I don't see any suspicious JS on the page, so I suspect it's a styling issue triggering some inefficiency in Firefox. There are animations and text-shadows.
The kinds of things that you list that an attacker could do with root access don't sound like things that an actual attacker would want if they are infiltrating random people's personal computers for their own gain. Modifying the kernel or arbitrary programs is so far beyond what typical malware tries to do that I think it seems kind of silly to consider those things when evaluating the security of an operating system designed for personal computers.
I think you're just illustrating my point. Those concerns don't apply to personal computers and they don't stop an intruder from doing anything they might practically want to do for gain. Like installing ransomware, participating in a botnet, exfiltrating personal files/browser cookies/etc (all accessible as non-root!), ...
Why would an adversary being able to execute code as root on a personal computer be a bigger threat than their being able to execute code as non-root? Surely just about any of the stuff that a malicious hacker might want to do to someone's personal computer can be done without root... right?
From what I've seen it seems to be a very common opinion that the pro 3 is worse than the pro 1 and 2. Hopefully the new tip design is just a temporary indiscretion like the touch bar.
I think it could be made much faster by emulating Linux system calls instead of running a real kernel, and translating x86 binaries to wasm before running (using something like cheerpx).
It's because it's effectively impossible to make a markdown authoring app that meets everyone's needs, and people tend to be picky about what they want in a writing environment. People have strong preferences about WYSIWYG, flavor of markdown (pandoc/quarto/GFM/etc), theming support, some want notes to be able to link to each other, etc. As an example, I require math notation support for basically everything I write which automatically rules out 90% of markdown editors for me.
It probably has more to do with the fact that formalizing chess in such a way wouldn't be particularly interesting. Chess is mostly studied because of its historical significance, and if you change the rules then the game no longer is as connected to its historical significance.
I mean... is it not obvious that in a he said she said scenario like this they have to simply side with the buyer? I struggle to understand your mentality, assuming that you have no way to prove (to Amazon or to a court or whatever) that their negative feedback was fraudulent.
The first half of the article says "namespaces, cgroups, and seccomp aren't 'security boundaries' because if the kernel had a bug it could be used to escape from a sandbox". Then in the second half it says "use gvisor and do all this other stuff to avoid these problems." This presentation feels kind of dishonest to me because the article avoids acknowledging the obvious question: "well what if gvisor has a bug then?" I mean, sure, another layer of sandboxing that is simpler than the other layers probably increases security, but let's not pretend like these are fundamentally different approaches.
If the successful people you meet in real life are nice and you see lots of meanness on the internet, it probably just means that anonymity causes meanness.
> We already know many useful things to do; there are already 10,000 startups (9789 out of YC alone, 4423 of which are coding-related) doing various ostensibly useful things.
Learning homological algebra is a long way away from learning about varieties and ideals in any sensible order in which to learn material. You have to do a lot of work in between in order for homological algebra to seem motivated. Sounds like you ought to try an introduction to algebraic topology.
> Well, dhh considers torrents outdated (I’m not kidding, check the tweet), so it’s only officially being offered as a single download from a Cloudflare server. Which sounds cool until you’re on a weak-ass connection in constant danger of dropping halfway through the download.
That has nothing to do with bittorrent vs http; use a download manager instead of a browser.
Don't you think that the vast majority of dangerous human drivers would be perfectly capable of changing their behavior during a driving test? Even without any malicious intent most people would be more careful during a test.
> targeted specifically high ticket items (jewelry, luxury)
My immediate instinct upon reading this is "of course those businesses wouldn't be interested". They are selling a brand and image first, and if it looked like they wanted people to download some new app and put in their bank details to make a purchase instead of swiping a credit card it would cheapen the brand. Luxury stores are all about a streamlined experience and the appearance that money is no issue.
At least this is a topic that the average HN reader is likely to be able to understand and which is closely related to software. Several years ago there was a period where there were periodic posts about things like homotopy type theory and research-level algebraic geometry which inevitably spark only inane misunderstandings and uninformed speculation in the comments. I can only attribute it to some kind of fetish for the frontiers of pure math.
When something costs $1/year, the primary barrier isn't being able to afford it, but having a valid payment method. Depending on the requirements, it can be an issue if you don't have a credit card, don't have a bank account, etc. And not having those things is slightly correlated with poverty. In addition, it makes it harder for children to sign up (not necessarily a bad thing, just saying).