mccr8

16 ms·

121.
by mccr8 11y ago
As esailija posted elsewhere in this thread, at least one study has shown that gender differences in mental rotation tasks can be eliminated through training.
122.
by mccr8 11y ago
Off-hand, I'd guess you can use these hints earlier in the loading process than you could start executing JS.
123.
by mccr8 11y ago
I don't know what Linux does, but Mozilla puts out security advisories for every release. https://www.mozilla.org/en-US/security/advisories/
124.
by mccr8 11y ago
Is the conversion tool actually open source? The Swiffy Wikipedia page says "There is a server-side component (source currently not public) that converts SWF to an intermediate representation serialized as JSON.".
125.
by mccr8 11y ago
Visiting only trusted sites is a niche use case for web browsers.
126.
by mccr8 11y ago
Generally, beta is supposed to be almost completely identical to the release version, to ensure that what gets shipped to release users is tested. This particular pref seems harmless, but you never know. Developer edition is what used to be
127.
by mccr8 11y ago
Being well-tested from the perspective of regular use is not quite the same as being well-tested from the perspective of defending against a hostile actor.
128.
by mccr8 11y ago
Chrome autoupdates Flash and Firefox blocks old versions of Flash. (I'm not sure what IE does.) That should help limit the number of people who are exposed.
129.
by mccr8 11y ago
The cynical interpretation is that discouraging people from opening many tabs means having less tabs open which means the browser performs better. This is particularly true in Chrome, which tries to use a process-per-tab, something you can&
130.
by mccr8 11y ago
Click on the hamburger. Click on "Customize". Drag the "Hello" icon off of the tool bar. It is now removed from the UI.
131.
by mccr8 11y ago
Yes, the CC list will subscribe you to email notifications about the bug, and does not really indicate support, only interest in receiving email notifications about the bug.
132.
by mccr8 11y ago
The size of each individual object is determined by calling malloc_usable_size on the block itself, so this includes any internal alignment, as well as any padding from the allocator after the object proper. So, you get the size of the obje
133.
by mccr8 11y ago
For what it is worth, this is just a draft.
134.
Distrusting New CNNIC Certificates(blog.mozilla.org)
22 points by mccr8 12y ago|2 comments
135.
by mccr8 12y ago
I realize that you are just making a snarky dig, but probably never. It would be a huge amount of work just to backport basic security fixes, and almost impossible to backport large architectural changes that are made in the service of sec
136.
by mccr8 12y ago
Apparently it is a thing in DC, known as "slug lines": http://en.wikipedia.org/wiki/Slugging The idea is that by picking up people, you can drive in the HOV lanes.
137.
by mccr8 12y ago
You can look at the local telemetry for your current Firefox session, including this variable, by going to about:telemetry, which sort of gets you what pbhjpbhj was looking for, albeit in an inconvenient and limited fashion.
138.
by mccr8 12y ago
Google used to run a separate contest (at the same conference as Pwn2Own) called Pwnium for Chrome OS, but starting this year they are moving to a model where they pay similarly large bounties year-round rather than at contests. http:&#x2F
139.
by mccr8 12y ago
All were running on Windows, except Safari which was running on OSX. You can see the details at this overly long URL from the contest organizers: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2O...
140.
by mccr8 12y ago
To mitigate this problem, Google has recently announced that they are running a similar program year-round: http://blog.chromium.org/2015/02/pwnium-v-never-ending-pwniu...
141.
by mccr8 12y ago
People certainly do find security vulnerabilities by reading source code.
142.
by mccr8 12y ago
And more money.
143.
by mccr8 12y ago
Why wouldn't they? As somebody pointed out elsewhere, ads on various scummy sites show up if you search for "Firefox" and other things on regular Google search. I'd guess people who are searching for something specific
144.
by mccr8 12y ago
None of it. The work on multiprocess Firefox is primarily an issue in the front end UI code (written in JS), and does not have much to do with networking or crypto. Another thing to keep in mind is that patch notes are a list of user-facin
145.
by mccr8 12y ago
This doesn't help with your main issues, but I think the Vimperator extension is a little better maintained than the Pentadactyl one.
146.
by mccr8 12y ago
I'm sorry that your experience with Firefox has been so poor. Web browsers are a complex application platform, and individual experiences can vary wildly. You may use some web page that does well on Chrome but poorly on Firefox, whil
147.
by mccr8 12y ago
You can add a custom search in Firefox by right clicking on a search box, then clicking on "Add a keyword for this search". Then save a bookmark with a keyword, like "so" for stack overflow. Then you can enter this in t
148.
by mccr8 12y ago
I'd guess that the larger barrier to the lack of saving is the desires of the copyright holders who decide what the EME module can do, rather than the permissiveness of the sandbox.
149.
by mccr8 12y ago
I don't know about Telefonica's role, but in general WebRTC needs external servers to deal with things like NATs and firewalls: http://www.html5rocks.com/en/tutorials/webrtc/infrastructure...
150.
by mccr8 12y ago
The underlying technology used to implement this is WebRTC, which is available to web pages. Implementing peer-to-peer real time video communication entirely in Javascript would be difficult, so it has to be provided to some extent by the

More ›