klabb3

58 ms·

721.
by klabb3 2y ago
It’s not security theatre in the rare case that the stated goals is to protect against physical attacks, or for hardware disposal. If the goal is to put “military grade encryption” sticker in the sales deck, or to pass some certification, o
722.
by klabb3 2y ago
Let’s see.. I assume the warning serves two purposes: 1. You may be talking to someone other than you think. This only makes sense with registered domain names. 2. Your data can be eavesdropped or modified by someone in the middle. This wou
723.
by klabb3 2y ago
> It's just an uphill battle for an application written in golang to be faster than a mature application written in C. Yes but Golang can be fast on almost every aspect too with some simple tricks. The main thing is the goroutine ov
724.
by klabb3 2y ago
> if Apple Computer had pushed the same product, […], HN would be celebrating the attention to privacy I don’t believe so, at least not if it’s enabled-by-default. > MS doesn't get the same benefit of the doubt Apple doesn’t rely
725.
by klabb3 2y ago
Making me self conscious, honestly. I’m not a patient and careful writer. That’s why I’m lurking in the comments.
726.
by klabb3 2y ago
It seems like a bad science yes, or perhaps editorialized by media. And completely unexpected that all information proliferation follow power laws. If they were comparing different categories of information (political, rage bait, technical
727.
by klabb3 2y ago
This is more of a linuxism no? I agree though, I have used Linux for decades but I never remember the usr, bin, local, etc permutations of magical paths, nor do I think it makes any sense. It’s a mess honestly, and is almost never what I wa
728.
by klabb3 2y ago
> a lot of the responses here seem really uncharitable. This isn't bad faith, it's just a rushed product with some poor planning. But it’s not the product people are criticizing, at all. Similar tools have existed for a long ti
729.
by klabb3 2y ago
From the outside just the instant name change alone really reeks of embrace-extinguish imo, even if technically licensing of the core engine is unaffected. Benthos is a broad enough product to have an auxiliary ecosystem around it, with plu
730.
by klabb3 2y ago
> But if this gets improved at the transport layer, seems like a win. What do you mean? TCP and HTTP is already designed for slow links with packet loss, it’s old reliable tech from before modern connectivity. You just have to not pull i
731.
by klabb3 2y ago
Close after 10-60s of complete inactivity, don’t use JS bloatware and allow for range/etag requests should go a long way though. The issue is people setting fixed timeouts per request which isn’t meant for large transfers.
732.
by klabb3 2y ago
Grump take: More complex technology will not fix a business-social problem. In fact, you have to go out of your way to make things this shitty. It’s not hard to build things with few round trips and less bloat, it’s much easier. The bloat i
733.
by klabb3 2y ago
> LLMs generally perform bounded computation per token, so they cannot reason about computational problems that are more than linearly complex, for a sufficiently large input instance. I can’t judge if this is true, because I don’t know
734.
by klabb3 2y ago
> I agree with your concerns, but wow do I miss the 1990s/2000s era of the internet. Things were so much more fun then. Yeah in one way people were much more casual and curious. But keep in mind everything back then were monoliths.
735.
by klabb3 2y ago
How can people possibly be surprised by this? It’s just another layer of obstacles between you and someone might be able to help and take action. At the absolute best, it could be an alternative to sifting through poorly written help docs.
736.
by klabb3 2y ago
Yes. But logging in still happens - you just get a token in response and use it for subsequent communication within some time period. It’s still a bad term for an identity / authentication system because logging in is just one small pa
737.
by klabb3 2y ago
It’s text by default, but you’re right. I would say it’s idiomatic to use text until needed, at least. But if the CRDT payloads allow binary it makes sense to avoid SSE.
738.
by klabb3 2y ago
> doesn't support binary data But HTTP is a text based protocol. Why do you need binary? > assumes that versioning is linear What does linear mean? Afaict SSE ids are opaque strings. > doesn't provide any way to add new h
739.
by klabb3 2y ago
You’re assuming that those systems were all implemented to the letter of that guide. That’s never the case. Often these type of guidelines are written to address recurring problems found in an organization.
740.
by klabb3 2y ago
The attacker would also have to bypass the WAF while posting the trigger string, so perhaps it’s not trivial. Still, the whole design of these heuristic WAFs feel quite weak.
741.
by klabb3 2y ago
> Unfortunately this is less suitable for integers larger than 64 bits, because then you run out of bits in the first byte. Just spitballing here but is it necessary to support every increment of octets? Do we really need a 7 octet/
742.
by klabb3 2y ago
The people who understand what it does and how it works are a minority. People will accept Microsoft’s recommended settings, often without even reading it. Enabling it by default is beyond irresponsible. Especially on desktops that are very
743.
by klabb3 2y ago
Also an explicit action. Look, most people don’t know anything about computers. If it says use recommended settings, they will go for it. Even an explanatory first-install screen with “consent” is just jumbo jumbo to regular folks. It’s not
744.
by klabb3 2y ago
100% true. The cult of land ownership is one of the most absurd norms in almost the entire world modulo the few nomadic peoples still around. It’s not just unjust and unsustainable but simply not pragmatic, judging by all exceptions: air sp
745.
by klabb3 2y ago
Right. I don’t see any conflict with that and Greek corruption and mismanagement. I was always on the side of the Greeks in that battle. If you lend you take risk. If you lend to a state you can’t take their democracy as collateral. The bea
746.
by klabb3 2y ago
> the faction that is in power allies with one(s) that is so far away from power as to never become a credible threat to it, in order to put the squeeze on a third faction that is actually a serious contender for the position of the firs
747.
by klabb3 2y ago
I think the EU has been better in that regard than individual European countries. The Wikileaks diplomatic cables in particular showed US coercion on a country by country basis. In Sweden, Wikileaks showed US diplomats gave a list of laws a
748.
by klabb3 2y ago
Didn’t realize you were here so let me be clear that I did overall find the paper so approachable that I could implement it with only a couple of outside pointers (also a little clever impl optimization around storing p if you’re curious).
749.
by klabb3 2y ago
Doesn’t wasm have a memory model as well? So unless you sandbox certain parts of it you can still in theory have access across different C functions, within the same wasm module? What seems nice about wuffs is that it has no side effects an
750.
by klabb3 2y ago
It's been a while, and maybe my brain has smoothened since my time in CS, but man this looks more confusing than it needs to be. First, the contradiction thing. It's just.. An error/panic, why? Anyway, fine. Then, there'

More ›