gdm85

Aside from rounding I have 2 reasons to not use them where (financial) precision is necessary:

- https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe... (it's the same in other languages)

- if results are not exactly reversible then you cannot implement verification and that hinders defensive programming

I think that a constant pressure to optimize this specific aspect (layout) has caused this. However, optimization is not innovation.

What are novel ways that search results can be presented to (and consumed by) the user? Where is search going in the future?

I am a bit surprised to not see them on top of this game, but at the same time it would be a ripe chance for someone else to give it a spin (assuming that they have a sizable number of users to begin with).

Great article! Thanks for the link.

Nowadays I cringe when I regularly see small fridges completely encased in furniture in hotel rooms, with no air circulation. They get very warm and even the top surface of the furniture sometimes.

I wonder what William Holladay, the grandfather of the article's author, would have to say about that.

The idea of putting the compressor on top is also interesting, why is it not being pursued? Noise issues?

I didn't know that Netgear already has proven to not be following coordinated disclosure; generally I think it's fair to give some time to the vendor.

I like how Google Project Zero does it: give time, but don't extend indefinitely.

Since the details of the deal are not public, I will give you another possible speculative scenario: bribery :P

I see it as a valid learning tool, a modern alternative to a Basic variant, however later on I would complete the curriculum with something with a bigger market penetration.

By the way, I meant coordinated disclosure and I am not aware of Netgear not doing any at all, never.

If what you said were true then zero-days would be always ignored and not a concern.

It's not optimistic, it's what a responsible vendor is supposed to do. By not following responsible disclosure the researcher has lifted the vendor from the possibility of organizing a proper response.

There is another reason why responsible disclosure would have been better (and less short-sighted): vendor might make an internal audit, find root cause and invalidate a bunch of certificates at once (think about similarly leaked certificates due to a bug in some deployment tool).

Now it's an open race with the bad guys, and surely a lot of them all at once; hardly an advantageous scenario for end users.

Some parts of the talk did not really stitch together; if we consider the main arguments against Unix (and the funny dab at Plan9) I felt them a bit lacking in the sense that they do not propose alternative philosophies, but only a liberating "mixing things together is cool".

I can totally understand that as a form of catharsis, and a mindset totally apt for hobby projects, but if we are playing in the realm of OS design...I would think we can do better in terms of architecture and philosophy? "anything else is better" does not really convince me, some structure is usually better than none at all.

You're welcome; I figured it was something like that.

Sorry "vultures" took it over, I would use something like GitHub/GitLab pages if you are looking for minimum maintenance.

Not sure if you are aware of this (I hope it's not on purpose), but your personal website mentioned on your 'About' description contains some questionable content (gambling?) in indonesian language.

If I may ask, was it hacked, you lost the domain or you have put that content there on purpose to generate some revenue?

> I doubt this is useful as a proof in the way one might wish (that is, proving that a web server delivered content X at date Y). The reason is, it does not appear that anything prevents the user from modifying the web page and then generating a "proof" about the modified version.

Thanks for saying it so clearly, this is exactly the first thing I thought (and it reduces the value of the functionality by heaps, since everything can be forged).

They probably calculate different scores depending on the purpose (SEO, safe browsing etc).

If you want to stand your ground you could simply add a password to your archive (works best with 7zip as you can avoid exposing the filename with extension); just mentioning it for the records.

> a GitHub page that gets blocked

I have never seen this happening, but if you come around proof of this please share the information.

Edit: this is the proof: https://twitter.com/notdan/status/1209642463859630081

They fixed it afterwards.

> some sites choosing to link to GitHub directly

They can link directly to the download on your site to the same effect?

The score for serving binaries would be a different metric than for SEO.

If I remember correctly you need to make a donation to access some firmwares, but I cannot tell whether you can access the source after the donation.

If you prefer to directly host it then you will have to wait (and hope that no one files a complaint about your domain).

At some point your domain will have a sufficient score and it will not show the warnings to users.

How long that will take is, however, outside of my knowledge and it would be nice to have some official reference about it; as it stands I agree with you that it feels like begging to a benevolent dictator.

Source? I can find it if I search for "beef project".

From my experience this works fine (using links to GitHub downloads), see also my other reply.

They don't give score to "GitHub accounts" but they use some form of score/accountability based on the domain. As far as I know the main vector they are trying to protect users against are emails with links to binary files hosted on random hacked servers.

Have you considered releasing the binaries as releases on GitLab or GitHub?

That's at least how I would try to work around the issue.

Regarding the blog post: I think this is a side effect of making the web a "safer" place for all kinds of users; nothing which I appreciate personally but I understand why a large mass of users clicking everything is a concern for Google/Microsoft/Apple.

I was once thinking that people could be educated to use the web in a better and safer way...now I think everyone (tech-savy users, big corporations) has given up on that and that "safe by default" is the norm.

Agree, also noticed that one.

> Event notifications are a core pattern in micro service development.

I might agree, but it's not the only core pattern.

What if one needs (distributed) transactions? The fact that pub/sub is advertised as a prominent feature makes me think that asynchronous models are preferred, at least in design and philosophy of the framework.

I am a great supporter of open source diversity and ambitious projects, but the rationale behind this one...leaves me skeptical.

I fondly remember this game has having great animations, plus it could be beaten :P which was a plus, more modern Chess games were really hard to beat

Would have appreciated if someone noticed the spell-checker underlining in the slide screenshot and...fixed it.

Interesting! Let me give this a try :)