ploxiln

39 ms·

361.
by ploxiln 7y ago
yup, I've used stdlib urlopen in an assortment of scripts, it works, even with python2/python3 cross compatibility: if sys.version_info[0] == 2: from urllib2 import urlopen, Request # python2 else: from
362.
by ploxiln 7y ago
Has the potential to ... but in practice, no. Websites which do this overwhelmingly use "best practices" frameworks, libraries, packers, minifiers, and up with an extremely dense 1 MiB javascript bundle, while the meaningful html&
363.
by ploxiln 7y ago
Don't penalize GitLab too harshly for having public issues and discussion. The obvious fix will be to just not have all this public, which is what all other companies of non-trivial size do. I think the CFO's comment was illuminat
364.
by ploxiln 7y ago
I think "analytics" has become a no-brainer among product managers at all tech companies. It seems like no company, not even GitLab, can escape the irresistible urge by management to add analytics. Arguments against it within the
365.
by ploxiln 7y ago
I don't think Purism is malicious, I just think they are just not sufficiently competent. There is just too much "fake it till you make it". I think they have had some very competent employees over the past few years, who j
366.
by ploxiln 7y ago
My understanding is that /dev/random "entropy depletion" is because of FIPS or other enterprise/government certification requirements. It does not make logical sense, it just has to be that way, because requirements
367.
by ploxiln 7y ago
I think it was sort of the opposite. That was about the new "walrus operator" (:=) and there was quite a lot of proposals, consultation, a PEP, and lots of flaming on public mailing lists, and apparently this flaming included peop
368.
by ploxiln 7y ago
> So finally with getrandom() Linux has a way to securely generate random data without unnecessarily blocking, and now Linus seems to be floating the idea to break it again! Yes, getrandom() works pretty much the "right" way. B
369.
by ploxiln 7y ago
Sometimes the first price quoted is just a formality. One time my significant other went to an optometrist for a contacts prescription, without optical insurance (long story), and the bill was for $1000. She emailed asking why, and they jus
370.
by ploxiln 7y ago
Are you sure? I think these dns names are deterministic, they never change, for example www.10.0.0.1.xip.io will always resolve to 10.0.0.1 - and I don't think there is a mode where a name could resolve to different ipv4 addresses at d
371.
by ploxiln 7y ago
I think people worry too much about these "misinformation campaigns". I think the idea behind this worry is "most people would not disagree with me unless they were brainwashed - we can't let people I disagree with do th
372.
by ploxiln 7y ago
It just has to kill something. The choice is between killing some things, or freezing everything, for way too long (many minutes). I'll agree that Windows and macOS aren't perfect here. But I expect better, that's why I prefe
373.
by ploxiln 7y ago
It should have been clarified, because it is not obvious: The kernel can evict memory-mappings of executable files which are currently running. When they jump to a part of the executable that is no longer in memory, it can page that part ba
374.
by ploxiln 7y ago
... but you can't remove major features while retaining compatibility. So for the most part you can only add stuff. So, people switch to new simpler languages. The way you remove things from a language is to create a new one. Then thes
375.
by ploxiln 7y ago
Looks like this integration is being developed primarily by a Google employee, rather than a Mozillian ... so perhaps Mozilla is still not particularly into this idea :)
376.
by ploxiln 7y ago
They really only ever make it worse. Initially, there was USB 3.0 at 5Gbps, USB 2.0 at 480Mbps, and USB 1.1 at 12 Mbps. Then, when they added a 10Gbps mode, they called it USB 3.1 Gen 2, and renamed USB 3.0 to USB 3.1 Gen 1. They already ha
377.
by ploxiln 7y ago
strcpy() - sure it is fairly often used unsafely, strlcpy() or snprintf() or similar should generally be used. But memcpy()? It takes an explicit length, which you have to calculate. What's the alternative? memcpy_s() does part of the
378.
by ploxiln 7y ago
> Signal also doesn't verify identities with phone numbers. In practice, the only allowed implementation does. It finds your contacts based on phone number, it allows them to use any keypair, and it allows that key to change at any
379.
by ploxiln 7y ago
I've never wanted that. I really don't think this is the one think holding back firefox popularity on mobile. But luckily, firefox on android does support extensions: https://addons.mozilla.org/en-US/firefox&#
380.
by ploxiln 7y ago
Why did you go through it? You didn't have to, you could have waited a couple of years. dep still works. A custom script to populate a GOPATH with specific versions or forks of all needed modules still works.
381.
by ploxiln 7y ago
It's pretty obvious that the only real fix is to accept money in exchange for putting an image with a hyperlink on your website. Anything involving javascript will do shenanigans for various reasons. Fingerprinting via any means possib
382.
by ploxiln 7y ago
They did not want to create a new "keyword" that would possibly conflict with some existing variable name. So try() is a built-in function, similar to len(), and if you already have a variable named "try" (or "len&q
383.
by ploxiln 7y ago
The root of the issue is that, while you can write most of the code in C (but not all), it has to be different for different operating system kernels. It will use different syscall numbers, argument size and order and "extra options&
384.
by ploxiln 7y ago
Do a lot of places really say not to do this? I think it's fine, and way better than using SMS as your second factor ...
385.
by ploxiln 7y ago
Keep a sense of scale. 30 KiB is small. If all the libraries you use add up to less than 50 KiB, then really, no one will notice. Think of a "modern best-practices" site that uses a big framework and some big addons and feature li
386.
by ploxiln 7y ago
True - and reports seem to be that the actual compiled code is like 18 MiB. It's the comparison to these huge android apps that got me. I could do this for android too: keepassdroid is 4 MiB, zxing barcode scanner is 0.7 MiB ... So man
387.
by ploxiln 7y ago
pip, virtualenv, setup.py using setuptools, and twine if you need to publish to PyPI, are all pretty old and well-established, and are all still a fine way to do python development.
388.
by ploxiln 7y ago
Your standards are unfortunately warped by modern trends. Almost all popular apps are hugely bloated because the developers just don't care, the focus is on UI re-design and feature churn and the illusion of ease of development. Some c
389.
by ploxiln 7y ago
... and 2.7.10 is from May 2015 - 4 years ago
390.
by ploxiln 7y ago
This is a well known problem - thus the "securemodelines" plugin: https://github.com/ciaranm/securemodelines

More ›