Viewing profile — cxr
cxr
HN member- Joined
- Sat, Aug 24, 2019, 4:17 PM UTC
- HN karma
- 5,356
- Public activity
- 4,086 items
- HN profile
- View on Hacker News ↗
About cxr
-- Richard Feynman. Interview broadcast on BBC, 1981.
Recent public activity
-
comment
Comment #49220882
> The simplest way to build a high-quality website. The build (generation) step should be able to execute on/inside the browser runtime (using standardized APIs, not hardcoded agai…
-
comment
Comment #49209388
"The amount[...] that industries pollute" is just "personal changes" with more steps.
-
comment
Comment #49209219
In this case, do the things that it says are no use focusing on. Change your individual behavior to align with the position you profess to have taken about whether or not climate c…
- comment
-
comment
Comment #49116575
Somehow I get the sense that you don't shoot for a balance of $0 in your bank account.
-
comment
Comment #49113434
It's because inhabitants of metric land neglect the decimeter, probably because it's too awkward of a word. Define 1 metric hand = 1 decimeter, and you can cleanly convert between …
-
comment
Comment #49064048
Somehow I get the sense that you don't shoot for a balance of $0 in your bank account.
-
comment
Comment #49010456
For a time, it was popular for movie trailers to end with a domain, often of the form "${ $TITLE }film.com", which would take you to the marketing site for that release. Nowadays t…
-
comment
Comment #48880401
And the Web is not HTTP!
-
comment
Comment #48880341
> There's always some nincompoop who brings that up. Al Gore deserves credit for what he did as a senator and vice president. He helped to pass legislation that enabled the NSFNET …
- comment
- comment
-
comment
Comment #48622045
> Would moving the untrusted content to be served from a separate domain entirely close the hole? Yes.
- comment
-
comment
Comment #48617086
> That's why I'm careful not to include allow-same-origin in the sandbox attribute It doesn't matter. I just said there is no combination of CSP or the iframe sandbox attribute tha…
-
comment
Comment #48609388
> - which really is designed to be used as a sandbox Not for untrusted content living on the same origin to prevent it from exercising any of the powers that it would ordinarily ha…
-
comment
Comment #48600899
CSP is optional and designed to be one part of a defense-in-depth strategy (to extent that it was thoughtfully designed at all—it's an awful standard that should not have made it p…
-
comment
Comment #48597991
A lot of people don't get podcasts. They think it's a genre (and that it applies to the show(s) they watch on YouTube). For a large segment, telling them that a feed reader is for …
- comment
-
comment
Comment #48527709
It's no use being pedantic if you're not going to be correct. > This is a pedantic point, but that's not really what the definition of compiler is as much as a common understanding…
-
comment
Comment #48347598
The creator of lcc also published a paper "lcc.NET: targeting the .NET Common Intermediate Language from Standard C" (2004). https://drh.github.io/documents/msil-spe.pdf > One prob…
- comment
-
comment
Comment #48340237
> You seem very angry and I clearly don't understand what you are talking about. Luckily you managed to frame it so that the failure comes across like something that I got wrong an…
- comment
- comment