dblohm7

20 ms·

241.
by dblohm7 4y ago
One aspect of these forks that never gets mentioned: It's great when a fork ensures that it is always taking security patches from upstream. But what about the code unique to the fork? Is that new code following the same security pract
242.
by dblohm7 4y ago
Not really. That’s a typical workday for many Gecko developers. Some useful guidelines made it pretty straightforward: https://wiki.mozilla.org/Oxidation
243.
by dblohm7 4y ago
How can market share not be part of the discussion concerning who controls the web? You wrote: > The fact that both Brave and Vivaldi were able to disable Google's FlOC within a very short period of time Okay, they disabled some s
244.
by dblohm7 4y ago
Brave and Vivaldi fall into the “don’t matter” category. Call me when a Chromium fork displaces Chromium.
245.
by dblohm7 4y ago
> The economics of starting from scratch vs starting from Chromium's latest commit are fundamentally different. I don’t think they are. That fork then immediately finds itself in the same position as other engines, where now the for
246.
by dblohm7 4y ago
https://m.youtube.com/watch?v=qbKGw8MQ0i8
247.
by dblohm7 4y ago
> I have set up a toolchain based on Wix, running via Mono and Wine on Linux, for the purpose of packaging some rather complex .msi files in a commercial software project. That’s exactly how I rigged up building our MSIs at Tailscale.
248.
by dblohm7 4y ago
The original POSIX subsystem would have used it.
249.
by dblohm7 4y ago
But GA, statcounter et al don’t use server logs. They use JavaScript.
250.
by dblohm7 4y ago
Precisely.
251.
by dblohm7 4y ago
> Windows programmers were more familiar with “critical sections” as an abstraction than mutexes. I disagree on that front. Mutex kernel objects have existed just as long as critical sections. Critical section objects are cheaper because
252.
by dblohm7 4y ago
(Former Mozilla employee here) Rust is encouraged to be used by all developers who are writing native code (it's not supposed to be just the domain of a select few). As I recall, the message was, "Not knowing Rust must not be an e
253.
by dblohm7 4y ago
I still miss the good old days of Android when apps didn't automatically receive the internet permission. Now get off my lawn.
254.
by dblohm7 4y ago
Ah yes, AllocCStoDSAlias. You could do some fun stuff with that API and its inverse, AllocDStoCSAlias (or PrestoChangoSelector).
255.
by dblohm7 4y ago
It seems to me like, by that point, the damage has already been done.
256.
by dblohm7 4y ago
(Former Mozilla employee, here) I'm completely speculating, but it's probably a matter of not wanting to complicate iterating on the translation engine by introducing a bunch of cruft from the Firefox build system (which, though i
257.
by dblohm7 4y ago
(CS452 vet here, Fall 2004) Am I reading this right, you're using ARM now? We were using a Pentium PC (and that was already old for 2004, but good enough for for the course, obviously).
258.
by dblohm7 4y ago
A lot can happen in five years! Keep in mind that, in May of 2017, desktop Firefox did not even yet have full support for multiprocess under particular configurations. Obviously you cannot sandbox content processes that don't exist, so
259.
by dblohm7 4y ago
A lot of people don’t know this, but Firefox uses the Chromium sandbox. I should know: I rubber-stamped the commit that first imported that code into the Gecko repo (it is regularly kept in sync with upstream). That sandbox (and others, for
260.
by dblohm7 4y ago
Just to be clear: a ton of kernel32 stuff was already locked down prior to win32k being shut off. (I used to work on the author’s team)
261.
by dblohm7 4y ago
(I used to work on the blog author’s team, and in fact dealt with some of the COM issues mentioned in the post) You’re right, uxtheme can’t be called directly from content because of win32k dependencies. One option could be for content to r
262.
by dblohm7 5y ago
Firefox has a mechanism for off-cycle updates called system add-ons.
263.
by dblohm7 5y ago
So trying to shift development processes more toward continuous delivery (within reason, given desktop software) is meaningless, then? Come on.
264.
by dblohm7 5y ago
It wasn't done to copy Chrome, but you keep telling yourself that.
265.
by dblohm7 5y ago
I used to work on the team at Mozilla that got stuck with dealing with all the terrible shit that AV programs do to web browsers. My recommendation for Windows users is to just use Defender. All that other crap does the exact same stuff to
266.
by dblohm7 5y ago
My first computer. <3
267.
by dblohm7 5y ago
Why "Works best with Chrome?" It works fine for me in Firefox.
268.
by dblohm7 5y ago
Yes it is. WebRender shipped a few releases back.
269.
by dblohm7 5y ago
Codecs, language bindings
270.
by dblohm7 5y ago
This is incorrect. The front-end for Fenix uses the Fenix and Android-components GitHub repos. mozilla-central only contains GeckoView (the embedding API for Android) which uses Java for the API itself and Kotlin for all the unit tests.

More ›