floil
floil on Hacker News
They don't release it because exposing a stable instruction set would kill their ability to quickly iterate, to release silicon with bugs that can be papered over with software fixes, as fixing bugs in chips is very expensive in terms of time to market, and undoubtedly to charge more for what looks like a hardware feature but actually is a software feature.
It's been this way for 25 years and I don't see it changing.
I'm unfamiliar with claudish and the example helped show the problem. But! There was something uncomfortably familiar in the Claudish example -- this is the way human programmers write when they're deep in the weedy details, and writing the changelist description afterwards as if coming up for air. Overuse of parentheses in nested lists especially, as if the English text needs to bend to the strict needs of a C++ parser.
The rewrite did seem to lose the important fact about the ensure- pattern being idempotent.
This is correct (I worked on chrome in 2008) it's important to remember that chrome's renderer was webkit, an existing c++ stack.
Chrome's stability innovation was to run different tabs in different processes, and the security innovation was then to sandbox those processes.
Rust would have been super nice but it wasn't an option then, and of course let's remember that Rust was developed by Mozilla specifically with the goal of making safer browsers.
And to connect it back to the original post: the moments that make me cringe the most in Grand Designs are the ones where the owner decides, as a cost-cutting measure, to manage the project themselves despite not having prior domain experience. Whereas the author of this article successfully engaged an expert early on, and saw it pay dividends, despite the up front cost.
My interpretation: the paper describes a system that works for a starting concentration of 200 parts per billion, or higher. This is unrealistic because, in real world contamination scenario, you would expect to see a starting concentration of around 1 part per billion.
I've read the book twice, decades apart, and it gave me great joy each times in very different ways.
I can see how this text causes some to experience the opposite of joy.
Both experiences are valid. But like there's not some big conspiracy of people who claim to like this book or this writer as a facade. They say it's great because, for them, it's a wonderful and meaningful experience.
Chrome browser extensions aren't really compiled, though I suppose they can be obfuscated. If you install this extension you ought to be able to find it in your Chrome profile directory and look at the manifest and JS source.
(former longtime chrome engineer here)
Both the KitchenAid and the Hobart use a planetary action which is not the best for kneading bread. A better idea is to find a small spiral mixer where the bowl rotates and the mixer blade spins in place. I have a Haussler Alpha and it's great for tough doughs, and seems appropriately overbuilt.
Site Isolation launched in Chrome in 2018, but the work started in earnest in 2012 -- see the below check-in. The idea in Chrome dated to before the Chrome 1.0 launch; it was the subject of Charlie Reis's PhD dissertation and he interned on Chrome pre-public launch.
https://chromium.googlesource.com/chromium/src/+/c6f2e67ab40...
Site isolation proved to be the biggest refactor in Chrome's history, and was one of the motivating reasons for the webkit/blink fork. Making site isolation work touched a huge host of features, since handling iframes out of process has a way of making simple things incredibly complicated.
The example I always gave was: imagine how the "find text in page" browser feature would be implemented. With the entire document in-process, it was a simple for loop. With the document and its subframes sharded across multiple processes, it is now a distributed search problem that requires handling of out-of-order results and stitching them into a traversal order. What's more, to achieve Chrome's security goals, you want to avoid introducing functionality that would allow the [presumed-compromised] process of the outer document to query the contents of the inner document via the find in page feature. So you can't simply do this as a peer-to-peer query between the renderer processes; it needs to be coordinated by the main browser process.
Congrats to the Firefox team on this milestone.
It's not a whole new level. An aspect of Quadro differentiation has, since ages ago, been based on selectively disabling features that the consumer gpus silicon was capable of. It's the same strategy here.
This makes sense to Nvidia because it creates a segment differentiation and will allow them to charge more for the higher hash rate parts.
As someone who walked away from programming two years ago, reading this stirred something in my heart that I honestly haven't felt since quitting. I've been frankly surprised that I haven't had the desire to code in that time, but it turns out I am nostalgic about the times when coding was a fun process of self discovery.
