Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
esailija
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
34 ms
·
331.
▲
by
esailija
13y ago
In terms of performance there is huge room of improvement in when.js. $ node --trace_inlining go_when.js Did not inline fulfilled called from coerce (target contains unsupported syntax [early]). Did not inline NearFulfilledPro
332.
▲
by
esailija
13y ago
From the project root, copy the files in `\WebKitLibraries\win\tools\vsprops` Into `C:\tools\vsprops` Worked for me.
333.
▲
by
esailija
13y ago
Those are not the whitehat terms at all. But that doesn't matter since the argument was ridiculous in the first place. If you cannot understand or read rules, that doesn't meant they don't apply to you. Also, he understands
334.
▲
by
esailija
13y ago
Yes, I heard he is going to black market next. That's a good lesson I think. Nowhere I saw good faith, just greed for money. He was even asking for money in the initial bug "reports". http://4.bp.blogspot.com/
335.
▲
by
esailija
13y ago
Even worse confusion is "reward" and I almost had a stroke before I realized it's not facebook. Facebook paying the reward would have been ridiculous since then everyone would know their whitehat tos doesn't mean shit.
336.
▲
by
esailija
13y ago
Encouraging ignorance is even worse than encouraging malice :P
337.
▲
by
esailija
13y ago
I think you are here: https://news.ycombinator.com/item?id=6231466 . And please don't bother defending, just dropping by.
338.
▲
by
esailija
13y ago
Yes I fell into the "all languages" trap. Maybe "most mainstream languages" is more in line with what I meant. :P
339.
▲
by
esailija
13y ago
That is a vague reply with no apparent relevance to anything I said except the amount $500 which was not to be taken literally. My point was that facebook isn't doing this to save money and believing so is idiotic.
340.
▲
by
esailija
13y ago
The point is not to individually judge the harmful effects of using an exploit publicly. That would be absurd. You have no right to say that the video posted on the girl's facebook wall was not a big deal. And I have no right to say th
341.
▲
by
esailija
13y ago
It looks like preserving the integrity of their ToS to me. If you believe it is because of $500, you are a total idiot and I will not talk to you.
342.
▲
by
esailija
13y ago
It is some link to a youtube video, posted to a public user's facebook wall through the exploit. That's what the screenshot shows.
343.
▲
by
esailija
13y ago
I don't think you guys understand. You can't publicly use the exploit and then back away and use the white hat system after the fact. It clearly shows him spamming some profile before even making the first contact.
344.
▲
by
esailija
13y ago
There is no such thing as an actual hoisting mechanism. Yes, declared functions are available anywhere in the surrounding scope, just like in any other language . It would be ridiculous if for example you couldn't call a method in Jav
345.
▲
by
esailija
13y ago
Where is the part that checks if the name was invalid and then asks again?
346.
▲
by
esailija
13y ago
Yeah GUI widgets done in js in general for some reason have really poor quality and no attention to subtle details that make up the polished experience on desktop. Well at least they take 2 KB instead of 5 KB gzipped, that's totally a
347.
▲
by
esailija
13y ago
And when the engine cannot do that for you, there is always Math.imul
348.
▲
by
esailija
13y ago
Your entire complaint is very superficial and easy to fix with any convention you like. For example: http://jsfiddle.net/AXTdj/3/ I included "overhead" calculations.
349.
▲
by
esailija
13y ago
This is the key. With good conventions and tools it is perfectly fine language. The concept of "Programming into one's language" from Code Complete applies strongly: > Programmers who program "in" a language lim
350.
▲
by
esailija
13y ago
That is a really gross exaggeration. jQuery only lost 10% of its size on full builds when it eliminated IE6-8. There is still plenty of stuff left to handle. Naive code that only handles common success case is of course going to be small. E
351.
▲
by
esailija
13y ago
In both selector tests, the code calls `.html()` as well. It also uses a direct #id selector, I.E. does not "search the entire DOM" like it says.
352.
▲
by
esailija
13y ago
Also, the code doesn't call into DOM directly but uses jQuery .html() for "reading" and .html(Math.random()) for "writing". The case is extremely misrepresented indeed.
353.
▲
by
esailija
13y ago
This is not a problem in e.g. PHP, out of the box it can embed json in script tags, with default settings you never get the sequence `</script>` (you get `<\/script>` instead) and it even escapes U+2028` and U+2029 whi
354.
▲
by
esailija
13y ago
Enforced privacy is not as common as people think either, so you don't really even need to pull out the Smalltalk argument. In Java, C#, PHP etc it is not possible for the developer to actually enforce privacy like you can in JS becaus
355.
▲
by
esailija
13y ago
In the eyes of compliant parser (assuming JSON supported comments) it is just a comment like "_type": "int" is just a key-value pair. However, when using ad hoc parser, then all bets are off what the result is in both ca
356.
▲
by
esailija
13y ago
Yes I get that. What I don't get is how "_processing_instruction": "whatever" is any different.
357.
▲
by
esailija
13y ago
If JSON had comments, then of course any JSON parser could understand those comments just as well as they can currently understand "_type": "int". What am I missing?
358.
▲
by
esailija
13y ago
Since this is usually downplayed because the "code is shared", to be more specific, for example in V8 in x64 (node.js, Google Chrome), the theoretical minimum memory used by a function object is 72 bytes: - Map pointer: 8 - Proper
359.
▲
by
esailija
13y ago
Your code on the client side is merely a convenience for malicious advertisement code if accessible. How your client side code interacts with the server is what matters and the malicious code can do whatever your code can do with same privi
360.
▲
by
esailija
13y ago
What is meant by true/enforced privacy is that the only way to access something is to modify the original source. This is not the default anywhere else, as you know, but is encouraged by some (Crockford for example) in Javascript. Enfo
More ›