Viewing profile — om2

That article doesn’t explain why acupuncture works, just gives a hint of a possible mechanism. It also doesn’t contain any evidence that acupuncture works at all (other than as a p…

- and + operators have the same precedence. And a similar bug is possible if the operators were the same (both -). So I’m not sure it’s right to blame this on operator precedence o…

> They also have the option to not spend resources finding the bugs in the first place. The Copenhagen interpretation of security bugs: if you don’t look for it, it doesn’t exist a…

The codec is compiled in, enabled by default, and auto detected through file magic, so the fact that it is an obscure 1990s hobby codec does not in any way make the vulnerability l…

Nation-states are a very relevant part of the threat model.

In this world and the alternate universe both, attackers can also use _un_published vulnerabilities because they have high incentive to do research. Keeping a bug secret does not p…

Take it up with the parent of my comment, who compared them directly.

Implementing it without tons of security bugs is apparently pretty hard.

It doesn’t scale well to content that changes dynamically on the client side very well. Dynamic manipulation of the post transform XSL-FO is confusing and difficult, retransforming…

Fetch API is a pretty recent addition to the web platform. Back in the day, you could absolutely embed images of stylesheets from ftp: URLs. You could even use it with XMLHttpReque…

XSLT is also a really problematic feature from an implementation perspective (albeit in a different way than showModalDialog or MutationObservers). I’m not a Chrome dev but I think…

We have contributed a number of upstream fixes $ cd gnome-libxml2.git $ git log --oneline --author=@apple.com | wc -l 43 The main reason we have a fork at all is that upstream libx…

The speed of light in a vacuum does not change. The speed of light in a non-vacuum medium can be different than the speed of light in a vacuum, however. And light passing from one …

This study accounts for missing ordinary matter, not dark matter. The linked article makes this clear in the first paragraph. Sometimes I wonder if the first commenters (and often …

Web Push does have the sound option now.

It reduces notification display latency because they can be displayed directly by the system services managing push, without having to wait for an opportune time to fire up a servi…

Battery friendly because notifications can be coalesced by the OS and processed without having to fire up a full browser engine process and JS VM just to unpack the notification an…

It's standards track and we've had positive signals from Mozilla and Google. Apple is just the first to ship in this case. Are you also mad when Apple is _not_ the first to ship a …

In Safari 18.4 (currently in beta) tags are supported and notifications can replace each other.

iOS and macOS native app notifications already work the way Declarative Web Push does, not like classic Web Push. This is giving web apps the same ability to be battery friendly an…

What’s the difference between a union type and a disjoint union type? In that C# proposal I couldn’t tell which syntax was which branch of your dichotomy.

It's not really meaningful to measure entropy of a single password, only of a distribution of passwords. You could assume a password comes from some distribution, but how would you…

At least the way it’s described in the Quanta article, it seems like the mathematicians assumed a charged scalar field, which is not something that exists in nature. All charged pa…

There’s more evidence of Altman being personally involved in this incident than in him being personally involved in the OpenAI exit agreement, and he has denied the latter. I’m not…