ptx

68 ms·

901.
by ptx 5y ago
Is there a good solution for getting good graphics performance with VMs, aside from using QubesOS and its special shared-memory thing[1]? Plain X11 is obviously out of the running, as that gives clients far too much access. Apparently[2] Xp
902.
by ptx 5y ago
Not a great video. He starts by attacking Robert Martin for taking 10 minutes to get to the substance of his talk, but then his own video never progresses from there and never gets to anything substantial.
903.
by ptx 5y ago
It's not quite the same, as JS doesn't have what's known as pass by reference in VB. JS and Python always pass object references (pointers) by value (the value being the memory address), but in VB you can pass references by r
904.
by ptx 5y ago
> 4. A named array is normally passed by reference, as in F(A). But if the argument is not a bare name, as in F((A)), it is passed by value. Visual Basic (VB6/VBA) does exactly this, with the same syntax (except without the outer
905.
by ptx 5y ago
It does. It sounds like the Unicode handling in Python 2, where your program would still appear to work if it confused bytes with codepoints (through implicit decoding/encoding), until you get a non-ASCII input somewhere and everything
906.
by ptx 5y ago
Ownership by Microsoft isn't great either, unless you enjoy jumping through hoops to disable their telemetry[1]. [1] https://github.com/dotnet/sdk/issues/6145
907.
by ptx 5y ago
> 3. If staircases were genuinely engineered for military purposes, then we should always find that they turn clockwise. However [...] there are a substantial minority of newels which turn anti-clockwise (approximately 30% of all surviv
908.
by ptx 5y ago
This requires that you're pulling in only exactly the same versions of those dependencies as those that Facebook and Google have vetted. Is there a way to do that?
909.
by ptx 5y ago
Hm. I assumed that the "telemetry" they were talking about was on their own servers (measuring uploads, downloads, etc.) but given that it was introduced after the Microsoft acquisition, is this telemetry actually client-side, lik
910.
by ptx 5y ago
> why don't we just copy-paste it? ... Maybe license doesn't support it. You did say the argument was bad, but a license that prevents you from making a copy manually but allows you to make a copy though the package manager i
911.
by ptx 5y ago
You do need to trust somebody (such as your Linux distribution of choice) but with NPM you're trusting thousands of somebodies and your system's security depends directly on all of them being secure and trustworthy.
912.
by ptx 5y ago
> And you're probably only hitting about 10% of your dependencies on the critical path you're using, meaning that a lot of potentially vulnerable code is never executed. If a dependency has been compromised it doesn't ma
913.
Developers: Let distros do their job(drewdevault.com)
3 points by ptx 5y ago|0 comments
914.
by ptx 5y ago
Does that count duplicates, i.e. if a thousand different packages depend on exactly the same version of some package X, you get a thousand copies and count it a thousand times? Otherwise I can't fathom how it's possible for a proj
915.
by ptx 5y ago
Also: "This vulnerability existed in the npm registry beyond the timeframe for which we have telemetry to determine whether it has ever been exploited maliciously."
916.
by ptx 5y ago
Some of those could perhaps be solved by an "around" hook, in addition to pre- and post-hooks, like advice[1] in Emacs. Although in OOP maybe that would be represented by a decorator class (or a subclass) that overrides the method
917.
by ptx 5y ago
Absolutely. I recently translated Microsoft's example code for using the Windows crypto API from C++ to Python, and huge chunks of the code melted away as it was mainly concerned with freeing buffers. Exceptions also helped.
918.
by ptx 5y ago
Firefox remembers the zoom level for each site separately, so you can zoom HN to e.g. 110 % to fix the font size. The line-length issue can be fixed by resizing the browser window. At least that works for me - none of the sites I use requir
919.
by ptx 5y ago
One reason might be an awareness that Microsoft will be Microsoft and they tend to do things like putting "telemetry" in the CLI tools: https://github.com/dotnet/sdk/issues/6145
920.
by ptx 5y ago
What's heavy-handed about Kotlin's apply? It's just an extension function in the standard library (so not a separate language feature, if that's what you mean by "heavy"?) and solves the problem cleanly IMHO. Y
921.
by ptx 5y ago
Both Gecko and KHTML were already in the hands of neutral, nonprofit third parties from the start. But Apple wanted control to be entirely in their hands, so they forked WebKit from KHTML, and Google wanted control in their hands, so they f
922.
by ptx 5y ago
Ah, I didn't realize they had both 11 and 17 in Bullseye. I guess Debian users should stick to Java 11 then, which is presumably covered by security updates as usual? Is this documented somewhere?
923.
by ptx 5y ago
Maybe. Debian says[1] that their OpenJDK package will get "security updates on a best effort basis, but users should not expect to see updates for every quarterly upstream security update." I'm not sure what that means, exact
924.
by ptx 5y ago
What other patterns do you prefer in Python? Patching feels a bit messy, and if you patch out some imported module "mymod" in the implementation, it breaks when "import mymod" is changed to "from mymod import myfun&
925.
by ptx 5y ago
> direct DI—as in, passing dependencies to things Mark Seemann called it "poor man's DI" in the first edition of Dependency Injection in .NET and changed it to "pure DI" in the second edition, but "direct
926.
by ptx 5y ago
So is your point that what Microsoft is doing is in fact spyware and not technically "telemetry", since what I linked to is what they are actually doing? In that case, to avoid confusion, we should stop referring to it as telemetr
927.
by ptx 5y ago
What if you repeatedly fail to anonymize the information and also collect user-entered data like command line arguments? https://github.com/dotnet/sdk/issues/6145
928.
by ptx 5y ago
They don't need a backdoor anymore. Microsoft now routinely collects your data and pushes mandatory updates through the front door.
929.
by ptx 5y ago
Visual Studio's community edition is something entirely different from IntelliJ's community edition. IntelliJ is open source[1] but Visual Studio is proprietary with tricky license terms[2] that limit it to companies of a certain
930.
by ptx 5y ago
> They won’t steal our data Windows Home or Pro have mandatory "telemetry", as do a lot of their applications. It's even in the .NET Core CLI tools and has to be explicitly disabled. > to sell to political relations

More ›