Viewing profile — szmarczak

I wonder if the code was written by AI?

> The development team You mean the one guy who prompts Claude?

It's another vibe coded slop

> Jarred was already writing slop well before he had access to LLMs. I don't see anything business related in that statement. What's this new level of gaslighting? "It was not beca…

This is good. However, it still sends info about the players ~200ms ahead which still makes you lose.

Why does the website render a word or two per line on mobile

> memory monitoring would be part of the application monitoring stack You don't need it if you have everything allocated upfront. TigerBeetle does this, everybody else can. Using s…

> this leads to application crashes instead Same happens if the page file is full. In that case, why don't those programs use disk directly instead? No such problem would've ever o…

> Does this result in programs more frequently erroring/crashing because they can't allocate? I run Firefox, VSCodium with LSP, Discord, Signal and there's still space left for a g…

Settings -> View advanced system settings -> Performance (Settings) -> Advanced -> Virtual memory (Change...) -> No paging file

I have disabled overcommit both on Windows and on Linux. I hate having random programs being killed. Unfortunately, many programs commit 2x memory than they actually use. Often I s…

The wording is so ambiguous, they should've determined what's the threat first. Or else anybody could point at anybody and say "active threat". Most likely they still would've been…

Ah yes. Let me detain you for 8 hours for doing what you're legally allowed to do. Sorry for my mistake, it's all paid by the taxpayers anyway.

> They were “just doing their job,” It's always this one exact excuse. They were simply "following orders". The police don't have their own brains capable of thinking.

> claiming it's the fastest across all datasets I never claimed so. Please stop stating I said something when I didn't. > as a general purpose hash table That's what I claimed. The…

No. Fundamentally it's not possible to be faster.

> isn't available in all cases Which ones? Websites that ship no JavaScript? All browsers support this. > can in some cases completely break sessions Or you can just remove local s…

There's color space and there's color depth. You may be using D-P3 with 8 bit, which is worse (less accurate?) than sRGB with 8 bit. And there's bandwidth. Your monitor may not be …

> There's a reason "don't use local storage for security sensitive stuff" is part of the OWASP cheatsheet Local storage was released more than 16 years ago, and back then PHP was w…

> XSS which local storage does not [mitigate] True. However it's not impossible to mitigate that: https://news.ycombinator.com/item?id=48563286 But arguably it's harder to do so. >…

> You have to mitigate CSRF server-side (with a CSRF token > when you're using tokens in JavaScript then you don't have to worry because you already have your CSRF token No reason …

That's why I wouldn't say the below. > A lot of times local storage is much less secure Without XSS, local storage is actually more secure. You don't have worry 'did I set up this …

> they tend to require disabling HttpOnly for not very good reasons First time I'm hearing that frameworks require disabling HttpOnly. > Disabling iframes doesn't fix CSRF. You can…

> I've always wondered how they do it as well. See https://news.ycombinator.com/item?id=48574402 > So are they moved to a simple variable then? Yup, it has to exist somewhere .

Except you do. https://developer.mozilla.org/en-US/docs/Web/API/Window/unlo... What happens if you lose power? You're logged out because it didn't save the token back. Verified thi…