progval

10 ms·

151.
by progval 1y ago
> They should be tied to cryptographic keypairs (client + server). So now, if a website leaks its private key, attackers can exfiltrate cookies from all of its users just by making them open an attacker-controlled link, for as long as th
152.
by progval 1y ago
If you want more of this: https://www.youtube.com/watch?v=Y65FRxE7uMc . You can skip to 7:45 if the long intro bores you, but it's worth listening to it.
153.
by progval 1y ago
How is that different from what the article documents?
154.
by progval 1y ago
It's indeed not a good one. Discord refined instant messaging and bolts other things on top like forums but isn't fundamentally different. Google Wave was (and still is) a completely different paradigm. Everything was natively col
155.
by progval 1y ago
Do you have examples of lies that the majority was indoctrinated to believe?
156.
by progval 1y ago
For what it's worth, you can already do: x = retry(3)(failure_prone_call)(y)
157.
by progval 1y ago
But that's not end-to-end encryption, that's a pastebin with a login
158.
by progval 1y ago
"send end-to-end encrypted (E2EE) emails to anyone, even if the recipient uses a different email provider" but the video shows Gmail asking the recipient to authenticate. How does that work? If a Gmail user sends an email to my se
159.
by progval 1y ago
> - They got rid of the heavyweight compression and just stuck with the Delta/Dictionary/RLE stuff. Heavyweight compression never did anything anyway, and was super annoying to implement, and basically required you to pull in 2
160.
by progval 1y ago
I love that the two replies to this comment are: "this definition matches no technology in existence" and "So, like my coffee maker?"
161.
by progval 1y ago
Then don't put anything on the root domain and use www.paypal.com for the main operations. corp.paypal.com's cookies are separated from www.paypal.com's.
162.
by progval 1y ago
> who wants to reach the point where you find that out? Enough people to steal 20 billion USD a year according to https://stripe.com/en-fr/resources/more/chargeback-fraud-101
163.
by progval 1y ago
I don't know what to make of it. The author looks prolific in the field of ML, with 8 published articles (and 3 preprints) in 2025, but only one on LLMs specficially. https://scholar.google.com/citations?hl=en&user=
164.
by progval 1y ago
You need to spend a lot of time looking through badly labeled offers, and be willing to buy from sellers with no reputation.
165.
by progval 1y ago
> 2. U2F/Webauthn key as second factor is phishing-proof. TOTP is not. TOTP doesn't need to be phishing-proof if you use a password manager integrated with the browser, though.
166.
by progval 1y ago
It depends on how you identify a timezone. If you use an IANA identifier then short of a war it's pretty safe that the place of the appointment will use the same IANA timezone; because those follow changes in DST rules and even changes
167.
by progval 1y ago
> Why? Because perhaps in 2030 Russia has taken over Dnipro and moved it from Europe/Kyiv to Europe/Moscow. Not that in invalidates your overall point, but in that case the TZ database would create a new timezone (eg. named Eur
168.
by progval 1y ago
It is not computer-friendly because the timezone is unspecified. And in some timezones, it is ambiguous during changes from DST to winter time.
169.
by progval 1y ago
Do you have an example of "inlined JSON on github.com pages"? I can't imagine what this looks like.
170.
by progval 1y ago
Or they believe that people are too stupid to understand how good their product is.
171.
by progval 1y ago
"Passkeys are incompatible with open-source software" https://www.smokingonabike.com/2025/01/04/passkey-marketing-...
172.
by progval 1y ago
Which ones?
173.
by progval 1y ago
By lobbying regulators to force your competitors to add watermarks too.
174.
by progval 1y ago
From the OP: "It affects independent developers, FOSS contributors, and even regular users who want to install apps outside of Google Play"
175.
by progval 1y ago
Probably https://www.gnu.org/philosophy/right-to-read.en.html , mentioned elsewhere in the thread.
176.
by progval 1y ago
> The hypothetical "library of all possible books" isn't useful to anyone. That's an archive, and it has its own uses for researchers, especially historians.
177.
by progval 1y ago
> why do hydroponics always seem to involve indoor/UV lighting? Hydroponics and artificial lighting increase density (no/less volume wasted by dirt, and can stack plant beds on top of each other). UV lighting is more power-effi
178.
by progval 1y ago
No, because you don't incentivize the training of the next version of LLama, and the current version was not trained because you wanted to run that query. This is not true of Gemini.
179.
by progval 1y ago
There are, but they each have their tradeoffs. Proof of work and micropayments (eg. Xanadu or Internet Mail 2000) schemes solve spamming and LLM scraping, but are more expensive or more CPU-intensive. P2P systems like FreeNet too, but they
180.
Making Your Own Merchant Service Provider(voidfox.com)
268 points by progval 1y ago|174 comments

More ›