ptx

30 ms·

391.
by ptx 2y ago
And another HN bug, I think: Comments are wrapped in "span" elements (which are inline elements) but contain "p" elements (block elements) which is not valid: <span class="commtext c00">...<p>..
392.
by ptx 2y ago
Bash feels more like a C buffer overflow vulnerability than a Lisp: When you're not careful your data tends to leak across its boundaries and get mixed up with your code. Is there a way to quote data in Bash to safely insert it into a
393.
by ptx 2y ago
Is it actually valid? W3C's HTML validator complains about invalid nesting. It might work because the HTML5 parsing algorithm produces well-defined results for broken HTML, but I'm not sure that's the same as "perfectly
394.
by ptx 2y ago
I wonder if we'll see a revival of Grail [0], Guido van Rossum's browser from the the late 90s with support for Python-based applets. :) His draft paper [1] from 1996 mentions some limitations due to lack of support for threading,
395.
by ptx 2y ago
> the application itself has thousands of not millions of allocated objects for everything from UI elements to WordArt There are ways to optimize those things, though, which developers might not be bothering with anymore. The Design Pa
396.
by ptx 3y ago
Maybe it's just me, but as a sighted user I have no idea how to read this kind of layout. My expectation would be that any sane designer wouldn't use this kind of layout in the first place. What's the "visual line"
397.
by ptx 3y ago
How come the CPython interpreter is so slow when compiled to WebAssembly? According to the figures in the article, it runs at 23% the speed of the native version. Wasmer, which they're using in the benchmarks, should run code "at
398.
by ptx 3y ago
In the case of toolbars though, I think flat buttons were OK given that the toolbar itself can easily be identified as a toolbar and you know that toolbars always contain buttons, so there is no need to identify each individual button as a
399.
by ptx 3y ago
That paragraph appears to be plagiarized from an Infoworld article [0] but with nonsensical changes to the punctuation (e.g. some of its semicolons changed to "– meaning"), which is why it makes no sense. [0] https://ww
400.
by ptx 3y ago
The part about making it easier for beginning programmers probably refers to JEP 436 [0] which allows you to leave out some of the tedious boilerplate around the entrypoint for simple programs, just like in Python (well, there is still some
401.
by ptx 3y ago
The conclusion of the article is clearly nonsense. How would the features presented, which include an API for generating JVM bytecode, "make it easier for beginning programmers to write programs without needing to understand the progra
402.
by ptx 3y ago
> Untargeted advertising pays 90+% less than targeted advertising. Perhaps if this kind of targeting is banned, the advertising budgets will be spent of untargeted advertising instead, raising the prices of non-targeted advertising? Pe
403.
by ptx 3y ago
Yes, but the phrasing about being "more proactive" seems to suggest that perhaps this approach has now been adjusted. However, according to Bugzilla [0] it seems to be about blocking HTTP downloads on all pages compared to previou
404.
by ptx 3y ago
Why do the global overrides for Flatpak need "!~/.ssh" when they already have "!home"? Doesn't the latter deny access to the whole home directory? (If not, I would have expected many more entries in that deny l
405.
by ptx 3y ago
This would be what's known as software-based fault isolation, right? Here's a paper from 1993: https://dl.acm.org/doi/abs/10.1145/168619.168635 I don't understand why this idea keeps failing to
406.
by ptx 3y ago
In can be with RLBox[0], which compiles the code to WebAssembly and then back to C. It's used in Firefox to sandbox various format parsing libraries. [0] https://rlbox.dev/
407.
by ptx 3y ago
That's not what they said in their update to the documentation[0] last week, which says that "although using libsystemd is a good choice, this protocol can also be reimplemented without external dependencies". It calls it a &
408.
by ptx 3y ago
None of the options seem very useful, though. Why block execution of PowerShell scripts when batch files, WSH scripts and plain executables can still run? You could try to prevent those other kinds of scripts from even getting onto the mach
409.
by ptx 3y ago
It's similar if you're invoking through the shell, which should be avoided for precisely this reason, but if you're launching a program directly (through execv or CreateProcess) there is one big difference: On Linux the parsi
410.
by ptx 3y ago
PowerShell has that whole execution policy thing, so you can't just launch a PowerShell script unless you wrap it in a batch file or some other script. I could see how allowing the user to whitelist individual scripts would make sense,
411.
by ptx 3y ago
This is a weird coincidence – I ran into this exact problem two days ago, the day before the post was published. I was just trying to write a simple batch script that accepted filenames as arguments and was surprised to find that there is n
412.
by ptx 3y ago
Is it? All I see about platforms in the release notes is in the context of different processor architectures. To run WiX you would presumably also need the Windows Installer libraries that are part of Windows, which I suspect are not cross-
413.
by ptx 3y ago
From Russ Cox's post[0] about this, it sounds like the place in the code that initializes the buffer with actual random data also uses the parts of the buffer that haven't been initialized. So there weren't two separate piece
414.
by ptx 3y ago
If you only need the basics, you can also use GNOME's msitools[0], which use the same XML format as WiX but don't require Windows to build the MSI package. [0] https://wiki.gnome.org/msitools
415.
by ptx 3y ago
I second this recommendation. In addition to using more sensible and consistent syntax, WixSharp also provides sensible defaults that just work, such as always using "major upgrades" so that you don't have to worry about MSI
416.
by ptx 3y ago
Why not cut out the middleman and have it generate the XML? Or let the LLM generate the MSI database directly, without WiX. (Good luck debugging!)
417.
by ptx 3y ago
> It's like cgi Right. Full of code injection vulnerabilities.
418.
by ptx 3y ago
Why would it matter that the thing being sabotaged is "completely visible, auditable , and reviewable"? Do you have any specific laws in mind that you think would not apply? If you were referring to the malicious code being contri
419.
by ptx 3y ago
They just added an example to the documentation[0] of how to implement the sd_notify protocol without linking to libsystemd, so a little bit of discarding systemd (or at least parts of it) does seem to be part of the solution. [0] https:&#
420.
by ptx 3y ago
Well, it is and it isn't: It has mutable pointers (branches and tags) to immutable nodes in a graph (commits).

More ›