Hacker News Reader

sgnon Git: Malicious repositories can execute remote code while cloning

Hope That Help, HTH.

sgnon A Look at the CPU Security Mitigation Costs Three Years After Spectre/Meltdown

I think this paper should explain it https://dl.acm.org/doi/10.1145/5666.5673

sgnon Monorepoize – Bash scripts for creating a monorepo out of smaller repos

They have everything the same with old subtree. From commit message, history, object ID, commit ID.

git-subtree(1) also allows splitting subtree.

git-subtree(1) uses plumbing git command, which is stable interface, unlike this one, which uses porcelain command.

IIRC, Git’s maintainer uses git-subtree(1) to merge gitk and git-gui to Git.

sgnon Fix Boyer-Moore searcher with the Rytter correction

It’s called user-defined literal suffix in C++11. https://en.cppreference.com/w/cpp/language/user_literal The “s” suffix come with C++14 https://en.cppreference.com/w/cpp/chrono/operator%22%22s

sgnon Show HN: Shox: A customisable status bar for your terminal

But not for those want to communicate via serial console.

Or is there anything was changed?

sgnon Notepad++ v7.8.2: Free Uyghur

This release had triggered a spam war on Notepad++'s github.

They still spammed its repository until 9 days ago.

E.g: https://github.com/notepad-plus-plus/notepad-plus-plus/issue...

sgnon Vietnam’s Richest Man Bets $2B to Sell Cars to Americans

I don't think the Vietnamese American will buy those cars.

They still think all successful business in Vietnam has some ties with the regime (which they hate a lot).

This business is even more problematic to them since the owner is a Northerner, he had started on Eastern Europe, and his father was a military officer.

sgnon Privacy analysis of Tiktok’s app and website

Firefox 58+ blocks canvas by default. We don't need to change about:config for Canvas tracking.

Not sure about the status of AudioContext tracking, though.

sgnon If you care about user privacy, don’t use Facebook JavaScript SDK

Yes, I'm in favour of using Secure Cookies for authentication.

But, the TDD (Trend Driven Development) people won't agree with them. They want to work with those shiny trends for a shiny resume. JWT is horrible for the web, it need JavaScript, some needs Local Storage, which is worse than Cookies itself, and the revocation is complex.

sgnon Evaluating Bazel for building Firefox

Does it also ship java binary? Is the java binary statical-linked? If not, how can we build on platform with not-mainstream libc (read Linux with musl libc like Alpine, Void)?

sgnon Digital pollution

And yet they invented another technology (amp) to solve the crappy situation. Thus, people added more layers over existing layers.

sgnon Digital pollution

I feel like the blog argument could be made for using garbage collected language (Java?) over assembly. Anyway, stepping from C to C++ is a lot of overhead.