Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
the8472
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
25 ms
·
391.
▲
by
the8472
2y ago
The argument is that "humans live, but suffer" is a smaller outcome domain and thus less likely to be hit than an outcome incompatible with human life. Because at that point, getting something to care about humans at all, you'
392.
▲
by
the8472
2y ago
Rewrite the inline styles/scripts at build times to separate files, generate the appropriate script/style elements, compute the appropriate CSP directive. The renderer could rewrite <div onclick="foo()"> to
393.
▲
by
the8472
2y ago
The point of CSP is to lock down your site so that any content (buggy or malicious) can't do damage. This requires templating engines to separate styles, scripts and event handlers from the html. > These are security considerations
394.
▲
by
the8472
2y ago
The function has to be made pub so it doesn't get optimized out as unusued private function. Godbolt is a better choice for looking at asm anyway. https://rust.godbolt.org/z/3Y9ovsoz9
395.
▲
by
the8472
2y ago
All the sample clips have camera motion. Does it perform worse with a static camera or is there enough variation from frame to frame to still recover details?
396.
▲
by
the8472
2y ago
Normal upscaling is picking pixel values in the higher-resolution target image that when run through an equivalent downscaling function would fit the smaller image. There are lots of degrees of freedom to make things up. Then there is undoi
397.
▲
by
the8472
2y ago
But that's basically complaining that firefox doesn't just blindly adopt whatever google proposes. A lot of the concerns are about security and privacy, the thing that mozilla is praised for doing better than google. And no, you&#
398.
▲
by
the8472
2y ago
They're not necessarily standards. I clicked on the first negative one and it said draft. One browser vendor proposing things other vendor NAKing it makes it a vendor-specific feature. Like IE had its own features.
399.
▲
by
the8472
2y ago
Next you're going to complain that all the pixels of an image are too close to each other and there should be some grille patterns separating them.
400.
▲
by
the8472
2y ago
The justified in "justified exceptions" is important. Whenever I review CSP additions I ask the following questions - do we have a trust relationship with the vendor - is it strictly required - what are the alternatives - blast
401.
▲
by
the8472
2y ago
Even for security-related products the incentives are murky. If they're not actually selling you security but a box on the compliance bingo then it's more likely that they actually increase your attack surface because they want to
402.
▲
by
the8472
2y ago
Maybe people have been serving those megabytes of JS frameworks from some single-threaded python webserver (in dev/debug mode to boot) and wondered why they could only hit 30req/s or something like that.
403.
▲
by
the8472
2y ago
start projects with Content-Security-Policy: default-src 'self'; then add narrow, individually justified exceptions.
404.
▲
by
the8472
2y ago
One of the issues with ssh is that spawning processes isn't part of the protocol. And it's a remote protocol, so it can't pass local resources to the child. So you can't pass a null-separated array of arguments, pass ext
405.
▲
by
the8472
2y ago
If it's just a few KiB then various NVRAM techs have been slowly creeping forward for decades. But they've never made it to datacenter storage. https://www.avalanche-technology.com/wp-content/uploads/1Gb-
406.
▲
by
the8472
2y ago
> If you want your data to be stored persistent for real, you need to issue a sync command to make the operating system block and only return control after the data has been persisted. Well on linux the work that has to be done during a
407.
▲
by
the8472
2y ago
From a human welfare perspective this seems like worrying that a killer asteroid will make the 1% even richer because it contains goal if it can be safely captured. I would not phrase that as a "bigger and more pressing" worry if
408.
▲
by
the8472
2y ago
IEEE? You mean the IETF? And I explicitly said "many-to-one NATs" to not have to quibble about network-prefix-mapping NATs like NAT66 which are not deployed in coffee shops anyway.
409.
▲
by
the8472
2y ago
Since this is caused by many-to-one NATs IPv6 should be immune to this. Migrating to ipv6 should be listed as one of the mitigations.
410.
▲
by
the8472
2y ago
It's more like creative commons, licensed binary assets. The source isn't included. And the compilation process is onerous.
411.
▲
by
the8472
2y ago
A spider has intelligence too. It's far more limited than a mammal's, but it's still on the same spectrum. And intelligence is not a single linear measure. AIs outperform humans on some tasks and are worse than rats at others
412.
▲
by
the8472
2y ago
> These kinds of technologies, like AI models, are fundamentally “dual use”. The general purpose computation capabilities of AI models, like these other technologies, is not amenable to control. I find that entire section to be misleadin
413.
▲
by
the8472
2y ago
It's not only about cost per kg but also maximum payload mass. If you can build bigger satellites then you don't need to optimize for weight as hard and can use cheaper components/standardize. Which means both launch cost and
414.
▲
by
the8472
2y ago
With ULA you generate a random prefix which means it's extremely unlikely there's a collision. So no need for internal NATing or interface disambiguation because a machine is connected to two networks (e.g. via tunnels) that are b
415.
▲
by
the8472
2y ago
skinflint.co.uk is the english-language frontend of the same site
416.
▲
by
the8472
2y ago
Most of Earth's uranium is already engaged in commercially useful activity such as sustaining the geomagnetic field and the geological carbon cycle.
417.
▲
by
the8472
2y ago
The source[0] has `repr(packed)` but they should be using `repr(C, packed)`. That'll blow up in a future rust version (possibly 1.80) since packed alone is not sufficient to guarantee ordering[1]. [0] https://github.com/
418.
▲
by
the8472
2y ago
Transmittance or translucency would be a better choice of words.
419.
▲
by
the8472
2y ago
Or they could be ignored so that the users drag their IT kicking and screaming into the 21st century once an important enough site necessitates it. Corporate users usually have more direct influence on their IT than ISP customers. https:&#
420.
▲
by
the8472
2y ago
I wish it were just some old boxen from 20 years ago. $employer STILL does port-based firewalling and thinks it's great policy. Just getting SSH to github requires requesting an exemption. edit: spelling
More ›