BenTheElder

6 ms·

1.
by BenTheElder 3y ago
> Unfortunately, if you've used Google Takeout or other systems that can both downsample your photos and videos, as well as actually deleting _or changing_ metadata, deduplicating becomes a big wad of heuristics. I thought takeout e
2.
by BenTheElder 5y ago
Thanks!
3.
by BenTheElder 5y ago
> Uber built a remote kill switch for their tax docs in canada, this isn't unprecedented for them. Do you have a pointer to more on this? Naive searching doesn't seem to turn up anything for me.
4.
by BenTheElder 5y ago
FWIW: That project was started as an internal tool with a playful acronym and then went from obscure to well-known enough to making renaming a somewhat regrettable concept rather quickly just due to momentum. I think we'd have named it
5.
by BenTheElder 5y ago
Ok but the premise of physical harm in person comes from the parent comment, not mine: "Most of those dependencies represents at least one human being who can be threatened with a crowbar and forced to ship an exploit, which can then i
6.
by BenTheElder 5y ago
Good points. I suspect for a lot of projects reproducible builds are themselves a bit of a hurdle and not being verified in the rarer case that they already exist, but the point of reproducible + signed builds as indirect source-signing sta
7.
by BenTheElder 5y ago
Those are interesting points / possible approaches, however is there any indication that this particular project enables any of that? This seems focused on signing binaries / build artifacts. IMHO it seems like if you have the thr
8.
by BenTheElder 5y ago
Why can't they be "threatened with a crowbar" to sign the exploit?
9.
by BenTheElder 5y ago
A zero-sized type + hashmap for sets is also done in Go with a `struct{}`. [1][2] But without generics it must be implemented again for each entry type ... Kubernetes uses a code generator to automate this, but it's a bit kludge. [3] [
10.
by BenTheElder 5y ago
Those things don't have to be inherently slow and e.g. external IP don't need to block bring-up. I've worked on KIND and on clusters on clouds (at Google, but on multiple clouds) and both can be very quick, if anything there&
11.
by BenTheElder 5y ago
`go mod vendor` will populate all dependency sources into `./vendor/` in a modules project for easy grepping. Some projects still use this to ensure sources work airgapped as well. https://golang.org/cmd/go&#x
12.
by BenTheElder 6y ago
Is what appears to be less than 2,000 lines including detailed comments etc. "quite a lot"? This seems like a manageable amount to very carefully maintain and not at all like writing something entirely in C.
13.
by BenTheElder 6y ago
this seems like a pretty trivial amount of C, by comparison, and a pretty solved problem now.
14.
by BenTheElder 6y ago
FWIW Google did this ("letting go" of an asset) with Kubernetes / the CNCF. I work on this at Google, but Google no longer owns this since 2015.
15.
by BenTheElder 6y ago
As I understand it they only removed these after their underlying server provider banned Epik over it ... They also still provide DNS for 8chan/8kun, and continue to host the daily stormer ... Seems like they are only not bulletproof b
16.
by BenTheElder 6y ago
Without commenting on the rest ... > Then there is the always present double standard. Why did Twitter allow “Hang Mike Pence” to trend last night? Where are the suspensions and permanent bans? Actually, they intervened and stopped it.
17.
by BenTheElder 6y ago
https://www.nvidia.com/en-us/shield/support/shield-tv/ai-ups...
18.
by BenTheElder 6y ago
This should actually finally be fixed as iOS 14 rolls out, of course there's still IE ... https://css-tricks.com/webp-image-support-coming-to-ios-14/ https://caniuse.com/?search=webp
19.
by BenTheElder 6y ago
Can you elaborate on what you mean by link field? I've searched a bit but I'm not certain what you're referring to in this context.
20.
by BenTheElder 6y ago
Do you know if any browsers are doing this? In practice on iOS nothing seems better than safari + the content rules for adblocking, but I admittedly didn't try every app Shipping your own content lists seems like a tricky way to differ
21.
by BenTheElder 6y ago
TIL, thank you :)
22.
by BenTheElder 6y ago
In this context they're more or less the same, because the relevant networking / adblocking bits are in webkit, AIUI. It's true that safari and webkit are not the same, this comment is imprecise. But switching browsers won&#x
23.
by BenTheElder 6y ago
If you read my comment again you'll note the only claim I make about adblocking is that all browsers must use the same runtime. I don't claim that it's broken, but the ability to switch browsers (finally!) doesn't seem t
24.
by BenTheElder 6y ago
that's fair, but <center> and this post are still not equivalent at all.
25.
by BenTheElder 6y ago
But all of them are safari core, Apple does not allow other browser runtimes, they're only the custom UI around the webview. [1] All of the core browser bits including adblocking are safari still in every iOS browser on the app store.
26.
by BenTheElder 6y ago
<center> and the solutions in this post are not equivalent ... The HTML center tag only horizontally centers the contents which you can do with the simple CSS: `text-align:center` [1] The examples in this post center horizontally AND
27.
by BenTheElder 6y ago
> Let's see an example of dodgy kernel drivers. How about Easy Anti-Cheat? Go to their page at https://www.easy.ac/en-us/ . Guess who develops it? Their store does not install or require this. Specific applica
28.
by BenTheElder 6y ago
It's a pretty excellent example precisely because the operating system typically already has controls over this behavior (installing kernel drivers..) > However, known user hostile players trying to have a go at people's pers
29.
by BenTheElder 6y ago
Microsoft could block dodgy kernel drivers while still allowing game stores ... These are not inherently related. I think OP is aware that competing music apps are allowed. They're making an analogy about banning competing app stores,
30.
by BenTheElder 6y ago
I don't understand this comment. Neither of these links are sources, one is just an installer and the other is a binary release. If you mean the "source code" zip in the latter link, that's just github zipping the repo,

More ›