mlinksva

7 ms·

61.
by mlinksva 3y ago
Though it barely mentions security https://willcrichton.net/notes/portable-epubs/ is one of my favorite essays to be posted to HN in awhile https://news.ycombinator.com/item?id=39138042 I wonder h
62.
by mlinksva 3y ago
Japanese gardens feature extremely strongly. Is this due to where they tend to be built, something about their design, or some selection effect (ie bias in the data), or something else?
63.
by mlinksva 3y ago
That's OK (sarcasm), Basic Income without cheap transportation and housing (each of which huge private vehicles are detrimental to) is Sisyphean.
64.
by mlinksva 3y ago
My assumption is like the other replies, taller is expensiver, but apparently sometimes there is a sweet spot for more height in one building, eg browsing around Wikipedia as a result of OP, the tallest building in Tulsa Oklahoma: https:&#
65.
by mlinksva 3y ago
Sad to read of a relocation (Phoenix to Austin) breaking up the band, so to speak. But glad the result could be more competition. Curious if any more has been published with Motorola management's rationale for the move. None of the sta
66.
by mlinksva 3y ago
Thin article, lots more at https://en.wikipedia.org/wiki/Interoceanic_Corridor_of_the_I... including a map and plans going back to 1837 and the official site https://www.gob.mx/ciit
67.
by mlinksva 3y ago
Supporting Android 5.0+ is impressive, though there was another file manager supporting Android 1.0+ discussed recently https://news.ycombinator.com/item?id=38789958 (I'm impressed by both, not an Android developer, cu
68.
by mlinksva 3y ago
Also, similar thread from a month ago https://lobste.rs/s/r8vitn/misty_programing_language_from_cr...
69.
by mlinksva 3y ago
Crockford's RacketCon 2023 talk https://www.youtube.com/watch?v=vMDHpPN_p08 covers Misty (it's apparently specification-only so far) and is generally fun. Added: couple of previous submissions with a handful of co
70.
by mlinksva 3y ago
Wish I could say for certain, but we'd need the final texts of the CRA and PLD, and EU lawyers, to say for sure. This is the sort of situation that the general aim of the EU policymakers seems to be to avoid what they'd see as loo
71.
by mlinksva 3y ago
The CRA is not about liability or consumer compensation. The remedies for non-compliance are fines or removal of a product from the EU market. The forthcoming update of the Product Liability Directive, which will probably take a similar app
72.
by mlinksva 3y ago
Play money, but https://manifold.markets/quther/will-mozilla-still-maintain-... has "Will Mozilla still maintain Firefox in 2030?" at 71%
73.
by mlinksva 3y ago
See my reply to a similar sibling https://news.ycombinator.com/item?id=38775375
74.
by mlinksva 3y ago
We are incredibly wealthy by historical standards (see also Gapminder's long term trends linked from the OP https://www.gapminder.org/facts/improvements/ ) because all of the jobs of yore have disappeared, man
75.
by mlinksva 3y ago
2023, no mention of AI (which I consider hugely positive; AI that is, not lack of mention). Still, I appreciate the creativity. It's a great list, some stuff I didn't know about. #96 (Azerbaijan/Armenia relations breakthrough
76.
by mlinksva 3y ago
Neat : Nice :: D : Java ~1.3 Well, the names (which I enjoy) are similar anyway, that's what made me think of the no doubt overstated analogy.
77.
by mlinksva 3y ago
The OP does mention Austal as one of a few languages putting their own twist on Rust learnings, though the most interesting thing to me about Austral is indeed https://borretti.me/article/how-capabilities-work-austral
78.
by mlinksva 3y ago
I'd seen that https://www.graalvm.org/latest/security-guide/polyglot-sandb... is JavaScript-only at this point, I guess it must build on https://www.graalvm.org/latest/reference-manual&#x
79.
by mlinksva 3y ago
I've been idly wondering, what is the relationship between memory unsafety, or more generally, undefined behavior, and ambient authority? For security purposes, is the former a special, unintended (for the most part, it's a bug) f
80.
by mlinksva 3y ago
> We know in order to make JIT more useful we need to move some of the Gems from C to Ruby. Just curious, how well do we know this, e.g., theory, experiments, it's being done, or ? It'd be fun if RiiR[uby] were a small part of
81.
by mlinksva 3y ago
I was curious what the DRC map on https://valkyrie.cdn.ifixit.com/media/2023/12/06065751/disas... (included in the post) could signify. Search found (view HTML or click "More about our materials&quo
82.
by mlinksva 3y ago
That's great, staying tuned! Plea to all language/languge ecosystem designers in 2023+ to design ahead for supply chain attack mitigations. Austral is one new language that appears to be doing so https://borretti.me&#x2
83.
by mlinksva 3y ago
> recently added support for package management Are there any [plans for] supply chain attack mitigations? Naively searching, I find https://github.com/flix/flix/issues/4380#issuecomment-123641... (Propose
84.
by mlinksva 3y ago
Indeed, thanks for explaining. Oh, and your mention of Graal reminds me of reading here 56 days ago that it has some support (JavaScript-only at that time) for sandboxing itsself https://news.ycombinator.com/item?id=37572536
85.
by mlinksva 3y ago
Interesting. I presume harder to tamper with (due to CC) attestation wouldn't help if the developer were compromised/had ill intent/wrote an exploitable bug, while sandboxing or other confinement might (depending on the malwa
86.
by mlinksva 3y ago
From February. Seems current work might be in https://github.com/CyberHive/rust-cheri Did not realize until watching the video that this seems to be funded by the UK, thank you! https://www.ukri.org/wha
87.
by mlinksva 3y ago
Mesmerizing! Also thanks for sharing under CC-BY-4.0. Reminds me a bit of https://newpalmyra.org/ in spirit, though way more comprehensive. Love it in any case. I can't wait to be able to zoom around earth at any point
88.
by mlinksva 3y ago
Can't be solved completely, anything can be social engineered. But thats no excuse for not solving as completely as possible. I couldn't discern from the article the extent to which any technical vulnerabilty was involved -- or if
89.
by mlinksva 3y ago
Thanks for explaining and for your work! Not sure I have questions, just generally interested in making it easier/lighter weight/built-in to constrain ambient authority (for example, to mitigate supply chain risks), thus have it b
90.
by mlinksva 3y ago
https://www.graalvm.org/latest/security-guide/polyglot-sandb... looks very interesting though enterprise (not open source I assume?) only and maybe only for executing javascript? Or do I misunderstand, or is there

More ›