hsivonen

41 ms·

361.
by hsivonen 10y ago
If you are in Europe (or at least some countries in Europe), it's illegal to read in-transit messages even if the recipient is at work and the interceptor is their employer.
362.
by hsivonen 10y ago
For how long do Sony phones get security updates? Are they at least monthly as with Nexus/Pixel?
363.
by hsivonen 10y ago
Still waiting for an Android vendor to differentiate by matching Apple in the length of time a given device gets security patches for the software.
364.
by hsivonen 10y ago
Initially Netscape Open Sourced Mariner that was on track to becoming the engine of Netscape 5 and was an evolution of the engine of Netscape 4. Netscape 4 lacked proper DOM support and proper CSS support. (Project to add DOM support was
365.
by hsivonen 10y ago
Did seccomp sandboxing make it to this release? (Not in the highlights listed.)
366.
by hsivonen 10y ago
I guess perf being a "gaming" thing on HN suggests that many developers aren't using AOT-compiled languages. More perf is still desirable if you compile Rust programs or large C++ programs. For the latter, it's not just
367.
by hsivonen 10y ago
That page doesn't explain the use of "uplift" to mean what's commonly called "upstreaming". That page refers to "uplift" meaning a patch being added to an older Firefox branch ahead of normal whole-br
368.
by hsivonen 10y ago
> The Pixel is beyond a joke, given its high pricepoint The price isn't even the biggest problem. Google ships the newest phone that gets Android security updates to only 5 countries: https://support.google.com/stor
369.
by hsivonen 10y ago
> Honestly, I feel safer writing in Rust than I do Java. Even Java has its footguns, especially with mutable state being shared across threads. Apart from big differences between Java and Rust like memory management (not just GC vs. life
370.
by hsivonen 10y ago
It's quite easy to serve over 2 GB of spaces over the network. (gzip, brotli)
371.
by hsivonen 10y ago
Should arrive in Firefox in early March. Also being tested in Safari. It's coming for real and soon.
372.
by hsivonen 10y ago
Firefox for Windows, Mac and Linux (x86/x86_64) can play DRM content using optional proprietary third-party plug-ins. Firefox itself as distributed by Mozilla is Free Software. In the case of EME-exposed plug-ins, Firefox handles the p
373.
by hsivonen 10y ago
I wish the notion of Rust 2.0 was definitively buried to remove the fear of Rust doing its own Python 3.
374.
by hsivonen 10y ago
H.264+MP3 in MP4 in HTML5 tends to work in non-Apple browsers.
375.
by hsivonen 10y ago
> Firefox only after version 52 do they finally support Widevine Dash, otherwise no EME prior to that. What's your source for this? Firefox shipped EME support for Adobe Primetime on Windows in Firefox 38. Firefox shipped EME suppor
376.
by hsivonen 10y ago
It's super-sad that "Unicode" is a prominent stated motivation for Python 3. Unicode in Python 2 was fundamentally broken in that whether it had UTF-16 semantics or UTF-32 semantic depended on how the interpreter was compiled
377.
by hsivonen 10y ago
SNI is sent even if the server ignores it.
378.
by hsivonen 10y ago
What's the mainline kernel story? Or story for ongoing kernel security updates by other means?
379.
by hsivonen 10y ago
Has anyone taken the Firefox security advisories since Pale Moon forked and checked how well Pale Moon has addressed the vulnerabilities?
380.
by hsivonen 10y ago
The "EME-free" build differs only by the default value for the "Play DRM content" checkbox. You can put a normal build in the equivalent state by unchecking the checkbox.
381.
by hsivonen 10y ago
Types in Rust have alignment as in C, and bad stuff may happen if you use unsafe code to violate alignment. It seems that at present, if you want to generate an unaligned SSE2 load/store, you have to rely on modern memcpy (spelled copy
382.
by hsivonen 10y ago
The previous post suggests that the mention of employer wasn't referring to Mozilla: https://tedclancy.wordpress.com/2015/11/04/rebranding/
383.
by hsivonen 10y ago
What are the benefits of using Debian's package for nginx instead of using one from nginx.org's apt repo?
384.
by hsivonen 10y ago
Interesting that they have a non-clang C front end. Did DEC have weird vendor-specifoc extensions to C?
385.
by hsivonen 10y ago
IIRC, Ghostscript used a scheme like this prior to 2006.
386.
by hsivonen 10y ago
To get an idea of what kind of grief arises from a legacy kernel on significantly newer hardware: XP doesn't know how to save and restore AVX register state across context switches. The cpuid instruction doesn't look at the OS, so
387.
by hsivonen 10y ago
Does customer demand drive "overscan on HDMI" by default, too? Who are those people?
388.
by hsivonen 10y ago
They serve the hash over https, so they are better than most: the provenance of the download is verifiable assuming that the server serving the hash hasn't been compromised. Whether a GPG signature would be better depends on whether th
389.
by hsivonen 10y ago
Sites that want to support IE8 on XP while disabling RC4. https://www.ssllabs.com/ssltest/viewClient.html?name=IE&vers...
390.
by hsivonen 10y ago
ISRG is a 501(c)(3).

More ›