This article gives me the inkling of a way back to get back to there. Thanks to whoever shared it.
Fairly certain this feature is more then ten years old.
When I was a kid, my next door neighbor was an ultra-marathoner and the fittest person I'd ever met. He died suddenly one day of a heart attack while out on a run.
Read it as "both decelerate more slowly and rotate more slowly" and it's an accurate description of what happens when you sweep in front of a curling stone.
Can confirm. The whole group working on that effort has been laid off.
Fwiw: this has always been the case, since Chrome 1.0.
Posted by
floil on Sunday December 30, 2018 @05:04PM
from the christiandicanio.blogspot.com dept.
In chromium, the glyph attack defense works by normalizing to a "confusability skeleton" -- the ICU library actually does the normalization. Even within latin-1 this does some mangling: m gets normalized to rn, w to vv, etc. The query rewriting is a different problem, but it's possible it uses the confusables list as an input.
For myself, I switched everything over to Google WiFi's, precisely because they auto-update, and having worked previously on a security-focused team at Google, I trust them to have a competent security team and actually stay on top of the patches. I don't miss fussing with manually updating router firmware. Life is too short.
On the other hand, my Nest thermostats were bricked after a software update this week, so maybe today I'm starting to see a crack in my "auto update is best" dogma...
Did you read the article? She hasn't worked at Instagram since 2014.
Moreover, github.io is in the public suffix list, so it is effectively a TLD (foo.github.io is a different site from bar.github.io; they can't become same origin by means of document.domain).
The risk of eval() is giving control of the site data of foo.github.io to the author of a stackoverflow comment.
The warning is part of the fun, though.
Find out if it works for you by typing your employers name (or your spouse's/parent's/etc - coverage seems to be for "family") here:
https://care.lyrahealth.com
This probably doesn't help OP but might help a reader who's facing the same logjam and qualifies: see if your employer (or a family member's) offers a benefit through
https://www.lyrahealth.com/ . It is a super streamlined process that takes all the pain away of triaging what's going on and figuring out which type of provider to use, and then selecting one. I got it through my wife's employer even though I'm not on her medical insurance. There's a diagnostic survey, then they suggest some providers (with a strong default choice, which makes a huge difference), and even help you draft the appointment request email. And they follow up to make sure you get help. It still feels like you're owning the request for help, which is pretty important -- it just puts the whole process on rails.
Depression can take away your ability to complete any of the above steps... I know because I didn't get help for years because of the (minor, but thanks to depression, major) hurdle of finding a suitable provider through my work benefits.
Therapy works, y'all.
In chrome, what's blocked is page-initiated top-level navigations to data URLs (because of spoofing concerns). You can load them in iframes, and you can still do a browser-initiated navigation to them (i.e., type them into the omnibox). They can be used freely as subresources.
Http Redirection to data: urls has been blocked in chrome for at least half a decade. There's really no reason to allow that, a server can just as easily return the data as the response body.
Moreover, x and y are not independent on this plot -- x is just the rank of y. A graph constructed this way can never dip down. So a linear-looking upward trend is basically guaranteed.
Nvidia's gross margin is north of 60%. They want to sell GPUs. It seems more likely that they're trying to segment the market so that they can charge miners, gamers, and deep learning customers different prices; the per-customer limits are a way of accomplishing this, since gamers don't need to buy in bulk like the other two.
Yes, but site per process is harder: iframes need to be booted out of process when they cross a site boundary.
To illustrate how much complexity this brings, consider a browser feature like find-in-page. It used to work by traversing the document and descending into subdocuments synchronously. It was basically a big for loop. With the page and its iframes split across multiple processes, now we need a protocol and interprocess communication to coordinate the find operation, and assemble the matches together into a tree. The results of this async operation can arrive in any order, and you need to filter out late arriving responses for previous queries, when the user modifies the search string.
This pattern needs to be implemented, rinse and repeat, for hundreds of subsystems. It was really hard.