staticassertion

334 ms·

3751.
by staticassertion 7y ago
Browsers sandbox more than just the javascript VM/ renderer.
3752.
by staticassertion 7y ago
Oh, I see. I misunderstood your point. > Would that be a complete silver bullet, tho? Nope. I don't think anyone would disagree! > So I agree with you that using a language with C++ isn't exactly "optimal" Yeah, I
3753.
by staticassertion 7y ago
"Far from it", as you link to literally the only other case.
3754.
by staticassertion 7y ago
There have been two ITW attacks on Chrome ever .
3755.
by staticassertion 7y ago
Javascript is used to perform the exploit. The renderer, where the vulnerable code exists (I assume), is C++. The problem with protecting a C++ codebase like a JS renderer is that the attacker has HUGE amounts of control. They can literally
3756.
by staticassertion 7y ago
Here you go: https://blog.stalkr.net/2015/04/golang-data-races-to-break-m... What's even worse is that Go code is not (outside of Linux/ some distros) compiled with ASLR.
3757.
by staticassertion 7y ago
I disagree. By having the browser implement these features we gain security. Chrome's sandbox is extremely powerful, and they can isolate and restrict all of those features you're describing very deliberately, in a way that a mo
3758.
by staticassertion 7y ago
This, for me, is due to lack of package namespacing in these languages. Someone took 'xyz' ? Well I guess I'm going to be 'xyz-rs'
3759.
by staticassertion 7y ago
"In Rust" signals something very important to me, especially with the context of "full text search". ES is the current free text search engine out there, and it's famously painful to manage. Resource consumption and
3760.
by staticassertion 7y ago
I don't think it's a separate problem, and as I said this is a real, concrete problem. The end result isn't that it's fine after they fix this, but that doesn't matter at all, the goal isn't to end surveillance
3761.
by staticassertion 7y ago
Why is that causing a huge part of the population to switch off? That's insane. Starting with a practical, serious, and concrete discriminatory problem sounds like a great place to start vs some general ethical issue with surveillance.
3762.
by staticassertion 7y ago
Hey, I wrote that article. There's now an actual, functional IMAP library that uses these techniques here: https://github.com/jonhoo/rust-imap I did not contribute to that library, but it's nice to see a prac
3763.
by staticassertion 7y ago
Dart has gained more success since moving away from the "new browser language", which was an impossible task in retrospect. I think Dart is, in fact, an excellent example of how much power Google is willing to throw behind a langu
3764.
by staticassertion 7y ago
Dart is practically a DOA project, just like NaCl. These projects failed for the same reasons - they were trying to radically change how you built software on the web, and the world was absolutely not ready for it. DART was going to be a se
3765.
by staticassertion 7y ago
> The options in python to speed up your code are vast without really having to do much This does not match my experience. The #1 way I see to optimize Python is to not write Python at all, and instead to FFI out.
3766.
by staticassertion 7y ago
Very cool work! Thanks for the links.
3767.
by staticassertion 7y ago
How do data scientists feel about Nim? It feels very pythony, but way faster - could be a really cool language for them, similar to what Julia is trying to be. Curious if anyone in a DS role has tried it out. I'm certainly tempted to t
3768.
by staticassertion 7y ago
I'm completely good with the idea that everyone should try to reduce their consumption and strive to reuse materials. I just think it's crazy to compare that to what Exxon has done. For example, as you stated: > In this quote,
3769.
by staticassertion 7y ago
Yes, my use of paper bags instead of reusable bags is clearly in the same league as a multibillion dollar campaign to discredit science itself. I fear for when MA decides to come after me.
3770.
by staticassertion 7y ago
> I've recently seen a ton of FF fans state that the reason they love Firefox is that it doesn't have ads or track you and preserves your privacy. > However, Firefox wouldn't exist without Google and (to a lesser extent
3771.
by staticassertion 7y ago
Because you aren't supposed to Google search by entering in a bunch of keywords you're supposed to ask Google questions. Not that your workflow is incorrect, I'm a DDG user and I do the same thing, but that's what Google
3772.
by staticassertion 7y ago
It's a long way from being a realistic approach for anyone, including Dropbox, really.
3773.
by staticassertion 7y ago
https://github.com/python/mypy/tree/master/mypyc This may interest you. This is probably going to be the 'official' way to get what you're talking about.
3774.
by staticassertion 7y ago
Adjacency matrices are trivial to implement in Rust. I leverage graphs constantly.
3775.
by staticassertion 7y ago
Paper is a separate product.
3776.
by staticassertion 7y ago
Right now I write, almost exclusively, Rust and Python. I'm really hoping I can replace a lot of the Python code with Nim some day.
3777.
by staticassertion 7y ago
> The only valid options for performance sensitive functions are JS, Python and Go. With custom runtimes that's not the case anymore. I write my lambdas in Rust. Can't stress (7) enough, would also add 'morale' saving
3778.
by staticassertion 7y ago
Keeping all of your feedback to yourself sounds like a great way to maintain a bias.
3779.
by staticassertion 7y ago
I will not defend Obama's administration, or Bush's, but it's disingenuous to call out previous admins for new policies. Here is Jeff Sessions' "zero-tolerance policy". https://www.justice.gov/o
3780.
by staticassertion 7y ago
> if serverless works for 80%, then why is that 80% not even remotely reflected in the sentiment here? HN is usually a pretty good gauge for how the wider engineering community feels about a particular technology. Every time something sy

More ›