hsivonen

29 ms·

241.
by hsivonen 9y ago
Unsurprising, considering that browsers load code on demand and despite the original vision for Java, the JVM and CRL tend to be used for apps for which it's acceptable to have slow startup time.
242.
by hsivonen 9y ago
> i have a question: why do any of this? As far as I can tell, to get Mr. Robot viewers to try Firefox Quantum. The Mr. Robot episode from Wednesday, as aired in the U.S., had a Firefox ad on a commercial break. (Note that I'm not e
243.
by hsivonen 9y ago
Are full ECDSA chains going to depend on the upcoming Let's Encrypt ECDSA root being in the client trust store or is there going to be cross-signing?
244.
by hsivonen 9y ago
When writing code it's a much better idea to write according to https://url.spec.whatwg.org/
245.
by hsivonen 9y ago
Apart from the difference in programming language, how does this compare to https://github.com/bluejekyll/trust-dns ?
246.
by hsivonen 9y ago
The fork is Firefox 52 ESR. It's probably enough to wait for some extensions that weren't ready when 57 was released, but 52 ESR isn't going to stick around indefinitely. SeaMonkey isn't a good role model here. Even befo
247.
by hsivonen 9y ago
Which, of course, is the worst way to use EV, because it makes both users who expect EV and notice when it's missing worried.
248.
by hsivonen 9y ago
Last I tried, more that 2 years ago, Ubuntu was able to install on LVM over LUKS over sofware RAID and boot from it in BIOS mode but the result in UEFI mode completed install but didn't boot. I wonder if that has been fixed.
249.
by hsivonen 9y ago
VDPAU existing since 2008 isn't the main thing. The main problem is that in order to have a benefit from decoding in the GPU, the frame needs to be displayed on the GPU without reading it into CPU-addressable memory. The video frame ne
250.
by hsivonen 9y ago
The amount of desktop usage hasn't gone down with mobile usage going up. Desktop isn't niche. That said, more market share for Fennec would be nice. (This comment written in Fennec.)
251.
by hsivonen 9y ago
The title here suggests the license was GPLv2 previously. It was GPLv2 and proprietary relicensing. That is, printer vendors were already able to not comply with the GPL when a proprietary license from Apple applied.
252.
by hsivonen 9y ago
We tried to get rid of the Ubuntu bit years ago but failed. Ubuntu has an incentive to broadcast that users are using the Ubuntu-shipped Firefox. Basically everyone who ships a browser wants to shout: “Look at me! I have market share!” Many
253.
by hsivonen 9y ago
Seems reasonable to remove HPKP. In my experience the use case that HPKP addresses the best is winning arguments with people who like ssh and think WebPKI and browsers are wrong. HPKP can be used to establish TOFU trust in the leaf key (but
254.
by hsivonen 9y ago
What's a good tutorial for restricting sftp access to a particular directory? (Assuming the same host supports ssh login, too.)
255.
by hsivonen 9y ago
I'm not pimeys, but on the debugging question: I use rr for debugging (with gdb's command-line UI; I wish a GUI like Eclipse supported rr). I can't emphasize enough that trying rr is worthwhile if you are developing in a lang
256.
by hsivonen 9y ago
Wacom Cintiq using Pixelmator according to https://mobile.twitter.com/linclark/status/86746972399853977...
257.
by hsivonen 9y ago
Pretty sure it's UB if the uint32_t* doesn't point to a correctly-aligned address. (IIRC, just computing the unaligned pointer is already UB before you dereference it.) On x86, the code might appear to work, though, if you don&#x2
258.
by hsivonen 9y ago
The new AMD CPUs look otherwise good, but it seems they still don't run rr. Giving up rr is not a reasonable option if the purpose of the workstation is developing software in the kind of language that gdb can make sense of (C, C++, Ru
259.
by hsivonen 9y ago
The simplicity of C relative to Rust is an illusion in the sense that the main thing that makes Rust feel difficult at first ("fighting the borrow checker") relates to a concern that's relevant to C (allocation lifetimes), bu
260.
by hsivonen 9y ago
Of the distros, Fedora has the strictest compiler bootstrapping policy, and Fedora seems to be doing great with Rust packaging (for a number of CPU architectures).
261.
by hsivonen 9y ago
Does it run aarch64 Crouton yet? (So far, Samsung Chromebook 2 + Crouton is the best setup I’ve found for 32-bit ARM development. Unlike phones and RPi form factor computers, it run at a stable clock speed under load, so it’s actually usefu
262.
by hsivonen 9y ago
The default in Firefox depends on which build, which operating system, which distributor. It's a boolean pref that you can flip the other way if you don't like the default you got.
263.
by hsivonen 9y ago
The normal (not the "EME-free" ones) builds download the Widevine CDM from Google shortly after being run. The EME-free builds have a boolean pref pre-flipped, so that it doesn't download the Widevine CDM unless you manually
264.
by hsivonen 9y ago
The way the C and C++ committees approach Unicode is even worse than Python breaking away from UTF-16 in the wrong direction (UTF-32 being the wrong direction and UTF-8 being the right direction). The first rule of reasonably happy C and C+
265.
by hsivonen 9y ago
Treating grapheme clusters as fundamental is slightly problematic in the sense that then the fundamentals change as Unicode adds more combining characters. A reasonable programming environment should still provide iteration by grapheme clus
266.
by hsivonen 9y ago
> Go and Rust expose UTF-8 at the byte level. This is something of a headache and may result in invalid string slices. It basically punts the problem back to the user. In Go, yes. In Rust, no. UTF-8 in Go is garbage in, garbage out. Rust
267.
by hsivonen 9y ago
I'm curious: Which operating system? The Linux x86_64 build experience has worked very well on Ubuntu for many years. These days you don't even need to copy and paste the apt incantations: ./mach bootstrap takes care of that.
268.
by hsivonen 9y ago
XSalsa20 uses 192-bit nonce in order to make the probability of collision of randomly-generated nonces negligible for some definition of negligible. Is there an explanation for what makes 128-bit nonces acceptable for Restic?
269.
by hsivonen 9y ago
Gecko has had off-the-main thread HTML parsing since Firefox 4. Docs: https://developer.mozilla.org/en-US/docs/Mozilla/Gecko/HTML_... WebKit/Blink put fewer parts of the HTML parser off the main thr
270.
by hsivonen 9y ago
Your example fetches the key from the keyserver without https. Fetching the key from the project's own site over https using curl is better. Edited to add: Fetching from a keyserver is OKish if a) you use the long form of key id and b)

More ›