pstch

I think you missed the point of my comment : as long as JavaScript is enabled, the website can bypass the "Video decoding API" and just show the media in a <canvas> tag.

Of course, we might be able to find a middle ground between disabling JS entirely and auto-playing all media, but it may be very hard, and that "middle ground" might be changing as website developers find new way to deliver auto-playing media that bypasses the browser's restrictions.

"Disabling autoplay" for silent videos is impossible whenever Javascript is enabled, and it usually is.

What's the difference (to the user) between an animated <canvas> and a silent video ?

This is often repeated, but I wonder if it's completely true. I'd completely understand if it was harder, and more expensive, to find such a control group, but it surprises me that it would be "impossible".

I can think of a few people I know that are much less exposed to 2/3/4g radiation, by living in the forest and not having a phone on them all the time. Isn't a control group that has been exposed to significantly less radiation still useful ?

The idea is to assume good faith. If it can't be done, I think not answering is the best course of action.

They had to be shut off during heatwaves mainly to limit the raise in temperature of nearby rivers, due to the river heating, the limited flow of the rivers, and the raise in the reactor's egress water temperature. It is not clear if the raise in the egress water temperature had a big impact, it seems more likely that the heatwave made the rivers less able to receive the excess heat. The cooling systems were still fully able to cool the reactor, but not without shedding a lot of heat to the rivers (as usual).

Of course, this is not at all contrarian to your point, I made the precision because "no longer could be cooled adequately" could be misunderstood.

They were also some problems with the efficiency and reliability of backup generators during heatwaves, but this is not very hard to handle (the backup generators are much easier to cool than the reactor itself).

> €50 notes, sure, but Europe is backwards - I saw a €200 note once when buying a ferry ticket

To add to your anecdote, on the Europe part, in a few years in Europe I've seen a few 500€ and 200€ notes (the last one a few days ago, used to pay a 1€20 coffee), and lots of 100€ notes.

Minor nitpick: I think you meant to write "<command> | sudo tee".

And a question on the comment - In general (I don't have a lot of benchmarking experience, I did a few of them and used lower quartile to reduce the impact from interference), is it hard to determine that the minimum is not shrinking anymore ? I suppose we could run a benchmark until we have a certain amount (say 3, but it will depend on the distribution) of relatively close minimum values ? This seems to be a good way to have a good probability of obtaining the "true time required" you mentioned.

This doesn't only apply to minimalists. I don't consider myself a minimalist, but I do consider advertising as a psychic attack. This is how many justify disabling billboards and ad blocking : they are merely defending themselves.

> So, as far as password spray is concerned – your password doesn’t matter – as long as it isn’t in the “most common passwords” top 50 list!

That's a matter of point of view. Microsoft may not care that users have passwords in the top 1000 list because, say, only 99.9% of the attacks were made with passwords in the top 50 list, but this .01% of users is still at a higher risk of being victim of password spraying than others. I'm worried that this line could be misinterpreted : banning common passwords is still important (and not just the top 50).

Also, the line saying that password managers should be used "if you are really nervous" is very weird. Password managers are a good way to apply the given recommendations (except for MFA, of course), and on top of that, they allow you to not have to remember all of these unique passwords. It's even more weird since the major point of the article is that the complexity of the password doesn't matter as much as its uniqueness.

> How would this work with apps that create things that a user would expect to persist, like downloads (kept after uninstalling a browser) or office documents (kept after uninstalling the office suite), or media production apps, IDEs, etc.?

I can't see how it would. Making the uninstall remove all the files created at runtime is the wrong solution to a real problem, which is better solved by forcing all packages to be self-contained and making their installation an idempotent operation. If we're able to do this, there's not much to clean up afterwards, and we ensure there's no privileged malware left (such as Zoom's one) as both the package install scripts and runtime would be able to run unprivileged.

I use NixOS, an OS built on Nix, a functional package manager that does this, and being able to set my system to a known state without going through the steps of formatting and reinstalling is really nice.

I stand corrected. There is something wrong in Wikipedia, as he's cited as working for Red Hat since 2011, while systemd was created in 2010.

I suppose that nobody could find another source than him saying that he works for Red Hat in a FOSDEM 2011 interview.

If you have such a source, I suggest correcting Wikipedia, as it may induce others in error.

I feel bad for having inserted myself into this discussion. I think I'm actually agreeing with you here, in that there's nothing that shows that IBM couldn't preserve the culture of its acquisition. I just wanted to comment on what I thought was a statement on their engineering culture.

Personally, I just hope that RH can preserve its engineering culture. I can't say anything on whether it will happen or not, because I don't know.

The engineering culture is not solely determined by the innovations the company has come up with, so I don't really see the point of the question you ask, with regards to the statement you quoted.

When you say that "most of the innovations [...] have been widely seen in the sysadmin community as negative", well, that can only be true in your own sysadmin community. If you replace "innovation" by "contribution", and make the list include everything RH works on (SELinux, NM and systemd are really a tiny part of it), the sentence becomes factually incorrect, even in your own sysadmin community (I hope).

Also, systemd was not created by RH (LP was not employed by RH at the time), and SELinux is from the NSA's TRUSIX. Labeling SELinux as a "negative innovation" is very weird (not that whole sentence isn't).

When you say that RH's only "positive tech" is Ansible, but that it was an acquisition, that's true for mostly everything RH participates in (Ansible, but also systemd, OpenStack, Ceph, CoreOS, GlusterFS, KVM, LVM/DM, gcc, gdb, systemd etc... were acquisitions or acqui-hires), so I really don't see your point. Does the fact that all of this software originated from somewhere else than RH negates the existence their engineering culture ?

EDIT: made quotes inline

I don't see how TOTP/2FA can avoid the problem of user password re-use. The password has still been reused, whether an extra layer of authentication is used or not.

