hrjet

I would be also interested in mini vacuum packets, that one could strap to their car or backpack, and make it a touch lighter.

Just imagine the energy savings!

While exodus is a good minimum bar, and I use it, its list of detected trackers is incomplete. I have reported two known trackers, but their signatures are not yet detected by exodus.

It is difficult to know these signatures because the good trackers share their SDK only under an NDA.

Try flatpak with flatseal

The permissions are not interactive, you can set them once and forget.

That's why Matrix is better. Open server, open client, open protocol.

Host your own server, build your own client, and yet be able to talk with everyone else.

For the first problem, you need to ensure that you exercise the muscles along with fasting, to nudge the body away from salvaging proteins from muscle tissue. (Not a bio chemist either, this is what I have read in most articles about intermittent fasting)

What has been the amount of devaluation in USD, post covid?

Is there a ready number we can just plugin to recalculate the value of one's assets?

For example, if I held 100usd worth of a stock in March 2020, what would its worth be in Jan 2021, just due to currency devaluation?

But there really is need for another browser engine. If alone to prove that writing a new one from scratch is possible in 2020.

We have been developing one here [1]. It's a long way to go, but hey, it's open source!

And we had found it working fine on a RaPi 2 couple of years back.

[1] https://gngr.info

htmx sounds great! I am interested in this from the security angle. If browsers were to natively support htmx (or something similarly declarative), it might reduce the need for Javascript and hence improve security.

Agreed; a determined programmer could solve almost any Captcha given sufficient time and resources.

But we are not trying to create an unsolvable Captcha. For those websites that need something good enough to deter generic bots while not compromising privacy of their users, this might be a good enough alternative to reCaptcha.

Imagine a docker image which just works with out-of-the-box generators. Those who need more variety could create a custom generator with Javascript and drop it into a docker volume.

Would appreciate thoughts on this alternative that we are developing:

https://github.com/librecaptcha/lc-core

The idea is to develop a framework for Captcha generators. A few sample generators are provided out of the box, but new ones can be written easily. The framework takes care of storing entries in the database, serving them as challenges through an HTTP API, and checking the responses.

From the README, why libreCaptcha:

  * Eliminate dependency on a third-party
  * Respecting user privacy
  * More variety of CAPTCHAs, tailored to your audience

GC should be available in WASM in the future. And, not all applets needed JNI.

In other words, this is enabling a subset of well behaved applets, while excluding the naughty (or advanced) applets.

There is also a WASM to Java source transpiler: https://github.com/wrmsr/wava

We don't need a new web; just more browsers that respect the user's privacy. There are many ways to achieve this. At gngr[0], we are taking a "safe by default" approach. This is very similar to the NoScript / uMatrix approach, but with one difference: the browser itself is offering this and is hence more water tight. There are no behind-the-scenes requests that a plugin can't block.

[0] https://gngr.info

I'm not sure if it's still this way, but Chrome used to load every tab on startup.

I used to avoid Chrome for the same reasons, but then I found an extension and, uh, extended it, to create:

https://github.com/hrj/sloth/

It forces all tabs into inactive state on startup. Also creates a new tab page (or switches to an existing one) to avoid loading the focussed historical tab.

I got confused too.

We can't stop people from naming their projects/products the way they want. However, I think headlines in HN should be editoralized a bit to provide context, followed by the actual headline from the webpage.

You can try increasing `N` in the nbody problem, and also measuring the memory overhead.

You could also try one of the hashing / crypto algorithms in JS. They should involve a lot of integer arithmetic that should make WebAssembly stand out.

More tips:

* for performance measurement, setup the benchmark so that JS run takes atleast 30 seconds. (Increase N, etc)

* close all other applications and tabs

* If you have linux, set the CPU governor to performance

* Measure the CPU temperature and make sure you let the CPU cool down between runs. In modern CPUs, the cores get throttled automatically when they reach a certain temperature.

Thoroughly solving security problems would of course take time. But the parent comment asked a very high level question: How does the security of this new proposal compare to a client-server model such as that of OpenGL? One can simulate one model over another, but in that case, performance can suffer due to overheads. This sort of thing needs to be addressed at the outset, because graphics needs performance and the web needs security; neither can be compromised upon.

Why are you proposing a new standard when you are still thinking about security?

Interesting that "drm" occupies almost all of the "drivers/gpu" space!

128MB was the total RAM in the VPS including OS + nginx + JVM + Postgresql. The heap allocated to the JVM process was about 64MB, but bear in mind that this was an actual application. So, it's hard to do a detailed comparison between JVM and Go without standardising on the application. All that I am claiming is that JVM is in the same ball park.

I've written small HTTP servers in Java that can happily run with a heap of 30-50mb or less. Runtime overheads add some on top of that, but not much.

I second that. I have deployed a medium traffic web-server written in Scala backed by a postgresql DB on 128MB VPS, back in 2009!

I think the perception of Java suffers a lot because it will consume all the RAM on your machine by default if you let it (but not immediately).

I don't think that is true. The default heap size for Oracle and OpenJDK VMs has been bounded as far as I remember. In fact, I would like it if the VM, by default, allowed the heap size to grow upto available RAM when GC pressure increases, but that doesn't seem to be the case as of now.

Edit: Did you mean non-heap VM arenas grow indefinitely? If so, I am not aware of them.

6. Tooling

Nope, there are no other browser extensions. Just Chromium with uMatrix.

Here's the complete request/response data in HAR format: https://gist.github.com/hrj/f538ed3e67636c94934e221efe67b323

(Note that the UA string is being spoofed by uMatrix, but I don't think that's relevant. I tried disabling the UA spoofing with the same result.)

Chromium with uMatrix installed. (exact versions irrelevant, because it hasn't been working for me since atleast 2 years)

From a privacy point of view, it would be awesome if you stabilise the NoJS version of your search page: https://duckduckgo.com/html/

* The above landing page doesn't work (typing a query and pressing enter returns me back to the same page).

* Even if I manually enter a search URL like this https://duckduckgo.com/html/?q=test it doesn't fully work (page navigation and requerying is broken).

Ah ok. I think I see what you are saying now. As long as a sizeable portion of browsers support a fresh version of the preloaded list, there is sufficient customer feedback to push the servers to only support https. Right?

You don't need to trust any particular browser here.

You do need to trust that the particular browser you are using supports preloaded list, and is using the latest updated version of the list, and is not missing any entries!

And even with uMatrix installed + JS disabled for that domain!

Edit: raised an issue in uMatrix: https://github.com/gorhill/uMatrix/issues/672

Try using a script/media blocker, such as uMatrix, rather than an Ad-Blocker.

The disadvantage will be that sites which require scripts will break on first-access.

The advantages are better overall privacy + security, and that simple static ads won't be blocked and hence those authors will be compensated.

(Edited to better match parent's concerns)

The parent poster gave an example of hypocritical behavior:

He talks about the virtues of unfettered capitalism while his lobbyists keep India from playing in American satellite markets.