HN user

shuringai

59 karma
Posts0
Comments53
View on HN
No posts found.

question, you mention "no more AST parsing" as a selling line for semgrep. Isn't this actually a bad thing for a staric analyzer, as ASTs are actually... abstract, and closer to the real logic of what the code does? I know analyzing text is faster but is it worth?

how is this different than blackhats contributing to general awareness of web security practices? Opensource considered secure just because its up on github is no different than plaintext HTTP GET params being secure just because "who the hell will read your params in the browser", which would be still the status quo if some hackers hadn't done the "lowest of the low " and show the world this lesson.

I do use and like both fastapi and pydantic but this situiation is something they brought to themselves by adopting experimenral features into their mainline code and sell it as production ready. Python designers are not responsible for time-to-market decisions of other projects. It comes with the "no liability" part of opensource.

FicusJS 5 years ago

and what is the problem with that? "Single guy made a good looking and so far working product in only 59 commits since september" is a different way to present the same facts.

"Still people want to create more distributions instead of actually implementing missing features in the existing distributions"

If people would document their stuff and would bother to give the slightest hint what should be done next for a newcommer to their project, people wouldn't have to restart everything from scratch.

"I want a truly libre, open phone! ... MY truly open libre phone that i own and brand and get rich on!"

users can already get this behaviour by setting 2 values in about:config why is this presented as new feature? mozilla laid off devs to start making marketing stunts?

it seems like every time one company of the technofeudalist leaders got itself into a scandal, fanboys tend to forget the previous ones. When did apple become the "lifestyle brand", the good guys? Not so long ago HN was full of the storm how apps stopped working when tracking servers went down. Apple shares the very same interests around your personal data, it's just that facebook is a reseller and apple is an enduser of your privacy.

Losing faith in UX 5 years ago

sorry OP but this just means that since '97, UX evolved faster than a human can follow (as usual in tech) and you are just out of touch with current trends. UX is still of the same, if not better importance as a decade ago (remember that uber is just taxi with better ux, airbnb is just accomodation with better ux, and revolut is just banking with better ux)

and in return, brave replaces your urls with their affilate links. no thanks i'll took the hassle to open tor browser on an ipfs client

Block ciphers are modelled formally as indexed permutation groups, which you do round-by-round, irrespective of the mode of operation. ShiftRows and SubBytes heavily impact this formal model while the mode of operation is not. Your thinking is too practical and "close to code" and as usual, it makes the false claim that the mathematical rigor is unnecessary in cryptology

While I do share your frustration on linux gaming I thought to give sound to the opposing side who simply had this coming oit of a risk analysis.

TL;DR - it's indeed much easier to cheat on linux

After decades of fighting wars with crackers/reversers and all anti-debug/anti-cheat methods proven unusable against russian teenagers, AAA companies reached out to microsoft to get their undocumented binary "drivers" into the system which you cannot inspect from userspace.

With linux coming into the party, even if with the amazing work by Wine you do manage to get the desired anti-debug behaviour on the emulated userspace app, linux people can make arbitrary hooks on their kernels.

So instead of risking major reddit shitstorms over that 1% players that can cause 3% profit loss, it's better to ditch that 1%

Las Vegas also has a shitton of electric waste, how about we start suddenly going green with that? How is it that people only care about green earth when the target is the smallest slice of the pie?