madez

51 ms·

511.
by madez 9y ago
The notion that there are so many users of digital devices and services because we are running untrusted, unaccounted code that is automatically executed is plain wrong. Hardware advanced in ways we didn't imagine in the past, and inte
512.
by madez 9y ago
> Personally I think it's easier and more likely that we attempt to fix a few web browsers than expect a millions of websites to change. This is the same argument I criticized before. The world doesn't change completely over ni
513.
by madez 9y ago
I don't program in JavaScript. > Anything you can do in wasm you can do in JavaScript, only was can do it faster. It's faster and more flexible because it can easily be targeted by compilers. That is the problem. This might sou
514.
by madez 9y ago
Commenting here works just fine without JavaScript.
515.
by madez 9y ago
> Unfortunately the genie is out of the bottle already. The web by and large requires javascript, and it's not likely to change. This fatalist stance is childish, and dangerous. As long as there are people working to make things bet
516.
by madez 9y ago
In South America you can also get a variety of bananas. I was surprised by how different bananas can taste. I'd really like to be able to buy them at supermarkets (in Germany/Europe), but you rarely get offered any type besides Ca
517.
by madez 9y ago
Would you mind to share your experience with developing open source software so others can learn? Is it the same one can read elsewhere like unthankful and demanding people or just sheer amount of work, or something totally different?
518.
by madez 9y ago
I get your point.
519.
by madez 9y ago
I consider it an unacceptable form of code deployment. It's unsafe in the computing sense, and leads to a ecosystem where users are less and less in control of the software they use.
520.
by madez 9y ago
Oh, also you have at least such an authorized source of code unless you have writtem every bit of software yourself. You might be unaware what the sources are. If you use Google Chrome with auto updates, for example, you've made Google
521.
by madez 9y ago
In most distros you don't even need the URL but just the name and get the program in seconds, including signed code that is vetted for by maintainers. Usually you also have many runtime options in the config file, if not in the program
522.
by madez 9y ago
You seem to misunderstand. It's not about not using CPUs or GPUs, but about what code runs on them, and how that code is accounted for. Who vetted for it and who is responsible for it?
523.
by madez 9y ago
First, at least the driver of Nvidia is affected in an unspecified manner. [0] Second, the hardware is opague and runs unknown firmware. What lies sill in there? What will in future lie in there? Third, how do these hardware components inte
524.
by madez 9y ago
We need everything but more attack surface. Do you really think the WebGL runtimes are safe and don't leak data through a side channel, possibly combined with the running JavaScript code? To make matters worse, the hardware is opague,
525.
by madez 9y ago
We already have one in the system, why duplicate the effort? Also, It is important to keep the number of authorized sources of code to a system small. If you insist on using that horrible language, you can deliver a webapp that runs in a Ja
526.
by madez 9y ago
> They existed for years before and I'm sure issues will exist for years after. How is that an argument for more lenient rather than more extreme measures?
527.
by madez 9y ago
I didn't say that. It's more oil to the fire.
528.
by madez 9y ago
Best case is you get the source or binary package from your trusted package manager and run/compile that. If that is not available, and you still really need the result of that piece of code, fetch the code, compile it and run it. Code
529.
by madez 9y ago
You don't.
530.
by madez 9y ago
Seriously, we are having immense trouble with securing CPU virtualization and now we are talking about GPU virtualization for unreviewed, unaccounted, automatically downloaded and executed code? Stop this madness. Use native code and native
531.
by madez 9y ago
> sad outcome if you're not pure in the Stallman-sense. What do you mean?
532.
by madez 9y ago
Well, there is the ME for one, an omnipotent, mandatory backdoor. Then there are _many_ undocumented opcodes. What does 0f0d00 do? What 0f78c0? What dbe0? I can continue for a very long time. These are just some known unknowns. If you still
533.
by madez 9y ago
Thanks for the info.
534.
by madez 9y ago
There is no too late for sane and open standards. We shouldn't give in to the market when the market is wrong.
535.
by madez 9y ago
A way to achieve that in declarative HTML or equivalent sane technology can be worked out and be implemented, if it isn't already. JavaScript is used for many small things where you don't need the expressive power that JavaScript
536.
by madez 9y ago
That's because companies want to keep making money by using data from users they would never give otherwise and by keeping control over the software people depend upon after it was clear that free software won on the users computers. T
537.
by madez 9y ago
I didn't know what to expect to see. I vaguely assumed to see some text and data. That's why I carelessly formulated my question like I did. Still, I think the difference is small and my question wasn't extraordinary.
538.
by madez 9y ago
Could you make the website viewable without JavaScript? Edit: I think the downvotes are unjustified. For clarification, if that wasn't clear by context, I don't expect to get the JavaScript test results from my computer while view
539.
by madez 9y ago
> Do you also run an open BIOS, no CPU ME, no cellphone basebands, OSS controllers in your hard drives, and control the firmware on all of your USB/PCIe peripherals? I saddly can't answer all these questions with yes yet, but I
540.
by madez 9y ago
I didn't state how I think it should be, but how reality is. Now, for your mother, the government has the responsibility to protect the people from harms the people can't solve on their own. This happens in crime investigations, e

More ›