News for hackers. Stuff that matters.

mary-ext

Re:France passes bill to ban social media use by under-15s on Tuesday January 27, 2026 @02:54AM (#46776768)
I've noticed that there's a decent amount of people who had benefitted having access to computer and internet really early on that seemed to be pro on banning teen access to social media, is there a reason why? the social media of today don't seem all that much different from the internet forums of back in the day

if algorithmic amplification is the reason then I'm not sure why social media as a whole has to be banned over it.

Solid.js and Vue uses these sorts of tricks to shave the amount of bytes from the HTML templates they generate

https://github.com/vuejs/core/commit/30dbdc101a48d747b56bcdd...

Re:Helldivers 2 on-disk size 85% reduction on Saturday December 13, 2025 @07:26PM (#46259638)
are we not reading the same post and comments?

the "industry hearsay" from two replies above mine is about deliberate data duplication to account for the spinning platters in HDD (which isn't entirely correct, as the team on Helldivers 2 have realized)

Re:Helldivers 2 on-disk size 85% reduction on Thursday December 11, 2025 @08:19AM (#46231016)
the industry hearsay is about concern of HDD load times tho
Re:RCE Vulnerability in React and Next.js on Thursday December 04, 2025 @12:08AM (#46144003)
not `__proto__` but likely `constructor`, if you access `({}).constructor` you'd get the Object constructor, then if you access `.constructor` on that you'd get the Function constructor

the one problem I haven't understood is how it manages to perform a second call afterwards, as only being able to call Function constructor doesn't really amount to much (still a serious problem though)

Re:How we made JSON.stringify more than twice as fast on Wednesday August 06, 2025 @03:37AM (#44808885)
also depends on the codebase, if you use frameworks with deep reactivity like Vue, you can't do structuredClone without toRaw (which only works if the object is shallow) as it'd throw on proxy objects.

Svelte has `$state.snapshot()` for this reason I believe.

Re:uBlock Origin Lite now available for Safari on Tuesday August 05, 2025 @07:58AM (#44796988)
that said, gorhill has made a decent effort on making most uBlock/Adguard filter rules work within dNR.

the only problem is that you just don't have any choice for custom filters, it relies on prebaked resources.

Re:JavaScript Trademark Update on Monday June 30, 2025 @11:13AM (#44424335)
closing open source plugins? which?
Re:Zod 4 on Friday May 23, 2025 @01:37AM (#44070152)
Zod's source code is a bit unwieldy to explain what's going on I feel, so here's a small validation library I wrote that uses the same principle

https://github.com/mary-ext/atcute/blob/596e023bcb490b16d09a...

Re:Zod 4 on Friday May 23, 2025 @01:35AM (#44070145)
the solution is to avoid TypeScript eagerly validating the object's value type. eager validation breaks cyclic references.
it seems worthwhile to only mention it as a sidenote rather than a negative score
Re:Zod v4 Beta on Saturday April 12, 2025 @07:02PM (#43668615)
I do wonder if it might have fixed the type complexity issue that has prevented me from exporting Zod schemas from a library, but I suppose I could try finding this out later
Re:Zod v4 Beta on Saturday April 12, 2025 @06:36PM (#43668456)
This is awesome, bundle size has been my number one issue preventing me from trying out Zod as v3 shipped with validations that were unnecessary for frontend use but weren't able to be treeshaken.
Re:Declarative Web Push – WebKit on Thursday April 03, 2025 @07:38PM (#43576756)
I've commented this before, but does this grant an exemption from the automatic purging that ITP does? the wording makes it seem like it does but that just makes their justification for ITP all the more baffling
Never go for ccTLDs for anything critical, since you're practically at the whims of the government controlling it (see: .af ccTLD that the Taliban took over)
Re:Minimal CSS-only blurry image placeholders on Thursday April 03, 2025 @04:27AM (#43566587)
That's pretty much an issue with every LQIP solutions though, including BlurHash and ThumbHash. The only thing that matters is that it's close enough to the real thing, since they're meant to serve as placeholders.
Re:Show HN: Nue – Apps lighter than a React button on Tuesday April 01, 2025 @02:39AM (#43543526)
The animations makes it feel slow, the lack of any throttling/debouncing means that my input feels slow too.
Re:Declarative Web Push on Friday March 28, 2025 @09:16AM (#43505062)
does this grant an exemption from the automatic purging that ITP does? the wording makes it seem like it does but that just makes their justification for ITP all the more baffling
Re:Problems with the Heap on Thursday March 27, 2025 @12:03AM (#43490295)
A vulnerability can be high risk, a vague disclosure means that people can only assume the worst.

Maybe don't vaguepost about vuln disclosures

Re:Firefox Is Finally (Re)Adding Support for Web Apps on Wednesday March 26, 2025 @04:48PM (#43487140)
I don't really understand what this is for then if it doesn't spawn in a minimal frame. This is somehow worse than just having a shortcut to open the app in a regular browser tab.
Re:Firefox Is Finally (Re)Adding Support for Web Apps on Wednesday March 26, 2025 @04:39PM (#43487040)
I don't really understand this viewpoint, Chrome does show your extensions
Re:Achieving Great Privacy with Safari on Sunday March 23, 2025 @05:58PM (#43456228)
gorhill spoke against these sorts of testing sites back in Oct 2022

https://twitter.com/gorhill/status/1583581072197312512

I've decided that if I ever had a need to write React apps I would stick to react-router 6.0.0 specifically.

I think they did good with v6 despite drastically changing it, but the v7+ smells like trouble.

Re:FOSS infrastructure is under attack by AI companies on Thursday March 20, 2025 @05:03PM (#43428950)
right, then the claim of this being caused by "AI companies" feels a lot more dubious because at least this time the perpetrator has just been this one customer on Alibaba Cloud, and we don't actually know what they're up to.
Re:Minding the gaps: A new way to draw separators in CSS on Thursday March 20, 2025 @11:24AM (#43424625)
honestly didn't know hr actually stood for that, huh
Re:FOSS infrastructure is under attack by AI companies on Thursday March 20, 2025 @11:16AM (#43424538)
I do wonder if it's a customer on Alibaba Cloud that's doing all this or if it's entirely Alibaba's own doing that's been wrecking havoc on everyone's sites (mine included)

I don't really like blocking an entire ASN, especially since I don't mind (responsible) crawling to begin with, but I was left with no choice

To be fair, Bluesky hasn't done a great job advertising the fact that you can buy domains from them.

It's not even promoted in the app, they only promoted it in a blog post and then never again.

https://bsky.social/about/blog/7-05-2023-namecheap

Re:Peer-to-peer file transfers in the browser on Wednesday March 12, 2025 @09:05AM (#43342791)
rather worried that it's going to go the same fate as ShareDrop (https://github.com/ShareDropio/sharedrop) and Snapdrop (https://github.com/SnapDrop/snapdrop) where they recently got taken over by LimeWire the crypto/AI company.
See this issue talking about WireGuard and F-Droid. https://gitlab.com/fdroid/fdroiddata/-/issues/3110

OpenAPK here seems to be linking directly to official binary downloads, whereas F-Droid insists on building the APKs for the apps.

Re:Kagi Is Bringing Orion Web Browser to Linux on Saturday March 08, 2025 @03:51PM (#43303393)
the decision to stick with WebKit for Linux is interesting, I haven't had a good time with WebKitGTK as it provides a subpar experience, so I wonder if Orion is going to be different in this regard

Older »