HN user

mediumdeviation

1,782 karma
Posts27
Comments261
View on HN
www.thepinknews.com 12mo ago

Users claim Discord's age verification can be tricked with video game characters

mediumdeviation
157pts185
www.forbes.com 1y ago

Google Says Sorry After Passwords Vanish for 15M Windows User

mediumdeviation
34pts15
www.bbc.com 1y ago

Ukraine thrown into war's bleak future as drones open new battlefront

mediumdeviation
15pts15
climate-reporting.org 2y ago

Undercover in Saudi Arabia's secretive program to keep the world burning oil

mediumdeviation
147pts54
www.washingtonpost.com 2y ago

Under India’s pressure, Facebook let propaganda and hate speech thrive

mediumdeviation
3pts1
projects.sfchronicle.com 6y ago

24 Hours inside San Francisco’s homelessness crisis

mediumdeviation
11pts1
react-kawaii.now.sh 7y ago

React Kawaii – Cute React SVG Components

mediumdeviation
151pts37
www.forbes.com 7y ago

Microsoft Admits Normal Windows 10 Users Are 'Testing' Unstable Updates

mediumdeviation
8pts1
www.bbc.co.uk 7y ago

Exam result details now obtainable for free under GDPR

mediumdeviation
1pts0
projects.thestar.com 8y ago

Undercover in Temp Nation

mediumdeviation
1pts0
www.nytimes.com 8y ago

The Photos the U.S. And Saudi Arabia Don’t Want You to See

mediumdeviation
4pts0
www.bbc.com 8y ago

'Hate speech' tweets painted at Twitter HQ in protest

mediumdeviation
1pts0
www.blackhat.com 8y ago

A New Era of SSRF: Exploiting URL Parser in Trending Programming Languages [pdf]

mediumdeviation
4pts0
www.bbc.com 9y ago

Why are crime victims being jailed?

mediumdeviation
157pts89
www.nybooks.com 9y ago

They Have, Right Now, Another You

mediumdeviation
2pts0
time.com 10y ago

Barbie's Got a New Body – Inside the Biggest Change in Barbie’s 57-year History

mediumdeviation
3pts0
medium.com 10y ago

The urban, infrastructural geography of ‘the cloud’

mediumdeviation
1pts0
www.bbc.com 10y ago

The department pretending to run North Korea

mediumdeviation
1pts0
maptia.com 10y ago

Soviet Bus Stops

mediumdeviation
1pts0
superuser.com 10y ago

Fonts can only be installed on Windows 10 when Windows Firewall is enabled

mediumdeviation
9pts0
watsi.org 11y ago

Charity Watsi (YC W13) is giving away 1000 $10 gift cards through ad campaigns

mediumdeviation
1pts1
blog.stackoverflow.com 11y ago

Stack Overflow Developer Survey 2015: The Results

mediumdeviation
22pts2
twitter.com 13y ago

Reddit is currently experiencing a malicious DDoS attack

mediumdeviation
91pts84
security.stackexchange.com 13y ago

I managed to capture a botnet control host, what do I do with it?

mediumdeviation
1pts0
www.bbc.co.uk 13y ago

Why speaking English can make you poor when you retire

mediumdeviation
43pts39
www.glitch.com 13y ago

A Post-Game Update from Tiny Speck

mediumdeviation
1pts0
github.com 13y ago

Identifying IP address of filtering devices in the Great Firewall of China

mediumdeviation
64pts19

We went out and used our editor against our and customer's documents. The Open part of OOXML makes as much sense as the Open in OpenAI. Microsoft made OOXML available to fend off an antitrust lawsuit, there is no incentive for them to make it actually easy to build competing editors off their specification.

FWIW the bug I found is that your comment parser assumes the w:date attribute represents a useful timestamp of when comments are made. It does not - a bug in Word causes it to save it as ISO8601 local time but _without timezone_, rendering it useless if more than one user across different timezone edits the document. Instead, you need to cross reference the comment with a newer comment part and find a dateUtc attribute. The above is, of course, completely undocumented.

Ah these poor fools. Having built this exact product (OOXML compatible editor in React) before, it took all of two minutes to find a bug. The issue is that the OOXML spec is not in fact definitive - Word is, and trying to implement it from the spec will produce something that works maybe 80% of the time then fall over completely when you hit one of hundreds of minor, undocumented edge cases. Assuming of course that CC did not just hallucinate something. And then there's the more fundamental problem that HTML/CSS has unresolvable incompatibilities with OOXML. This is why Google Docs for instance use canvas for rendering.

Another fun fact - lodash/fp doesn't deduplicate with lodash when bundled. For a couple of months I was wondering why our app had bundled two copies of lodash. I dismissed it as a measurement artifact at first. It took so long to realize there was actually two copies of lodash and it was because one developer on our team had a preference for fp syntax.

It's not random, setting the query string to a new value on every fetch is a cache busting technique - it's trying to prevent the browser from caching the page, presumably to increase bandwidth usage.

Pretty sure that blog is hosted on Wordpress.com infrastructure so it's not like the blog owner would even notice unless it generates so much traffic that WP itself notices.

That said I don't think there's many non-malicious explanation for this, I would suggest writing to HN and see about blocking submissions from the domain hn@ycombinator.com

Yeah, supporting iOS 12 in 2025 is odd. I was investigating browser support levels just recently for a library and also settled on iOS 16 as a reasonable level.

