juliusmusseau

9 ms·

31.
by juliusmusseau 7y ago
Consider only this: "1.001" I'll use JavaScript numeric literals here as my translation medium (ironic!): Norway locale parses it to: 1001 USA locale parses it to: 1.001 France locale parses it to: NaN https://
32.
by juliusmusseau 7y ago
Here's some stuff where it would bite me in my work: - I sometimes use random 64 bit integers in my data (usually as cheaper synthetic guid-like keys). - I sometimes use CRC-64 hashes. - I sometimes use 2^63 as a sentinel.
33.
by juliusmusseau 7y ago
When the tests fail to 1.) experiment with numeric values greater than 2^53 or less than -2^53 and 2.) fail to carefully check the results even in the situations where they did experiment with such values.
34.
by juliusmusseau 7y ago
What about the 2^63 corner-case? Consider this JSON: {"key": 9223372036854775807}. With most parsers it never fails. But... some JSON parsers (include JS.eval) parse it to 9223372036854776000 and continue on their merry way. The p
35.
by juliusmusseau 7y ago
Because of this article (which I encountered a year ago) I would say Parsing JSON is no longer a minefield. I had to write my own JSON parser/formatter a year ago (to support Java 1.2 - don't ask) and this article and its suppor
36.
Why Bianca Andreescu got paid half as much as the men's Rogers Cup champion(cbc.ca)
2 points by juliusmusseau 7y ago|0 comments
37.
by juliusmusseau 7y ago
CSV. Just kidding, but I suspect it would be a lot faster.
38.
by juliusmusseau 7y ago
The one approach you missed on that blog post: put an envelope inside an envelope. Does anyone ever do this? { "original":"json", "goes":"here" } Signed: { "original_js
39.
by juliusmusseau 7y ago
Why alter the article's title? Original is fine: "Files are fraught with peril"
40.
New McLaren impounded minutes after driver leaves dealership(cbc.ca)
1 points by juliusmusseau 7y ago|2 comments
41.
by juliusmusseau 7y ago
The one time I ever used the Tor Browser (at work, out of curiosity), my desk phone rang within 5 minutes: the in-house IT security team wanted to know what I was doing. So you're not kidding when you say it makes one's internet
42.
by juliusmusseau 7y ago
This reminds me of Popehat's "Don't judge the victims too harshly" paragraph from Chapter 5 from his "Anatomy of a Scam" ( https://www.popehat.com/2011/09/18/anatomy-of-a-scam-inve
43.
Ask HN: Poetry or pip-tools or pipenv or requirements.txt?
1 points by juliusmusseau 7y ago|0 comments
44.
by juliusmusseau 7y ago
Good luck in the courts. Unfortunately that route is very slow. (You're probably looking at 1.5 to 3 years before you obtain any final orders - and then there's the issue of enforcing any orders you might obtain!)
45.
Investigation of QuadrigaCX cryptocurrency debacle turns up $28M in assets(cbc.ca)
2 points by juliusmusseau 7y ago|0 comments
46.
Julian Assange Deserves First Amendment Protection(harpers.org)
531 points by juliusmusseau 8y ago|436 comments
47.
by juliusmusseau 8y ago
For $35K.
48.
by juliusmusseau 8y ago
> Don't track hours. In Canada there are important federal tax credits (e.g., SR&ED) that work best if staff and contractors track hours in at least 4-hour chunks. But if a client hopes to get tax credits back for your hours, th
49.
by juliusmusseau 8y ago
Also, the "disable" in the signed case is much more powerful, since it disables all apps signed by the same key.
50.
by juliusmusseau 8y ago
There might be some risk to your business if a malicious person can get that number assigned to their phone since you're no longer using it.
51.
by juliusmusseau 8y ago
For those that don't know, D&B stands for Dun & Bradstreet ( https://www.dnb.com/ ). They have this concept of a D-U-N-S Number which basically means information about your business is in their database. Last I
52.
by juliusmusseau 8y ago
Exactly! I trust "you must do some things to obtain this" more than I trust "you don't have to do anything".
53.
by juliusmusseau 8y ago
My point was I would trust someone who drops $20 more than I would trust someone who drops nothing. $61/yr (USD) will get you an OV cert - there are 10% discount codes that are easy to find for these guys, and their list price is $67&#
54.
by juliusmusseau 8y ago
Funny thing about trust: I trust a developer who drops some $$$ on a code-signing certificate more than I trust a developer who doesn't. Even if it's just $20. Also, the validation requirements to obtain a code-signing certifica
55.
by juliusmusseau 8y ago
"So many good memories" - ha ha!
56.
by juliusmusseau 8y ago
Exactly! It often takes more time to assess whether your system is truly vulnerable to a given public exploit than it takes to just grab a newer version of the component. Also worth considering: getting pwned because of a 0day is no fun, bu
57.
by juliusmusseau 8y ago
I don't think they take cheques anymore. At least not in Canada? When I took out a payday loan they made me sign a PAD authorization (pre-authorized debit) that was timed to hit my account the same day as my next payroll. They also ne
58.
by juliusmusseau 8y ago
Sounds like it behaves a bit like a 1x participating preferred but without any special voting rights. (Presumably they vote their shares alongside the common voting shares?) I think it strikes a good balance between founder-friendly and inv
59.
Interesting perspective on Theranos scandal(bryanpendleton.blogspot.com)
2 points by juliusmusseau 8y ago|0 comments
60.
by juliusmusseau 8y ago
I'm just hoping DannyBee posts something to this thread! (He's a lawyer). https://news.ycombinator.com/user?id=DannyBee

More ›