jbroman

8 ms·

1.
by jbroman 3y ago
I believe you can purchase a GameBoy cartridge reader.
2.
by jbroman 3y ago
This is an improvement to that feature which allows you to modify the response headers in addition to the response body.
3.
by jbroman 6y ago
Sure, but a credentialed person is more likely to be familiar with other research in the area and have expertise with state of the art techniques in the field. So an uninformed reader (with less background than either to critically evaluate
4.
by jbroman 6y ago
The alternatives would seem to be "data center powered by non-renewable energy" and "no data center", no?
5.
by jbroman 6y ago
Kinda specific, but breakdancing: https://www.youtube.com/watch?v=AIDaadRNPpg
6.
by jbroman 6y ago
The very first sentence points to a PZ blog post about the Chrome sandbox.
7.
by jbroman 6y ago
The more recent weakrefs addition does allow you to observe finalization: https://v8.dev/features/weak-references
8.
by jbroman 6y ago
Because by doing this you have misrepresented the truth in order to extract more money from your employer than you agreed (presumably, in your employment contract). (As I commented elsewhere, whether you think paying by local cost of living
9.
by jbroman 6y ago
It seems pretty unwise to defraud your employer like that.
10.
by jbroman 6y ago
This is consistent with what major tech companies do today when an employee relocates (or are simply hired in a less pricey region). Whether or not you agree that employees should be paid differently depending on cost of living where they r
11.
by jbroman 6y ago
Have you tried making an installable PWA? This should allow you to get an icon, notifications, and a separate window.
12.
by jbroman 6y ago
It's uses gn, a build system developed for Chromium. That said, on an Ubuntu system the steps to build Chromium are fairly well-documented and straightforward, as long as you have an appropriately beefy system (unfortunately it's
13.
by jbroman 6y ago
Executing JavaScript every frame is not that heavy, but if the main thread is blocked because of something that is , which may even be in another tab, the animation will stutter. The animations built into the platform can run and remain sm
14.
by jbroman 7y ago
Specifically, the new version is at https://source.chromium.org/ , and the Android counterpart is https://cs.android.com/ .
15.
by jbroman 7y ago
Something running with your privileges could similarly use your existing sudo ticket, or manipulate the memory of your terminal emulator, or modify your shell to grab your credentials the next time you authenticate (and pass those to sudo),
16.
by jbroman 8y ago
Most desktop OSes aren't designed to defend applications run by the same user from one another. As a consequence an attacker running unsandboxed code with your user privileges is an attack that's very difficult to defend against.
17.
by jbroman 8y ago
If you can run code with the same privileges as Chrome (under an authenticated user account), then on most desktop OSes, you can do whatever Chrome can do, including access the password store. This may be a more convenient way to do so, bu
18.
by jbroman 8y ago
If you're on Linux >= 3.10, I believe Chrome should use the namespaces sandbox rather than the (privileged) setuid sandbox. https://chromium.googlesource.com/chromium/src/+/master/docs...
19.
by jbroman 9y ago
> Maybe browsers could do some static analysis for the simple cases? The risk here is that you end up where cases where non-obvious changes cause the static analysis to no longer work; at least in the current world there's a clear l
20.
by jbroman 11y ago
Presumably https://www.google.com/webmasters/tools/mobile-friendly/ See also http://googlewebmastercentral.blogspot.com/2014/11/helping-u... and http://googlewebmastercen
21.
by jbroman 12y ago
It's somewhat complicated. The changes to Chromium itself are here: https://chromium.googlesource.com/chromium/src/+log/37.0.206... But this is more likely to be a result of one of the underlying reposit
22.
by jbroman 12y ago
This has been fixed. Thanks for reporting.
23.
by jbroman 13y ago
I don't mean to put down Twitter's contribution to open source – which is substantial – but I think you're underestimating Google and Facebook's contributions when you suggest that they are only "one-upping each oth
24.
by jbroman 13y ago
Not sure if this is serious or snark, but...no, you use the card number, of course. Similarly, the magnetic stripe is not typically used in online transactions either. The question is whether the chip-and-PIN technology would have revealed
25.
by jbroman 13y ago
I believe Chrome apps can use Native Client, if you want to message between a C/C++ module and your web application. And of course there are increasingly mature tools for compiling C++ to some subset of JavaScript. https://d
26.
by jbroman 13y ago
Have you seen the Chrome apps platform? http://developer.chrome.com/apps/about_apps.html It's pretty damned close to what you're asking for.
27.
by jbroman 13y ago
But it's reasonable to expect him to say something about how it was done. Recording a video is one possible method, and one he's evidently capable of. Pasting a link to a Facebook profile does not explain the exploit.
28.
by jbroman 13y ago
Blink is a fork of the entire WebKit repository. The lion's share of that is WebCore (especially after removing platform bindings that don't apply to Chromium), but it's entirely fine to call it a fork of WebKit.
29.
Building a Brainfuck compiler with LLVM(jeremyroman.com)
4 points by jbroman 14y ago|0 comments
30.
by jbroman 15y ago
While this is true, it would also mean that more games could be run concurrently as the total computing horsepower would be larger than what the contest can afford to fund. :)

More ›