kevincox

21 ms·

421.
by kevincox 2y ago
Yeah, my jaw was dropping as I realized how far they went with this from checking their mount options to reading ext4 source code. Directly order is almost always an implementation detail (I'm pretty sure it is on ext4) and even if it
422.
by kevincox 2y ago
My main method is the >400 points feed: https://hnrss.org/frontpage?points=400 That gives a handful of items a day that I can decide if I want to read or not. I tweak the threshold every once and a while when I feel like
423.
by kevincox 2y ago
Of course there is a difference the other way. With a government run payment system only the government knows it. Not the government and some for-profit corporation.
424.
by kevincox 2y ago
It's not at all comparable to C++ UB as React says what will happen in this case. But what React does is slow and has bad UX.
425.
by kevincox 2y ago
The problem is that React's handing of this isn't good if the initial render isn't a match. At the very least it will mess up form fields including browser-saved values. It can also be very expensive. So even though the clien
426.
by kevincox 2y ago
But Parquet is intended to be a safe format. So importing a malicious file should still be safe. Like if a browser had a vulnerability parsing HTML of course it is a major concern because very often browsers to parse HTML from untrusted par
427.
by kevincox 2y ago
But the grandparent is saying that there is a missing class of input "data". This should not be treated as instructions and is just for reference. For example if the user asks the AI to summarize a book it shouldn't take anyt
428.
by kevincox 2y ago
Yeah, it was a bit strange but it did fit the theme of board games which was a solid hint.
429.
by kevincox 2y ago
FWIW the spinning scrolling effects of Apple release announcements are nearly as bad.
430.
by kevincox 2y ago
I've also seen a lit of int ly typed code. Where IDs and stuff are just plain numbers. Seen lots of bugs, often security relevant when the wrong int gets passed to the wrong parameter.
431.
by kevincox 2y ago
Yes. Any local process can connect to a TCP port (unless special care is taken) so it should be a last-resort option. Additionally the sever either needs to be run as root to bind a privileged port or any application can race over binding t
432.
by kevincox 2y ago
Yes, this sounds like the root cause. Maybe we should have a way to take someone to court that doesn't rely on knowing their address (and ideally is more stable over time than an address, and less ambiguous if there are multiple people
433.
by kevincox 2y ago
Yes, but if you want to hold someone accountable you should take them to court where it can be fairly decided, not show up at their home address.
434.
by kevincox 2y ago
IIUC part of the reason is so that you can sue people. You need to know their address to serve them papers. IIUC this is part of the reason why anyone is allowed to snail-mail you and we don't have spam laws for physical mail like we d
435.
by kevincox 2y ago
My favourite feature is when spotlight tells me that indexing is paused when I am searching for something. You went through the effort to show some UI when something I am looking for may not be there because indexing is paused... but you di
436.
by kevincox 2y ago
Ah, I thought the quote was from the JS spec. I didn't realize that ECMA published their own copy of the JSON spec.
437.
by kevincox 2y ago
I understand this argument in general. But basically everyone has some sort of spreatsheet application that can read CSV installed. In some alternate worked where this "binary" format caught on it would be a very minor issue that
438.
by kevincox 2y ago
> and does not assign any significance to the ordering of name/value pairs. I think this is outdated? I believe that the order is preserved when parsing into a JavaScript Object. (Yes, Objects have a well-defined key order. Please d
439.
by kevincox 2y ago
We had a fun bug where our VPN was crashing on macOS. The error was pretty clear, we were subtracting two timestamps and getting a negative, which should never happen as these were from a monotonic clock. We spent lots of time analyzing all
440.
by kevincox 2y ago
IANAL but I'm pretty sure the issue is distribution, so as long as they don't sell their dishwasher in China it isn't their problem. If someone buys and resells it in China then the reseller is in trouble. (Obviously it is a
441.
by kevincox 2y ago
> They do require a one-time connection to perform key exchange of a long-live authorization key What does my offline dishwasher need a long-lived authorization key for?
442.
by kevincox 2y ago
> an AI algorithm In reality this is just some secret combination of the above metrics (assuming there are no "bugs", which there surely are).
443.
by kevincox 2y ago
Technically IP doesn't have ports. TCP and UDP (and others) individually have the concept of port. So it makes sense if you want a port filter it is a TCP specific rule. ...of course it is common enough that it would make sense to abst
444.
by kevincox 2y ago
That isn't even the biggest problem. That breaks, and breakage gets fixed. Other than some slight internal delays there is little harm done. (You have a backup emergency deploy process that doesn't depend on GitHub anyways right?)
445.
by kevincox 2y ago
This isn't an outlandish idea. For example V8 has "pointer compression" https://v8.dev/blog/pointer-compression/ . This is basically just 32-bit pointers with a know base offset. They still point at
446.
by kevincox 2y ago
In theory you could use 3 extra bits for a bit pointer. Although the fact that a void* could hold it (or you need to make void* larger) would likely be an issue. The funny thing is that there are much more than 3 wasted bits on 64 bit point
447.
by kevincox 2y ago
That is maybe questionable behaviour from the headphones. But the worse problem is that there is no way to change what media player is used. I don't use Apple Music, have no songs in it and no subscription. But it opens that rather tha
448.
by kevincox 2y ago
Pennywise pound foolish and harming UX at the same time. They could just require that Spotify logs the plays and uploads them on the next connection. Resulting in more plays and more money. But instead they block it for the 0.1% of the time
449.
by kevincox 2y ago
Because everyone is on a spectrum. [xyz] wasn't the straw to break this user's back, but it will be the tipping point for some number of users. [xyz] is also moving this user closer to the edge, so when Apple does [abc] the sum of
450.
by kevincox 2y ago
So what? Why not let there be flashlight apps if users find them useful? Apple doesn't have to recommend them in the app store and can sort them to the bottom of search results page. But why can't the exist. If people don't w

More ›