rossy

47 ms·

241.
by rossy 9y ago
This isn't a problem with ligatures that are designed to take up as much space as the characters they replace. Fira Code seems to have been designed with this in mind, so for example, the === ligature is exactly three times as wide as
242.
by rossy 9y ago
> HDR processing also seems quite limited and requires a lot of hand-tuning compared to madVR. I'll admit I haven't watched any HDR content in mpv yet, but it supports all the standard tone-mapping algorithms (hable, reinhard
243.
by rossy 9y ago
That's misleading. You can't use madVR with mpv, but that doesn't mean you can't have high quality scaling and dithering. madVR has NGU, which mpv doesn't have, and it has error-diffusion dithering, which mpv doesn&
244.
by rossy 9y ago
Yeah, that seems reasonable. We have one of these to restore MPlayer bindings: https://github.com/mpv-player/mpv/blob/master/etc/mplayer-in... Though rather than being baked in, these bindings have
245.
by rossy 9y ago
> VLC in a nutshell: Rebuilding fonts... I wonder if this is still a problem (I haven't used VLC in a while.) That message box is shown when fontconfig rebuilds its font cache, but libass has been able to run without fontconfig si
246.
by rossy 9y ago
It's definitely bittersweet. I have a soft spot for raw Win32 programming. On Windows, I'd rather see a program written in Win32 than in something like WPF or XAML, so it's sad that there isn't much interest in developin
247.
by rossy 9y ago
Agreed, though unfortunately, every attempt to change them has resulted in bikeshedding and no real progress. See: https://github.com/mpv-player/mpv/issues/973 Now, the general consensus is that they should b
248.
by rossy 9y ago
I've worked with people who believe this, including at least one devout follower of Clean Code and I totally disagree. One developer's obvious self-documenting code is another developer's WTF. Yeah, some projects have a lot
249.
by rossy 9y ago
Same here. Kind of ironic that 'user experience' is the only text that was cut off when I loaded the page. https://0x0.st/lRi.png
250.
by rossy 9y ago
I'm not a huge fan of mandatory emoji in commit messages either, but this is a poor excuse. A Git commit message can contain any sequence of bytes except for a NUL byte. It can even contain invalid UTF-8. Tooling that doesn't trea
251.
by rossy 9y ago
I do this in one of our business' apps. It does strict checking of the Origin and Referer headers when it receives a POST request. We only support modern browsers, and doing this instead of using CSRF tokens feels modern and clean. I&#
252.
by rossy 9y ago
I completely agree with the author on this. The old Unicode 9.0 best practice made sense for a UTF-8 decoder that consumed input using a state machine, and like the article says, if you accept the correct byte-ranges in each state as in Tab
253.
by rossy 9y ago
To be fair, it's not in the core, it's in the shell. The shell treats files that have FILE_ATTRIBUTE_HIDDEN and start with a ~ as if they also had FILE_ATTRIBUTE_SYSTEM, but this only affects the shell. It doesn't leak to o
254.
by rossy 9y ago
These shouldn't require IPC at GB/s speed either. Modern sandboxes, like the one in Chrome, have a broker process which can open filesystem objects, device objects and sockets (file descriptors or handles) and pass them to a sandb
255.
by rossy 9y ago
mpv is not affected, at least by these four vulnerabilities. They all seem to be specific to each video player, rather than affecting shared code or code in open source multimedia libraries.
256.
by rossy 9y ago
I thought the same and I don't think there's a downside. I've been setting SameSite=strict for the session cookie in a B2B app for about a year and no one has complained. It's silently ignored by IE10 and Firefox, at lea
257.
by rossy 9y ago
It's worth pointing out that (3) sounds good, but it's an imperfect solution too. If Number.isNaN(num) is true, num === num will be false. Not just one, but several 64-bit patterns are considered NaN when represented as a floating
258.
by rossy 9y ago
I think I prefer the string option. inodes (including Windows 64-bit file IDs) are opaque values. All you can do is compare them with one another and pass them to functions that accept inodes. Interpreting the integer value of the inode is
259.
by rossy 10y ago
Nice. That reminds me, Carmack tweeted that he could send an IP packet to Europe faster than he could send a pixel to the screen[1], and this is unfortunately true on modern hardware. It's nice that phones are putting the kind of high-
260.
by rossy 10y ago
> Not too many, of course, because the more you drink the less other critical thinking functions have to keep going. The trick is to drink just the right amount of alcohol. Ah, the mythical Ballmer Peak[1]. [1]: https://xkcd
261.
by rossy 10y ago
It's easy to see the advantages of memory safety, since it eliminates an entire class of bugs that C programs tend to suffer from, but I think talking about language "ergonomics" is much more tenuous. One thing that C program
262.
by rossy 10y ago
> Microsoft should apply these same restrictions to all UWP apps. Yes, that means banning JIT compilation, as Apple does on iOS. I really wish they didn't. Banning JIT means banning alternative web browsers (with alternative JavaS
263.
by rossy 10y ago
> Does anyone not want this? Like the parent comment says, Theo De Raadt doesn't want this, nor do any other OpenBSD or LibreSSL devs, because Apache 2.0 licensed software can't be included in OpenBSD. If this license change
264.
by rossy 10y ago
Having a list of supported browsers is fine. All modern browsers are supposed to implement the same web standards, but they all have a different set of supported features and subtle rendering and layout bugs. Sniffing the User-Agent string
265.
by rossy 10y ago
Previously: https://news.ycombinator.com/item?id=13883064
266.
by rossy 10y ago
Yep. > This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC. The CIA attack is an
267.
by rossy 10y ago
> This isn't true. The TLS protocol is not a philosophy; it does not have an opinion on who you should trust as a root certificate authority. If you trust a particular root, it is wholly within the design of TLS to allow connection
268.
by rossy 10y ago
I think this SSL MITM thing has gone way too far. When an exec asks an engineer if it's possible to monitor all internet communication that goes in and out of the company network, including communication that is encrypted by TLS, the c
269.
by rossy 10y ago
BlueCoat makes me cry. We have an application running inside the firewall of one of our clients that communicates with a HTTPS REST API hosted by a server in our datacenter. The connection must be encrypted because it handles confidential i
270.
by rossy 10y ago
For starters, I'd love to see online newspapers run ads that behave like print ads. This would mean they show the same ad for everyone (not an ad that the ad network thinks will match your interests,) the ad does not move or play audio

More ›