esprehn

33 ms·

421.
by esprehn 5y ago
You may enjoy the concept of the "tour of duty": https://hbr.org/2013/06/tours-of-duty-the-new-employer-emplo... http://www.theallianceframework.com/about-the-book.html Thinking about my
422.
by esprehn 5y ago
Can you explain the attack vector where encrypted HTTPS network traffic is vulnerable but a JS API isn't?
423.
by esprehn 5y ago
Hope do you make your builds hermetic and reproducible without package locks?
424.
by esprehn 5y ago
There's lots of writing about monorepos these days, and they're quite common in public projects though usually at a smaller scale (ex. React is a monorepo, so is Babel and VSCode). While complicated, in my experience the tooling t
425.
by esprehn 5y ago
Sort of, the google3 monorepo is so large that all checkouts are sparse checkouts. So you have a virtual checkout of everything but specify the subset you actually need. Once you have the tooling to do this you can use the monorepo to store
426.
by esprehn 5y ago
Dan isn't the first person to notice: https://www.voitanos.io/blog/don-t-be-alarmed-by-vulnerabili... We disable [1] audit entirely because it's not a good default behavior within a monorepo. It spams the hun
427.
by esprehn 5y ago
It's interesting this made the front page but no comments talk about Evan or his many accomplishments, just Google. I suppose that's a reflection of the recent sentiment where old timers leaving Google is a sign of something. In a
428.
by esprehn 5y ago
React's concurrent mode doesn't split DOM updates across animation frames because that would cause visual tearing. It splits all the component "overhead" and the virtual DOM cost over multiple tasks though.
429.
by esprehn 5y ago
Maps was entirely rewritten to use WebGL and support 3D. Gmail had the entire backend rewritten to scale much larger, priority inbox and categories, rich content emails, auto suggest as you type. Docs was completely rewritten, and they&#x27
430.
by esprehn 5y ago
I'm unconvinced it's going to matter for libraries. Folks will just use a Babel transform that exposed the private fields somehow (ex. With getters or rewriting the names)
431.
by esprehn 5y ago
Do you have examples of exploits in the non-sandboxed JSON parser? That code doesn't appear to have any security/memory safety related fixes in the last 2 years: https://chromium.googlesource.com/chromium/src.
432.
by esprehn 5y ago
The web platform code in Chromium uses a C++ garbage collector [1] which gets a lot of benefits of a memory safe language and integrates well with V8/JS. That fixed the vast majority of issues without having to rewrite any of the code
433.
by esprehn 5y ago
It works alright with React if you treat it like regular DOM elements, but there's rough edges like SSR event handlers not working: https://github.com/facebook/react/issues/18390 Unfortunately it seems f
434.
by esprehn 6y ago
This is a fun learning project, but I don't think it's really a browser except in name. The code seems to implement the behavior someone thinks a browser might have, not what the specs actually say. Ex. https://github.c
435.
by esprehn 6y ago
It doesn't appear to implement any standards at all, even self contained ones like the HTML parser: https://github.com/danfragoso/thdwb/blob/655eac96e4faa141cb4...
436.
by esprehn 6y ago
It's Latin1 which I think is code page 850: https://en.m.wikipedia.org/wiki/Code_page_850
437.
by esprehn 6y ago
It's latin1. The same is true of DOM strings in Chromium, like attributes, blocks of text, and inline scripts. Webkit and the JDK implement the same string optimization, while .NET unfortunately doesn't: https://github.
438.
by esprehn 6y ago
I think the assumption is that mom and pop shops have a better baseline working environment, ex. https://www.google.com/search?q=amazon+warehouse+ambulance "How much better" would be things like AC when the weathe
439.
by esprehn 6y ago
Oh that makes sense, I had forgotten about the old substring sharing optimization.
440.
by esprehn 6y ago
According to this benchmark much larger binary size, but similar performance: https://bellard.org/quickjs/bench.html that was a while ago though.
441.
by esprehn 6y ago
That throws an exception though, while this code is trying to return 0. The java "fix" would be to add a charAtOrDefault(), but that doesn't seem to exist. The source of charAt is also interesting because it manually bounds c
442.
by esprehn 6y ago
I suspect a lot of FB customers are using a browser in a business setting where IT manages the Chrome updates. FB could have used a polyfill though, or used Safari, or shipped a desktop wapper around an older Chrome temporarily. Electron wa
443.
by esprehn 6y ago
This story is a fun read, but the "Chrome could ruin us at any moment" angle is more story telling hyperbole than reality. At that time on Chrome we were just figuring out a process to remove features and were pretty conservative.
444.
by esprehn 6y ago
At the time this story takes place Chrome didn't have a way to collect web feature usage metrics broken down by site. It was aggregated across all sites to protect user privacy. That came years later with Rappor: https://www
445.
by esprehn 6y ago
Most browsers have moved, or are moving, to cache partitioning to mitigate this: https://www.chromestatus.com/feature/5730772021411840 Safari shipped this a long time ago, and all other browsers are following that path
446.
by esprehn 6y ago
When I worked on the SpaceX UI I don't remember the chromium version being super old. What was your experience with the pinning?
447.
by esprehn 6y ago
Safari's JS engine is open source: https://trac.webkit.org/browser/trunk/Source/JavaScriptCore
448.
by esprehn 6y ago
I've removed a bunch of features over the years from Blink/Chromium so I get where they're coming from (and I've written basically the same rationale about the implementation being buggy and unmaintained/not on a pa
449.
by esprehn 6y ago
This is a feature that would save memory though. Instead of running N different copies of Electron or both Firefox and Electron, you could install PWAs to your desktop and have a single running browser on your system.
450.
by esprehn 6y ago
It's an old hacker reference to "eleet": https://en.m.wikipedia.org/wiki/Leet

More ›