Viewing profile — mrmr1993

I think this may have been this issue[0], which was fixed in [1]. Seems like the limit has crept up from 3 to 25 at some point in the last decade-ish, but in theory it should be un…

Indeed, that is what they decided. However, I still find the interpretation very surprising. The GDPR reads as if its authors had a different understanding. For example, the 'data …

The UK's ICO took a different stance[0] when the Washington Post tried to do this a few years back. For companies that want to do business in the UK, it probably makes sense to fol…

Where possible, I prefer making the syntax opt-in, and explicitly so. For example, stealing OCaml's syntax: let check_exp (g : Elliptic_curve_pt.t) (x : int) (y : int) = let xy = x…

I think that exceptions are a problem and cause this developer burden only because they are invisible. If they appeared in the type signature, for example as () -[DatabaseReadError…

It doesn't always make sense to plan the types ahead of time; letting the compiler do the work while you code and then creating a nice interface after is a reasonable way to work.

> Potentially dumb question here, but would it be generally possible to create a permissions system for browser extensions that can distinguish between an extension that is actuall…

> Just because someone once committed a broken build, doesn’t mean I’ll never again trust them with access. I don't think this analogy is useful. An error in execution can be quite…

The current position is "sorry for breaking your trust, please trust us". It's hard to find it compelling. > Given the prevalence of comments like this, I wonder why any company wo…

Not a comment on the article, but it seems like the GDPR compliance overlay for securitymagazine.com isn't GDPR compliant. To quote the GDPR at (4)(11): > ‘consent’ of the data sub…

> It's against Facebook's terms: > > 8. You must not use or make derivative use of Facebook icons, or use terms for Facebook features and functionality, if such use could confuse u…

> The language designer saw fit to include both. === wasn't introduced until ECMAScript 3 in 1999, originally there was only == when the language was created in '95. The accepted w…

To my mind, a unit test should test a unit: something which functions independently, and which is interacted with through an abstraction layer. Type systems are good tools for clar…

I would have thought that Coffeescript's optional chaining, present at least as early as v1.0 in 2010[0], would have counted as prior art. [0]: https://github.com/jashkenas/coffees…

Agreed. (Although it's (2^m) sequences, where m is the largest index of the n.)

> It’s going to seem incredible, almost magical, but be assured you there are no tricks involved. The trick involved is: BitSequence.find is a naïve brute-force search, but the pre…

We would and should expect that it is be possible: unless Firefox signs configuration changes per-user, server-side (violating their privacy intentions), the whole configuration co…

Yes, this leads Firefox to be fairly conservative with its permissions. In general, blocking userspace from installing extensions and otherwise running malicious code stops FF from…

I can agree in general, but, for now, disabling a firefox --install maliciousaddon.xpi and firefox --setconfig keyyoudontwant=valueyoudontlike is enough barrier to stop a majority …

This seems to be by design: when these things are available, spyware -- especially on Windows -- will be quick to make malicious changes in all these if they can. It's a pain, but …

I've always thought the permissions model of Chrome/Firefox/Edge extensions is a bit upside-down: extensions need permissions to access data, perform actions in the browser, and mo…

From GDPR Article 4(1): > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who…

As a general rule, if the data can be used to identify some users, it falls under the GDPR. From Article 4(1): > ‘personal data’ means any information relating to an identified or …

For the EU, the definition in the GDPR should cover this. From Article 4(1): > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data…

> But instead of working the way the languages do now, instead of constantly walking through all the layers of indirection that can be used to implement all this at every call site…