marksomnian

Including, amusingly enough, Oracle:

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Task...

Already in beta: http://github.com/vercel/next.js/discussions

My word, what is that page doing? Just opening it is enough to slow my laptop to a crawl (it isn’t the fastest in the world, but it can handle most web browsing just fine). Peeking at the Chrome DevTools shows it’s using over 500MB (not a typo!) of RAM.

I checked the Chrome task manager about a minute later, and it was using 1,811,020K of memory. Why?

This is a bit ridiculous.

Strictly speaking, it doesn't "stop you from running the resulting JavaScript". The result isn't the same as if you'd run the JS directly, but it doesn't fail to output.

This comment makes my HN uncomfortably wide.

I like the idea, but the de-Unicodifier would have to use the current user's locale - de-Unicodifying certain characters (e.g. Cyrillic that look like English) would have unintended consequences if you just assumed they're meant to be English.

How about GitLab then? The CEO is Dutch, working (AIUI) in SF, and the engineering team are all remote. The company is incorporated in the Netherlands, US, UK, and a load of other countries. Does that make them principally a Dutch, American, or ??? company?

3) Actually Portable Executable

There's a better option.

The ones that bother me more are all the mathematical characters, horribly abused.

As I understood it:

1. Teachers submit both an estimated grade and a relative rank ordering for each student

2. Ofqual calculate a distribution based on the predicted grades

3. They compare it to grade distributions at that school from previous years

4. If need be, they shift the distribution up or down to be roughly in line with that school's prior results

5. They then use the rank ordering to assign students grades from that distribution (e.g. in a class with 20 students, each student is worth 5% of the distribution - so if it predicted 10% A* (highest grade), 15% A, etc., the top 2 students would get an A*, the next 3 an A and so on)

Also Microsoft/GitHub are sponsoring their build servers, so that's not a cost for Mozilla https://blog.rust-lang.org/inside-rust/2020/07/23/rust-ci-is...

This is a very difficult problem to solve. As far as I know (and am welcome to be corrected!), the current state of the art is remote attestation - Signal wrote a post about how they're doing it for their contact discovery service[0]. It's a very limited solution though.

[0]: https://signal.org/blog/private-contact-discovery/

Where do you think the password managers get that data from?

Poked a GDS engineer I know, and it's been passed onto HMRC.

With Chrome you can go to chrome://flags, find “unsafely treat insecure origins as secure”, and allowlist your dev server.

That's on just one computer. Depending on how many servers (read: how much in AWS credits) you have access to, you could parallelise it nearly infinitely.

Soon you'll need status pages for the status pages.

Here's a decent list: https://github.com/danluu/post-mortems

JavaScript probably can, or at least mostly. That's where a lot of its problems come from, historical baggage.

The extension ID is literally hard coded in the code of the scheme hiding code. https://source.chromium.org/chromium/chromium/src/+/master:c...

Native Instruments tried that with their Stems [0] project. Didn't seem to get all too far though.

[0]: https://www.native-instruments.com/en/specials/stems/

Had a play with the Colab and it's quite good indeed. The authors claim "100x real time speed", which is mighty impressive, but I'd be more interested in seeing a "Try Really Hard" mode, trading off quality and speed. Is that a thing that can be done in the current code, I wonder?

> Then again, I guess a chip reader doesn't stop people from putting in a skimmer that just reads the card number as usual through the magstripe.

I'd imagine it would do though, as many chip readers only need you to insert your card far enough to read the chip, which isn't far enough to read the entire magnetic track and thus skim the track (am layman though)

log2(1/100)

This also means e.g. ensuring that their recovery email address and phone number are separate, as Google has in the past linked accounts via them and shut down all linked accounts.

The difference being that in the Apple/Google implementation, the app only sends anonymous tokens, with nothing tying them to anyone the infected met. Then their contacts download the full list of these tokens from the cloud and match them against their local history of tokens. (Again, key part being that this matching happens locally, not in the cloud.) The government never gets involved except in allowing the infected to upload their (anonymous) history.

It's because the first two are actually not a comparison. The first image is a screenshot of author's first attempt, while the second is a designer's (maybe the author's?) mockup.

For an accurate comparison, compare the first and last screenshots in the article.

> So it breaks the entire linux philosophy of using input and output streams to pipe data between different modular applications?

Not really. To use your analogy, the way that X works - every application being able to read the framebuffer of any other - is the equivalent of every application running as root and being able to read and modify any file on the system. When you consider that applications running under Wayland may include e.g. banking details, any app being able to read that is like anything being able to read /etc/shadow.

If your computer is perfectly secure, with no untrusted code running, that's great - and also far more secure than 90% desktop computers out there.

From the article:

> Public Health England had started tracing people she had had contact with, and the department and her parliamentary office were closely following its advice.

So that will probably happen within a day or two.

Not an uncommon practice, Jeff Atwood calls it "hellbanning": https://blog.codinghorror.com/suspension-ban-or-hellban/