Maybe you can say that it mitigates it, but I don't think it avoids it at all.

> Straight up she was asked about her plans to start a family. They didn't want to hire someone who might cost them maternity pay down the line

In France, you can lie to that question without legal repercussions, even when currently pregnant, and refusing to hire someone for the reason you stated (and a long list of other reasons) would be illegal.

Does this kind of thing exist in the US, even if only in some states ?

True, in the current situation, we can only "limit" fingerprinting. This is the result of the characteristics of the sandbox we use for the Web. Remove Javascript, and most of these problems go away.

This is why I stay attached to making simple HTTP apps that don't require JS, but this is clearly not the direction the web is going at this time.

Although they aren't a field as such (if I'm remembering well, because they don't form a division algebra), sedenions (16-tuples, and also further applications of the Cayley-Dickson construction) do have zero divisors (84 of them).

This makes giving any kind of sense to 0^(-1) even harder for me (when 0 is a sedenion).

I have even seen emails rejected when using a simple dash, or because it was not hosted by a well-known mail service provider, and even because "your email should be of the form <name>.<surname>@<website>" (yes, with a dot, ironically).

At that point I gave up, and I use a single Gmail account for all the services that I don't use very frequently (also because it's not always easy to send mail from self-hosted mailservers, some destinations simply refuse any mail that is not from Gmail/Yahoo/Hotmail).

It allows me to boot my kernel and initramfs directly from the SPI flash chip that stores my laptop's BIOS (coreboot), which is very useful.

My goal is to decrypt my disk from code stored on the motherboard (and physically write-protected) but I'm not there yet because fitting everything on 7.6MB is not easy. I may try using a bigger chip, or use the SPI-kernel to check the signatures of decryption code stored on the HDD.

> I think Linux distros could do this since they have packaging guidelines and huge software repositories.

Many already do such things (most Desktop Environments provide a shell with some kind of software category menu).

Encrypted ZFS with FreeBSD is not actually native ZFS encryption, it uses GELI to handle the encryption part (which may be why it's bad at handling power losses).

The developers intend to merge it in the mainline kernel.

There are multiple advantages for having a VPN module be in-kernel, such as closer access to network/crypto APIs and better performance.

I'm curious, and I didn't see any other mention of it in the thread : why do you consider `lambda` to be flawed ? Is it because it has the same scoping rules as functions, and that you consider these scoping rules inappropriate for lambda expressions ?

> Passing a variable to a function means passing a particular namespace binding from the caller's namespace to the function's local namespace.

I don't think that's true, as the function will never be able to change the binding, and only gets a reference to the value of the binding. If the function was passed a particular namespace binding, it would be able to change this binding's value, and that's not possible.

I agree that "pass by reference" is a misleading way to describe Python functions.

I don't find it weird for a password manager webextension to use a native binary, as password managers may be used in other contexts than browsers, and as it allows to use well-established cryptographic tools.

Of course, serializing to HTML and parsing it out of the browser seems like a very bad idea. I suppose it was made this way because their neuronal network was written for HTML.

I wonder what made Kaspersky use a neuronal network to recognize password fields. It seems over-kill to me, but I may underestimate the complexity of properly handling password fields.

> Any future sales of weather data would be a long way away and would require me to prove out its usefulness, something that hasn't been done with 'virtual weather stations' yet (but has with the raw barometer data, darn)

Honest question, as I don't know much on the subject : why should future sales of weather data be a long way away ? Aren't there already end-users interested in low-volume API access ?

Also, just to clarify, by 'virtual weather station', you only mean devices that run the application, excluding other non-official weather monitoring systems ?

Yes, I was referring to "formation continue". It is true that if you register of your own, you always get to "formation initiale". However, most sources on Internet state that "formation initiale" is only for persons that "have not studied or did not stop their studies in the last two years".

Both my pedagogical (from the university) counseler and the one from Pôle Emploi told me that I was not eligibile to "formation initiale", and that I could only continue studying in "formation continue", since I had already studied, and worked for more than two years. Many people told me the same.

Luckily, I did not listen to them, and still registered, successfully.

I think that many persons (including myself & many public education workers) have a poor understanding of this (admittedly unclear) part of the education code. From my understanding, everyone is eligible to "formation initiale", while some people in a specific situation are eligible to "formation continue", which has been misunderstood as meaning that people that are in this situation are also not eligible to "formation initiale".

The rules on this are a bit complicated, though : officially, this price does not apply to anyone who has worked more than two years since their last diploma. Persons in this situation may have to pay thousands of euros (1k/2k per year) to go to a public university. In most cases, the price is covered by some institution (such as "Pole Emploi", which handles unemployment) or by some professional reconversion organization.

Note that many universities don't follow these rules at all, and will let you sign up (paying the normal price) even if you worked more than two years since your last diploma.

I don't really know how it works for foreigners, and many people (including social workers and advisers) are confused by this.

> (Why don't they talk this up for PR? Because the fact that this is "expired" food would have to come up, and the public will never bother to read and understand what I just wrote above.)

The deals for grocery chains are usually made with tax deductions as an incentive, as there are logistical costs associated with it, and they still dump/grind a very large volume of perishables every day. Talking this up for PR could be detrimental to grocery chains, as theirs clients might not appreciate the "inefficiency" of their distribution chain, as they are the ones paying for the donated/dumped perishables.

But then, why should particular individuals capture such massive capital when their success has more to with circumstance than anything else ?

It's also funny how we make heroes out of corporations themselves, not only their heads : technological advance is often attributed to some specific companies, and we don't see that as appropriation of the results of particular circumstances, but as a sign of the performance of this company.

However; Would there be no XXXXX if we didn't live in an environment that attributes the results of circumstances to specific individuals ? I really don't know.