For reference, iOS 12.x and below are used 0.33% globally https://browsersl.ist/#q=safari+%3C+13+or+ios+%3C+13. Selecting iOS 16 would still exclude less than 1% globally https://browsersl.ist/#q=safari+%3C+16+or+ios+%3C+16. In both cases the vast majority would be older iOS which is unfortunate because I assume they're on older devices with no upgrade path, but you have to decide on the transpile/polyfill cutoff at some point and browser support has an extremely long tail.

Super-Flat ASTs 7 months ago

For anyone confused by why the text says the performance is improving between each graph but the lines don't seem to show that - the color for each key and the scale changes between graphs.

It's because the website is using cufon, a very early attempt at supporting custom fonts on the web using HTML canvas - basically every word you see is rendered as an image rather than text. The end result does not look good on hi-dpi screens like modern Macbook displays, probably they did not exist back then. The site mentions Google Font has a hosted version of it now and you can look at how it is meant to be rendered https://fonts.google.com/specimen/Averia+Libre

It's the scanline effect, here's three lines of JS to disable it from the developer console

    s=document.createElement('style');
    s.textContent='body::after{display: none !important}';
    document.body.appendChild(s)

Since the article doesn't mention this, the intended use for this property is to act as a hint to the browser about what characters are supported by the font, and if the page doesn't have those characters then the browser can choose to not download the font. https://developer.mozilla.org/en-US/docs/Web/CSS/%40font-fac...

This also mean you don't technically even need this property to achieve this, you can also recompile a font with limited glyphs, this property just makes it easier to do this with an existing font file, though of course the user would be downloading a lot of unused glyphs.

There’s some discussion in the specs here https://w3c.github.io/webappsec-secure-contexts/#is-origin-t...

In particular, the user agent SHOULD treat file URLs as potentially trustworthy.

User agents which prioritize security over such niceties MAY choose to more strictly assign trust in a way which excludes file.

A potentially trustworthy URL is a secure context: https://html.spec.whatwg.org/multipage/webappapis.html#secur...

So this is a matter of browsers not implementing it, probably because there’s just not a lot of demand for it.

The main concern about the numbers is that they are probably a massive undercount. Every hospital in Gaza has been bombed by the IDF, and the healthcare system is barely functioning at all any more. Beyond that, there is rubble everywhere, and nobody knows how many people lie dead underneath it.

Just to back this up - this study published in the Lancet estimates a 41% undercount for deaths up to June 30, 2024.

The study: https://www.thelancet.com/journals/lancet/article/PIIS0140-6...

The Guardian's summary: https://www.theguardian.com/world/2025/jan/10/gaza-death-tol...

Please for goodness sake just read React's docs.

https://react.dev/learn

The new docs are very good, they address common questions most devs have, up to fairly complex cases. The "book" unsurprisingly reads like a expert beginner's take, and there are a decent number of poor or missing explanations and code that's not really best practice. It's also really verbose for things that React's own docs do a better job of explaining.

The other part that's disconcerting is the person who did all this has decided to put his name on the public record in an interview with journalists. After reading through the article I had the feeling this would, in a few years, show up in software / AI ethics courses in university. Is this a form of atonement, whistleblower, or extremely misplaced pride?

So far as I know even SF has only ever had one avowed socialist politician

Surely you’ve heard of Dean Preston, the DSA member of the Board of Supervisors who owns a $2.5m house in the city and is also the least pro-housing member on the Board?

While I don’t think housing in SF is socialist, it’s also about as far from neoliberal as is possible, with rent control, zoning and complex environmental review process. These also happen to be the means Dean uses to block development, and has been in place in the city for decades now. Whatever is causing the housing problems in SF at least, it’s not neoliberalism.

It was already solved though (in Singapore and many other places).

I feel like people saying this don’t understand how radical Singapore’s housing solution is. It starts with the government repossessing most of the land in the city to develop housing. I think that’s alone is a non-starter pretty much anywhere in the United States.

It’s also far from perfect - I could for example talk about how construction in Singapore is for the most part only viable because of cheap labor from surrounding country, the ticking time bomb that is the 99 year lease or the fact that prices have slowly but surely ticked up in recent years, far in excess of inflation.

Actually that only works with Map. For plain objects the key is always the stringified cast of the key.

    > o = { [{}]: 1 }
    { '[object Object]': 1 }
    > k = { toString() { return 'a' } }
    { toString: [Function: toString] }
    > o = { [k]: 1 }
    { a: 1 }

While I don't think the legislation make sense, I don't think it's not a problem. Here's some statistics:

Last year, police departments seized at least 25,785 ghost guns nationwide, the Justice Department said recently, and those are just the weapons submitted by police to ATF for tracing, even though they don’t have serial numbers and largely cannot be traced.

In 2021, the number of guns recovered was 19,344, meaning seizures rose 33 percent the following year. ATF has linked ghost guns to 692 homicides and nonfatal shootings through 2021, including mass killings and school shootings.

- https://wapo.st/3tA4F39

The report found that annual law enforcement seizures of guns without serial numbers [in California] have risen 16-fold over the last decade, going from fewer than 1,300 in the early 2010s to more than 20,000 in both 2021 and 2022. The rise in ghost guns has happened alongside a pandemic-era surge in gun violence in California and the nation as a whole.

- https://www.sfchronicle.com/crime/article/california-ghost-g...