agentS

5 ms·

1.
by agentS 9y ago
I am sorry that you are sick of the HTTPS everywhere movement. But forcing your sites to use HTTPS will also prevent your users from unwittingly participating in DDOS attacks on other sites (e.g. https://en.wikipedia.org/wik
2.
by agentS 10y ago
> Which leads to the question, why is google doing this? They, you, could easily promote AMP pages while not masking the real URL! Perhaps to allow the content to be served from a CDN (over HTTPS), without requiring the site to CNAME ove
3.
by agentS 10y ago
Monomorphization is not a reasonable option, in my opinion. It forces the compiler to accept some truly awful running times for pathological cases. Atleast quadratic, probably exponential. For languages that have reflection or pointer maps
4.
by agentS 10y ago
> But you cannot write a non-blocking Go function in the same way. The caller can make function "non-blocking" by wrapping the call in a goroutine themselves. (There's some subtle differences, but they are mostly irrelevan
5.
by agentS 11y ago
> ... Reactor pattern ... I don't understand, and the link seems unclear. Perhaps a more direct question: I get a request X, and I need to consult a backend service to answer the request. Do I write synchronous code calling that bac
6.
by agentS 11y ago
For servers that primarily speak RPC or HTTP, do you foresee Rust going thread-per-request or something more callback-y?
7.
by agentS 12y ago
Without SSL, there is a trivial way to upgrade a temporary MITM capability to a permanent MITM capability using ServiceWorker.
8.
by agentS 12y ago
A binary protocol's parsing is usually something like read 2 bytes from the wire, decode N = uint16(b[0] << 8) | uint16(b[1]), then read N bytes from the wire. A text-based protocol's parsing almost always involves a streami
9.
by agentS 12y ago
If your GC is triggered after the allocated memory increases by X% (which is fairly common), then this technique is effective, since it lowers allocation rate. Also, Go doesn't scan arrays that are marked as containing no pointers, so
10.
by agentS 12y ago
Out of curiosity, why do shells need to use fork? Note: I am not familiar with the implementation techniques behind shells.
11.
by agentS 12y ago
Out of curiosity, what form of "spying" do you think is enabled by Javascript that would not be possible without Javascript? Edit: And since I replied to a small part of your comment, I should say that I disagree completely with y
12.
Improving Chrome’s Security Warnings(docs.google.com)
2 points by agentS 12y ago|0 comments
13.
by agentS 12y ago
Note on encoding/json: you only need to mention the fields you care about. If there are extra fields, the parser will just scan past them.
14.
by agentS 12y ago
For the record, Raft does mandate what happens in that split-brain scenario. Neither side will be able to elect a leader, and writes will halt. Electing a leader requires a quorum.
15.
by agentS 12y ago
The attacker will merely reply on your behalf. Does not improve the situation.
16.
by agentS 13y ago
Keeping average response time low is only part of the point of a circuit breaker. Another goal might be to reduce load on the back end service to give it a chance to recover.
17.
by agentS 13y ago
Ah, I understand. I interpreted that comment as a list of 3 separate examples where centralization helps. A nitpick: Auto-correction for a user's contacts could probably be done on-device, although I'd guess that machine learning
18.
by agentS 13y ago
One of the reasons that spelling corrections are so good on Google is (probably) that they are machine learning models trained on query logs(1). i.e. if you search for "hacer news", and then without clicking on any results, issue
19.
by agentS 13y ago
Note that gofmt sorts within groups. So if you leave spaces between groups of imports, it'll sort them all separately. Presumably, this sort of grouping is the reason it does it this way.
20.
by agentS 13y ago
I vaguely remember reading somewhere that they figured out a way to run their collector on stock Linux; I think the price they paid in exchange was (even) lower throughput (trying to track down reference so I know I wasn't daydreaming)
21.
by agentS 13y ago
I've been following along on golang-dev, and they seem to be making progress on precise stacks. See https://groups.google.com/forum/?fromgroups#!topic/golang-de... for example.
22.
by agentS 13y ago
That post both advocates for TLS-everywhere (which I support) and thinks it would be beneficial to drop HTTP Keep-Alive... Aren't you concerned about the latency hit? TCP has 1 RTT to setup, TLS has 1+ RTT to setup. Also, TCP's co
23.
by agentS 13y ago
> You never know when you have enough coverage to rule out NPEs or any other bug. And to get confidence about lack of NPEs you want to have coverage of all lines involving dereferences, which means you need near 100% test coverage to hav
24.
by agentS 13y ago
> Testing is a cost. It is more code to write, more code to maintain. I'm not saying you write tests to protect against NPEs. I'm saying that you write tests to ensure correctness of your code, and as a side-effect NPEs are flu
25.
by agentS 13y ago
> I think people tend to underestimate the amount of time they spend on problems... Again, the implication is that people who use languages with looser type-systems than Haskell spend lots of time dealing with the problems that you menti
26.
by agentS 13y ago
> I never said the Go runtime will crash, but your programs will, because of unsafe nullability, mutability in the concurrently shared state, and various other problems in Go. Personally, these problems are not what are a time-sink for m
27.
by agentS 13y ago
No, its more like this. You download a series of truncated hashes; you generate a bunch of permutations of your URL (strip the query params, strip components of the path/domain), you hash those, check them against your local list. If y
28.
by agentS 13y ago
FYI, you should replace DocsHandler with net/http's FileServer. Reasons: 1) the implementation is not vulnerable to path traversal attacks (i.e. if url.Path == "/../../../../../etc/passwd"). 2) It automatically handles index.html 3) It uses
29.
by agentS 13y ago
> The JVM engineers have been free to do whatever they want in terms of optimizations at runtime, like code inlining or escape analysis. Both of these optimizations are present in this release of Go. Granted, there is no doubt more inli
30.
by agentS 13y ago
I assume you're calling the go command a few times in parallel, hence the improvement with -j4. I wonder if it would be faster to aggregate all the packages you need to build in a variable, and call the go command with all of them. i.e. ins

More ›