jchw

57 ms·

721.
by jchw 1y ago
> CGI and other "serverless" technologies have essentially the same benefits and drawbacks. Sometimes an AWS Lambda function has longer startup time than if you had a running process already waiting to service a web request, be
722.
by jchw 1y ago
> Like, if the administrator put something inside that directory Path traversal bugs allowing written files to land in the cgi-bin used to be a huge exploit vector. Interestingly, some software actually relied on being able to write exe
723.
by jchw 1y ago
> Serverless is a marketing term for CGI, and you can observe that serverless is very popular. No, it's not. CGI is Common Gateway Interface, a specific technology and protocol implemented by web servers and applications/script
724.
by jchw 1y ago
True, it is simpler to just simply never free memory and let process teardown take care of it, but I'm only disagreeing with the notion that it's non-trivial to write servers that simply don't leak memory per-request. I thi
725.
by jchw 1y ago
The part of the execution model that is dated is this: > having the web server execute stuff in a specific folder inside the document root just seems like a recipe for problems
726.
by jchw 1y ago
> Yes. The code is already shitty. That’s life. Let’s make the system more reliable so that small code mistakes are disasters. > This argument sounds a lot like “garbage collection is for bad programmers who can’t manage their memory”
727.
by jchw 1y ago
I feel it necessary to clarify that I am not suggesting we should use single-threaded servers. My go-to approach for one-offs is Go HTTP servers and reverse proxying. This will do quite well to utilize multiple CPU cores, although admittedl
728.
by jchw 1y ago
> Think about all the problems associated with process life cycle - is a process stalled? Should I restart it? Why is that process using so much memory? How should my process count change with demand? All of those go away when the lifecy
729.
by jchw 1y ago
php-fpm does work surprisingly well. Though, on the other hand, traditional PHP using php-fpm kinda does follow the CGI model of executing stuff in the document root.
730.
by jchw 1y ago
Honestly, I'm just trying to understand why people want to return to CGI. It's cool that you can fork+exec 5000 times per second, but if you don't have to, isn't that significantly better? Plus, with FastCGI, it&#x27
731.
by jchw 1y ago
I'm not going to argue there's any bar too low for Google to not clear, but also, it really is possible that it's just for the stupid AI feature they say it is. Just because it's something Google could feasibly do does
732.
by jchw 1y ago
Well, I didn't do a detailed survey into the ecosystem, but I think you might be underestimating the prevalence of setjmp/longjmp a little bit. For one thing, tons of stuff hard depends on libpng, and libpng only has limited s
733.
by jchw 1y ago
Oh cool, that would be a nice improvement for the ecosystem.
734.
by jchw 1y ago
I think WebAssembly could be amazing for taking chunks of existing programs and making them super portable (and sandboxed!), and it kind of is already, but boy, I was pretty surprised to just recently realize it's not really as polis
735.
by jchw 1y ago
I think you're talking about the extraction feature that came with ZIP folders. Aside from being clunky it's also rather inefficient and slow, it doesn't have any provisions for handling issues like mojibake, and is generally
736.
by jchw 1y ago
Windows has shipped with "ZIP folders" and the ability to create and extract ZIP files since the late 90s/early 2000s I believe (not sure exactly what version.) As of the latest versions of Windows 11, Windows ships with liba
737.
by jchw 1y ago
> It's interesting seeing people argue about AI, because they're plainly not speaking about the same issue and simply talking past each other. It's important to realize this is actually a general truth of humans arguing. S
738.
by jchw 1y ago
I don't suggest "follow this link" either, or even anything that mentions a link. Obviously it's an extreme example involving traditional prose, but think for example of a Wikipedia article: the links in Wikipedia articl
739.
by jchw 1y ago
Hmmm. My first thought was they were avoiding the word "website" in this case so that it would make more sense if you were viewing it on paper or outside of a hypertext environment. But actually, that would make "Get Amaya!
740.
by jchw 1y ago
I don't think it's suggesting "Amaya website" is an incorrect or bad phrase in and of itself, I think it's just using the different passages to show how they'd prefer you style links in hypertext. These days I
741.
by jchw 1y ago
I don't think this recommendation is suggesting it would be any better to do that; having a bunch of different links be just Amaya would be wrong too. If you had this situation you'd probably want to carefully choose different sel
742.
by jchw 1y ago
Ultimately, I'd say it's all about trying to ensure a level playing field and trying to make sure nobody has an unfair advantage, and "unfair advantage" is always somewhat subjective. In real world sports, it often manif
743.
by jchw 1y ago
To clarify I don't really mean "no client trust", I just mean less. There's a lot of ways to skin a cat when it comes to multiplayer architecture. (I realize you probably know this, but it's always worth repeating.
744.
by jchw 1y ago
Oh no, it's definitely not "fixable", it's hard enough to define cheating precisely less fix it. Like there's obvious cheating. Playing online chess games using an engine to tell you every move is cheating, and
745.
by jchw 1y ago
I definitely won't forget the cheap MP3 player I had when I was younger, a Sandisk Sansa Clip+, running Rockbox for much of its life. That thing was crazy small, had great audio quality (something something frequency response,) could p
746.
by jchw 1y ago
In the future, you no longer need to spy on internal game data to make an aimbot. https://arxiv.org/abs/2205.07060
747.
by jchw 1y ago
Oh, I know. It's perfect for anti-cheat though: it doesn't fix the problem, it slightly increases the cost/entry barrier, and it's a pain in the ass for consumers. It's just like all of the other current anti-cheat
748.
by jchw 1y ago
With anti-cheat the obvious (lazy, stupid) future is remote attestation. It's another way to kick the can down the road of actually going to "real" approaches to anti-cheat like less client trust, behavioral analysis, and sta
749.
by jchw 1y ago
I don't know the answer using the built-in VM attributes (I mean I'd guess probably, but I don't know how if so) but there's always nixos-generators for making VM images. Definitely used this for deploying VMs to cloud p
750.
by jchw 1y ago
That's fine. It doesn't need to be absolutely perfect, it just needs to be good enough. What isn't good enough is if you can't even use legacy apps because they're too small. What is good enough is if DPI aware

More ›