zsims

Tradeoff is all the edge cases of cookies, CSRF etc. It's not a simple "cookies are better"

> The U.S. government wants everyone to abandon C/C++ -- how will they do this if they depend on SQLite3?

ABI, the same way you don't need the Linux kernel to be rewritten to remove your app dependency on C/C++

We do, I want to know if it's going to rain on my birthday

> Whilst Crowdstrike are going to cop a potentially existential-threatening amount of blame, an application shouldn't be able to do this kind of damage to an operating system.

It doesn't operate in user space, they install a kernel driver.

Blame for Flash? Or celebrated for killing Flash?

Flash was a security nightmare

There are other paths to the attack he mentioned. Eg you find an API that accepts ciphertext or part of. Or a cloud backup/restore flow. Likely you need another vulnerability but it does happen.

The problem is, it's not their software. No control over Slack, Outlook etc

Useful because you can support existing passwords without requiring everyone to login or reset their password. Still has flaws though, like password shucking.

Western Australia could be the ongoing emu war - https://en.wikipedia.org/wiki/Emu_War

Nix has no security guarantees, nor sandboxing primitives. So not really comparable.

It's from https://mathiasbynens.be/demo/url-regex and rather fantastic. Thanks for sharing

I'd say at this point the most important part is "correctness" (rendering etc) and security

Doesn't that argument apply to tabs also? Eg IE6 days where there were no tabs, and everything was deferred to the OS/desktop window management. It was clunky and painful.

You mean like http://www.lambdashell.com/ ?

I haven't been maintaining this much lately. Suffers from the same problems as other tools - the accessibility APIs are slow

Discovery of Headless Chromium security vulnerability, how it works, and mitigations that should be applied to similar configurations

Unless they see Bard as fulfilling that.

You're worried about performance but want x86 emulation on ARM?

You're just making up things trying to find a reason. HTTP was only invented in 1989, so these imaginary early 80s clients likely don't exist

> $18321AUD

Is that a typo? Or are they actually that exxy?

Flatpack only came out in 2015

And the commercial fork: https://www.bsimm.com/

Um excuse me, how will people know I had an açai bowl for lunch?

At that point, how much of the internet is that?

Partial mitigation. It's not SSRF "proof" but I suppose nothing really is.

Unsure if joking. XUL was awful.

If the patch gap is small, yes. But are you patching V8? Node generally isn't.

> It was reasonable to overlook this option 170 years ago, when the Rails Blog Tutorial was first written.

Woah. Rails is really old