rictic

24 ms·

211.
by rictic 6y ago
I don't. Authentication is a pain, and the later in the stack you try to solve it the harder and hackier it gets. We have the gross hack of certificate authorities because we failed to deliver authenticated information via the domain n
212.
by rictic 6y ago
> fallsback to http:// only when necessary and only when the website was not MITM-ed How would you know when an HTTP site is being MITM'd? There are some easy cases, but for everything else, well, ensuring this is half t
213.
by rictic 6y ago
Wild speculation from someone who doesn't do hardware, but I'd guess that it's not so much writing the software as testing it that motivates that. It'd be hard to keep the testing matrix of apps X hardware X driver versi
214.
by rictic 6y ago
What if the machine code for the function is larger after than before? I guess even worst case, writing 151MB to disk is fast if you have the data ready. Very fast with a modern SSD.
215.
by rictic 6y ago
Microsoft has opened the protocol with which most extensions are written: https://microsoft.github.io/language-server-protocol/ It's a really high quality protocol, and supporting it gets you 95% of the way to sup
216.
by rictic 6y ago
The big thing web components solve is interoperability. How do you use a preact component inside an angular app? How do you use an angular component inside a vue app? Web components are the solution. No matter what library or framework or w
217.
by rictic 6y ago
Nick Bostrom's 2014 book Superintelligence is the reason that many big name figures started to take the threat seriously.
218.
by rictic 6y ago
Software engineering is programming over time. It's not so hard to write code that is correct today, if that's all that tests did then they wouldn't be worth the effort. We write tests so that we know whether future changes h
219.
by rictic 6y ago
Enron's crime wasn't speculation, it was fraud. By buying low and selling high, the consequence to everyone else is that the price of power is more consistent. The least consistent power producers are some of the greenest, like so
220.
by rictic 6y ago
Security is a continuum, not a binary. Things that native apps can do trivially but that require explicit permission for accessed in Flash (or the web in general): filesystem read/write, listen in on microphones, spy with webcams, etc
221.
by rictic 6y ago
This isn't true, other browsers can run JITless. JIT is a performance optimization to be sure, but this doesn't explain why Apple bans other browsers. See https://twitter.com/slightlylate/status/127401225
222.
by rictic 6y ago
That's interesting. My personal reasoning has been that insurance is a bad deal unless either: 1. you believe you are at higher risk than the typical person buying the insurance (or more practically, that [cost of insurance] < [payo
223.
by rictic 6y ago
IE11, unfortunately, isn't _quite_ dead yet, and ES6 is definitely not the last word in useful JS language features.
224.
by rictic 6y ago
That definitely helps, at least for short term compromise of TLS servers.
225.
by rictic 6y ago
The equivalent to the app signing cert for a web app is the TLS cert. If security is important to you, don't let third parties control your TLS cert! It's so common now to let CDNs (primarily cloudflare) run your TLS frontend that
226.
by rictic 6y ago
There's a natural human impulse to assert that something which is evil must also be ineffective. Often this is true, and it's great when it is, it's like getting something for free – you can improve both the moral situation o
227.
by rictic 6y ago
Evolution is guided by whatever selection process is present. For most species that's the environment they find themselves in. For some, like cows, corn, bananas, etc their human domesticators play a major role.
228.
by rictic 6y ago
So if you could make your build 70% faster, philosophically it wouldn't matter, because you would still have a build step?
229.
by rictic 6y ago
AIUI, copyright holds for a specific fixed expression. So if an artist drew a face that looks incredibly like yours, the artist would hold the copyright over that drawing, but have no claim over your face.
230.
by rictic 6y ago
If you've internalized many of the interesting ideas of Haskell, check out Idris: https://www.idris-lang.org/ It builds on the ideas in Haskell (and similar languages) and adds proofs and first class types to the langu
231.
US unprepared for an electrical grid collapse, but it costs only $300M(themoneyillusion.com)
303 points by rictic 6y ago|255 comments
232.
by rictic 6y ago
A difference in quantity can become a difference in kind. Consider a situation down the line where your phone can do this in real time, and at a quality that is hard for the untrained ear to distinguish from the genuine article. It's n
233.
by rictic 7y ago
Have you looked at the network traffic or behavior of most native apps? Continuous monitoring and cloud-based state are the norm everywhere, and for the same reasons.
234.
by rictic 7y ago
Work is underway on speccing out declarative shadow doms, which would remove the need for that JS: https://github.com/mfreed7/declarative-shadow-dom
235.
by rictic 7y ago
I agree, I'd like it if all app platforms were portable, secure, and linkable by default. Given that they aren't, my allegiance is with the web.
236.
by rictic 7y ago
It's possible this was a layout bug whose most common and visible consequence was on instagram? Or does FireFox's picture in picture code have special casing for some sites?
237.
by rictic 7y ago
Yes, but maybe not in the way that you're thinking. The scenario isn't "I'm gonna go browse the changes that were made in March of 1994", instead it's trying to solve a specific mystery. You see some code that
238.
by rictic 7y ago
This is an example in favor of the fact that abstractions can't paper over performance characteristics. Users may depend on them. In the unlikely event that there was a change to the implementation of the State monad, or to one's
239.
by rictic 7y ago
Worth questioning why you want to store payment info. One common reason is for a faster subsequent checkout experience. If this API gives a fast checkout experience without storing data, then you've potentially got the benefit of stori
240.
by rictic 7y ago
There is no way to avoid leaking implementation details, it's just a matter of how much you leak. Even monads leak their performance characteristics.

More ›