y ago
> This trusts the client for both parties, while also treating the client as a potentially malicious party. This puts you back at 1-of-N. Is this just the "well how do you get a trustworthy copy of the software you rely on to tell y
243.
by csande17 3y ago
> As I’ve said in other comments: “can” translates to “won’t” in cryptographic contexts. Gossip does not matter if it doesn’t have controls behind it. Yes, so you... code the client to check for the presence of multiple signatures (in th
244.
by csande17 3y ago
> For those saying we should have verified reproducible builds: yes, that'd be great! This effort does not conflict with reproducible builds. Well, we can hope, anyway. "Provenance" necessarily involves injecting secret da
245.
by csande17 3y ago
> You can do this, but I don’t think it has much of a value (or security) proposition on its own. The value prop is pretty straightforward in the open-source space: allowing clients to choose to only trust binaries signed by N independen
246.
by csande17 3y ago
I'm not sure I understand this line of argument. A system where every user rebuilds all packages themselves, just to use the resulting file hashes to verify whether they can trust an identical binary they already downloaded from the In
247.
by csande17 3y ago
You definitely get discrepancies in hardware support. Historically, different Wayland desktops had wildly differing support for Nvidia cards, for example, from "works perfectly" to "deliberately rejects them because the maint
248.
by csande17 3y ago
You still have this problem in the "list of Unicode code points" world, since many multi-code-point emoji sequences appear to users as a single character, but start and end with code points that are valid emojis on their own. Pyth
249.
by csande17 3y ago
Yeah, implementation-wise, Rust's version of this idea is a little better, since at least you can convert their strings to a bag-of-bytes/OsStr-style representation almost for free. (And to their credit, Rust's docs for the c
250.
by csande17 3y ago
> The only encoding which is compatible with "every operating system in the world" is no enforced encoding at all, and you can do very little "string-like" operations with such a type. People who like "list of Un
251.
by csande17 3y ago
Encoding might not be the whole issue, but "Rust mandates that the 'string' type must only contain valid UTF-8, which is incompatible with every operating system in the world" is the reason why OsString is a separate typ
252.
by csande17 3y ago
IntelliJ IDEA has this feature: https://www.jetbrains.com/help/idea/reader-mode.html In addition to ligatures, you get IMO a better version of the "Mix & Match" idea: doc comments are rendered as nor
253.
by csande17 3y ago
I'm curious: did the team consider applying the technique to letter pairs like Ty and TA that traditionally get kerned closer together in proportional fonts? As far as I can tell from the demo, these pairs currently aren't affecte
254.
by csande17 3y ago
I'm curious what people think of the "Mix & Match" examples. Radon (the handwriting one) seems to complement the other fonts well because it's basically an italic. But all the others are so similar, with their identi
255.
by csande17 3y ago
The site doesn't seem to support HTTPS, but HTTP works fine. (This might be intentional; all the links on the home page have http: URLs, not https:.)
256.
by csande17 3y ago
The references to POSIX "approval"/"changes" in Cosmopolitan docs are usually talking about bugs like this: https://austingroupbugs.net/view.php?id=1250 I'm not sure whether the proposed change
257.
by csande17 3y ago
Alternatively, flambéer or flambé-er, since by the time you're using "flambé" as a present-tense verb you're already in mangled culinary-loanword territory.
258.
by csande17 3y ago
Even if Inter wasn't a fit, and they really specifically needed an open-source font that looked like Helvetica (er, sorry, that drew "inspiration from the renowned Swiss design movement") with a more distinguishable I/l&
259.
by csande17 3y ago
Weird that that was considered an issue while KDE Discover and snapd will both happily install stuff from third-party "stores" by default on Debian.
260.
by csande17 3y ago
Yeah, the core issue is really that you can't cryptographically prove which human being is holding the cell phone you're talking to. You can't tell if you're talking to Bob, or someone named Charlie who is pretending to
261.
by csande17 3y ago
> unless said new hardware is only exposed via a new kernel API and nobody bothers to update the modesetting driver for it And this is actually really unlikely for Wayland, isn't it? The whole idea is that each desktop environment i
262.
Getting Hitched to “Love Plus” [pdf](carter.sande.duodecima.technology)
1 points by csande17 3y ago|0 comments
263.
by csande17 4y ago
Opera Mini does this, but IIRC it's not self-hostable.
264.
by csande17 4y ago
The version of this idea that I've heard is that, in the idealized Plan9 "everything is a file" universe, the only containerization primitive you need the kernel to provide is chroot. Then you can implement things like networ
265.
by csande17 4y ago
The main thing IPFS does better (in my opinion) is that the user interface is based around "browsing web sites" instead of "downloading files". For example, you can upload all of Wikipedia to IPFS such that users can eas
266.
by csande17 4y ago
> the internet can provide some of the most basic social interaction needs This is an underappreciated point. Thanks to the Internet, you're probably still having social interactions even if you're spending all day in your bedr
267.
by csande17 4y ago
A lot of this type-system stuff is not really relevant to the Fortnite modder audience. If you look at the kind of code used in more practical examples ( https://dev.epicgames.com/documentation/en-us/uefn/learn
268.
by csande17 4y ago
Yup, GPLv3 specifically requires manufacturers to provide any signing keys needed to get code to run: > “Installation Information” for a User Product means any methods, procedures, authorization keys, or other information required to ins
269.
by csande17 4y ago
Was the tech landscape much different 10-15 years ago? This is a genuine question; the iPhone App Store was really the last "big thing" to happen to the industry in my mind, and it came out in 2008.
270.
by csande17 4y ago
Having worked in a "growing engagement" role at a big company, I'd say it's more accurate to describe it as "running no-op experiments over and over until the A/B testing tool tells you one had a 'statisti

More ›