Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
roblabla
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
50 ms
·
541.
▲
by
roblabla
7y ago
localhost is considered "secure" and doesn't need https - this can be used by most development and automated testing flows. For remote development, I tend to setup a caddy server which makes it very easy to get an SSL certifi
542.
▲
by
roblabla
7y ago
No? The content creators are not youtube's competition. If anything, they're pushing those creators off to competing platforms...
543.
▲
by
roblabla
7y ago
They might not have the same motivation to write clickbait articles, but state-sponsored news certainly has plenty of motivation to distort the facts as well. We've seen what the current US administration thinks of the truth...
544.
▲
by
roblabla
7y ago
This is definitely not the implementation that comes packaged with every OS. Every OS has its own TCP/IP implementation that usually lives in the kernel - though most are derived from BSD's TCP/IP stack. SmolTCP could (in t
545.
▲
by
roblabla
7y ago
I'm using it in my toy OS as my TCP/IP implementation. It's meant to be run in a wide variety of contexts, from embedded IoT-style appliances to userspace Linux. In fact, it has instructions for Hosted Usage[0] in the README.
546.
▲
by
roblabla
7y ago
Oh I agree, and definitely don't recommend using Result in JS, the language is just not tailored for it. I was specifically addressing > I never understood the love for Either-based error handling in Haskell and other languages.
547.
▲
by
roblabla
7y ago
I'm not familiar with Haskell, but Rust's `Result` type is the same idea, and I wouldn't want to trade it for try-catch. It supports backtraces[0], has a simple way to turn errors into a "catch-all" type[1], but it
548.
▲
by
roblabla
7y ago
If you don't want Firefox Quantum, you should still switch to a supported browser that kept XUL, such as Basilisk. Also I'm curious, what extensions are missing? Most of my pre-quantum extensions, such as Tree Style Tabs, have bee
549.
▲
by
roblabla
7y ago
> Is it possible to fix the security issues of the existing webRequest API without deprecating it? The WebRequest API is not being deprecated though, only the ability to block through it is. And I don't think blocking a request has
550.
▲
by
roblabla
7y ago
Well for wiki, usually a branch containing markdown will transfer well across forges. Issues and PRs are the real issue. I’ve been hoping git appraise would get supported by the forges for distributed PRs, but it doesn’t look like that’ll h
551.
▲
by
roblabla
7y ago
Huh? Am I the only one that has exactly the opposite line of thinking? If I see an underfunded project that I enjoy, I’m much more likely to donate than if something already makes many digits money.
552.
▲
by
roblabla
7y ago
This module is pure python. It looks like if people rely on it, they could easily put the code in a pypi module, and maintain it there. It doesn't really make sense to keep it in the core if it has no dedicated maintainers.
553.
▲
by
roblabla
7y ago
I would, but then the linked FAQ is outdated (in fact, the 1.20 version[0] indicates it moved to the website), and I don't think having a redirect that points to the prev website would work. According to [1], the presence of an FAQ on
554.
▲
by
roblabla
7y ago
A redirect would be helpful so the old links still work.
555.
▲
by
roblabla
7y ago
Erm, no? Meltdown was intel only. Spectre affects absolutely every architecture with speculative execution, but Meltdown (which allows crossing process and security boundaries) are absolutely unique to Intel.
556.
▲
by
roblabla
7y ago
Win7 gets security updates until somewhere in 2020. After that point, anyone still using 7 will be better off upgrading to 8/8.1/10. Firefox 56 is not an ESR. It does not get security patches. From a quick look, there are public C
557.
▲
by
roblabla
7y ago
Why on earth are you running such a massively outdated browser? You should at least switch to pale moon, basilisk, or another maintained browser. God knows how many vulnerabilities in the wild there are in 56.
558.
▲
by
roblabla
7y ago
You can use +% to have a fully defined wraparound addition: https://ziglang.org/documentation/master/#Wrapping-Operation... . For lshift, there is @shlWithOverflow.
559.
▲
by
roblabla
7y ago
You didn’t look too hard then. Deja vu got released recently. It’s a chain from unprivileged to bootrom. Got fixed in 8.0.0, the very latest firmwares. Look it up at https://switchbrew.org/wiki/Switch_System_Flaws It’s
560.
▲
by
roblabla
7y ago
If nintendo didn’t put DRM, publishers would avoid the platform, as they would see it as insecure. Blame the laws allowing this.
561.
▲
by
roblabla
7y ago
The implementation is based on mruby, which is riddled with bugs. I spent some time reversing A Dark Room before it got removed. I am confident that there are bugs allowing ROP, from which point getting CFW is a matter of privesc. We have p
562.
▲
by
roblabla
8y ago
The "ads" were a simple Caddy-Sponsors header being sent on every HTTP response, containing the string "This free web server is made possible by its sponsors: Minio, Uptime Robot, and Sourcegraph". It could be removed (l
563.
▲
by
roblabla
8y ago
You can do this, but it's non-idiomatic (at least in my opinion). The only times I use shadowing is when "stripping a layer", such as unwrapping an option, or a non-destruction type change such as u8 to u64.
564.
▲
by
roblabla
8y ago
keep it in the copy paste buffer, obviously /s. For an even more extreme version, look at Perl6's atomic operators: https://docs.perl6.org/language/unicode_ascii#Atomic_operato... (or any other operators on t
565.
▲
by
roblabla
8y ago
This is embarassing on so many levels. For the record, those weren't "false" reports, they were false reports. No need for scare quotes here, just read the blog[0] (also, good job BBC for not linking to the blog). Among the l
566.
▲
by
roblabla
8y ago
I'm not sure how I feel about tying authentication with payment. It means anywhere you log into with this address knows your payment history with this wallet.
567.
▲
by
roblabla
8y ago
> But it's still not relevant, as the kernel can arbitrarily halt execution of any process at any point, and therefore can read the content of all registers whenever it wants them. Not if the kernel can't handle interruptions?
568.
▲
by
roblabla
8y ago
I often find myself yearning for a Rust REPL. I wonder if it'd be possible to run the rust compiler to lower the code down to MIR, and then run that in the Miri interpreter?
569.
▲
by
roblabla
8y ago
- Taboola ads are scummy - Acceptable Ads is not supposed to allow scummy ads - Taboola paid to get their ads accepted - Acceptable Ads is dishonest If you google a bit, you'll find that the ads that get whitelisted under Acceptable Ad
570.
▲
by
roblabla
8y ago
Acceptable Ads is anything but honest. They take money to whitelist ads. Including ads from Taboola, one of the worst ad network. https://www.businessinsider.fr/us/google-microsoft-amazon-ta...
More ›