qbane

5 ms·

31.
by qbane 7mo ago
You can still obfuscate JS heavily and make a VM that executes also obfuscated code calling arbitrary browser APIs. At least In WASM everything is sandboxed so the attack surface is smaller.
32.
by qbane 8mo ago
cf. Kagi is a good take
33.
Technical Breakdown: How AI Agents Ignore 40 Years of Security Progress [video](youtube.com)
1 points by qbane 8mo ago|0 comments
34.
by qbane 9mo ago
Remember: It is a company that keep saying how much production code can be written by AI in xx years, but at the same time recruiting new engineers.
35.
by qbane 9mo ago
The "source" link at the footer seems to point to the author's GitHub profile, not source repository. The repo under it contains no code either.
36.
by qbane 9mo ago
I read Effective Modern C++ years ago and was confused exactly like what you describe.
37.
by qbane 10mo ago
icc's result is interesting too
38.
by qbane 10mo ago
Just started making my own recently with CodeMirror 6 during holidays. No saving function for now: https://qbane.github.io/cgm
39.
by qbane 10mo ago
Not likely: > It only supports a subset of Javascript close to ES5 [...] I have not read the code of the solver, but solving YouTube's JS challenge is so demanding that the team behind yt-dlp ditched their JS emulator written in Pyt
40.
by qbane 10mo ago
To declare "open source", you have to provide a way for the public to get access to the source code. But there seems to be none at least for the time being.
41.
by qbane 10mo ago
That is a fair assessment. Maintaining read/write pos and peek them at every operation is a big performance hit. The impact is amplified if each invocation needs a syscall. That is exactly what futexes address: Allowing spin locks to r
42.
by qbane 10mo ago
By a quick glance, yes, this is what I want: a channel to communicate between processes via a piece of shared memory, protected by a pair of futexes. In JS ecosystem, buffers that allow data loss is more common (aka ring buffers), but ringb
43.
by qbane 10mo ago
I wrote my first SPSC circular buffer implementation in TS upon reading the previous post on futex [0] from the same author. It was more intricate than it had seemed, until I finally sat down and wrote my own code. [0]: https://h
44.
by qbane 11mo ago
`--ignore-scripts` should be the default behavior.
45.
by qbane 11mo ago
I really appreciate the clear and detailed project description, the only concern is the title on HN. Failing on tests is fine, especially when it demands huge efforts to triage and reiterate on the project structure for them.
46.
by qbane 11mo ago
If you mean "latest" ECMAScript then that is true. Even latest gcc or clang does not support all features from C++23: https://en.cppreference.com/w/cpp/compiler_support.html .
47.
by qbane 11mo ago
I am not meant to be harsh, but note that it fails on a small number of test cases, on v0.21 that is ~900 out of ~50k. Strictly speaking it cannot be described as standard-comforming unless there is some reason behind every failed test. A b
48.
by qbane 1y ago
Nitpick: SQL is a programming language. But for most CRUD tasks you should rely less on SQL's programming capabilities until processing information is too expensive outside the SQL server/engine. The advice is also for maintainabi
49.
by qbane 1y ago
I prefer the following to ensure the interoperability of external libraries: `body, html { box-sizing: border-box } * { box-sizing: inherit }`
50.
by qbane 1y ago
I reply "..." each time and it works similarly.
51.
by qbane 1y ago
Cannot even park a Waymo… Robots are definitely better at this than me
52.
by qbane 1y ago
As a JavaScript developer, combining/consolidating middlewares manually just defeats the design of middleware. I would rather call it a callback function.
53.
by qbane 1y ago
Then that is a good reason to deny the requests from those IPs
54.
by qbane 1y ago
How about Sublime Text (not really an IDE, just text editor)
55.
by qbane 1y ago
Love to see this concept condensed! This kind of knowledge will only emerge only after you dive in your project and surprisingly find things do not work as thought (inevitable if the project is niche enough). Will keep a list like that for
56.
by qbane 1y ago
See also this, TS types as a parser combinator: https://github.com/sinclairzx81/parsebox
57.
by qbane 1y ago
This has a long history dating back to the Flash era. https://owasp.org/www-community/attacks/Clickjacking > One of the most notorious examples of Clickjacking was an attack against the Adobe Flash plugin setti
58.
by qbane 1y ago
Self-hosting options are invaluable because it is the only way you truly own all your data.
59.
by qbane 1y ago
I think GitHub is correct that the bypass itself is not a vulnerability, but just like the little tooltip on GitHub's "create secret gist" button, GitHub can do a better job clarifying at the "Actions permissions" s
60.
by qbane 1y ago
Also you can leak any secrets by making connections to external services via internet and simply send secrets to them.

More ›