Kissaki

joined 1 year ago
[โ€“] Kissaki@programming.dev 4 points 1 month ago (1 children)

But did it reach test or production environment yet? Or will it die in development environment.

[โ€“] Kissaki@programming.dev 4 points 1 month ago

Because I stumbled over this paragraph (the page is linked to from Googles announcement) and was reminded of this comment, I'll quote it here:

First, developer education is insufficient to reduce defect rates in this context. Intuition tells us that to avoid introducing a defect, developers need to practice constant vigilance and awareness of subtle secure-coding guidelines. In many cases, this requires reasoning about complex assumptions and preconditions, often in relation to other, conceptually faraway code in a large, complex codebase. When a program contains hundreds or thousands of coding patterns that could harbor a potential defect, it is difficult to get this right every single time. Even experienced developers who thoroughly understand these classes of defects and their technical underpinnings sometimes make a mistake and accidentally introduce a vulnerability.

I think it's a fair and correct assessment.

[โ€“] Kissaki@programming.dev 6 points 1 month ago

The EU passed laws that require companies (under conditions) to ensure base requirements in their supply chain.

I think a digital equivalent could be possible and similar. Requiring reasonable security and sustainability assessment.

It's not very obvious or simple to enforce, but would set requirements, and open up opportunities for fines and prosecution.

[โ€“] Kissaki@programming.dev 5 points 1 month ago (1 children)

Even C# has something that few people use, but it has something.

Huh? Are you claiming few people use NuGet?

[โ€“] Kissaki@programming.dev 4 points 1 month ago (1 children)

Read/Inspect and contribute to FOSS. They'll be bigger and longer lived than small, personal, and experimental projects.

Study computer science.

Work, preferably in an environment with mentors, and long-/continuously-maintained projects.

Look at alternative approaches and ecosystems. Like .NET (very good docs and guidance), a functional programming language, Rust, or Web.

That being said, you ask about "should", but I think if it's useful for personal utilities that's good enough as well. Depends on your interest, goals, wants, and where you want to go in the future.


For me, managing my clan servers and website, reading online, and contributing to FOSS were my biggest contributors to learning and expertise.

[โ€“] Kissaki@programming.dev 4 points 1 month ago* (last edited 1 month ago) (10 children)

When you draw a parallel to social charity both are largely volunteer based and underfunded. And both have direct and indirect gains for society.

Physical charity often serves basic needs. I'm not sure selecting qualifying quality open source projects is as easy. Need and gain assessments are a lot less clear.

If it's about public funding distribution, I would like to see some FOSS funding too, but not at the cost of or equal or more than social projects.

How many FOSS projects actually benefit "millions and billions of people"? That kind of impact feels like it's few and far between.

[โ€“] Kissaki@programming.dev 12 points 1 month ago (1 children)

Is your suggestion that people should? Isn't Rust the more realistic, effective solution because it forces people to do better? Evidently, "correct memory safety in C/C++" didn't work out.

[โ€“] Kissaki@programming.dev 4 points 1 month ago

Valve is generously providing backing for two critical projects that will have a huge impact on our distribution: a build service infrastructure and a secure signing enclave.

[โ€“] Kissaki@programming.dev 16 points 1 month ago (1 children)

What is Tails?

and Tails, a portable operating system that uses Tor

[โ€“] Kissaki@programming.dev 12 points 1 month ago

Formatted, so I can read it

Exception in thread "main" java.lang.NullPointerException: 
 Cannot invoke "String.toLowerCase()" because the return value of 
"com.baeldung.java14.npe.HelpfulNullPointerException$PersonalDetails.getEmailAddress()" is null
 at com.baeldung.java14.npe.HelpfulNullPointerException.main(HelpfulNullPointerException.java:10)
[โ€“] Kissaki@programming.dev 4 points 1 month ago

Damn, that's a long list. Looks like a lot of work to collect and prepare.

I was looking for more of an overview of it and selected them from the headlines:

  1. 2014: Completely broken IndexedDB implementation
  2. 2015: 100vh (100% viewport height) means a different thing in mobile Safari to everywhere else
  3. 2016: with overflow:hidden CSS is scrollable on iOS
  4. 2017: Safari incorrectly blocks localhost as mixed content when accessed from an HTTPS page
  5. 2018: OS 11.2.2 broke WebAssembly
  6. 2018: Safari 11.1 broke MessageChannels
  7. 2019: Audio stops playing when standalone web app is no longer in foreground
  8. 2019: PWA in iOS uses old assets after publishing new servicerWorker/assets
  9. 2020: Add Fullscreen API to iOS (& display fullscreen)
  10. 2021: Safari shipped blob.stream(), crashes with a NULL pointer exception
  11. 2021: Appending an element to the shadow DOM in many cases hard crashes the browser process
  12. 2021: LocalStorage is broken when a page is open in more than one tab
  13. 2021: IndexedDB APIs hangs indefinitely on initial page load
  14. 2021: Fetch request streaming is implemented just enough to pass feature detection, but it doesn't actually work
  15. 2021: IndexedDB API information leaks
  16. 2023: Notifications API: support for the badge, icon, image and tag options
  17. 2024: On-screen keyboard does not show up for installed web apps (PWAs) when focusing a text input of any kind
  18. 2008: Focus events for non-input elements behave differently in Safari to every other browser
  19. 2012: Using border-image with border-style: none is rendered completely wrong
  20. 2014: WebKit doesn't calculate padding-top/-bottom: n% correctly
  21. 2014: Pointer events should allow for device-pixel accuracy
  22. 2017: Support for 120Hz requestAnimationFrame
  23. 2018: Some Fetch requests incorrectly completely skip the service worker
  24. 2020: Safari 14 shipped a broken replaceChildren() method, which caused glitches in Construct.
  25. 2020: When leaving current scope of PWA, back button incorrectly reads "Untitled"
  26. 2020: Safe-area-inset-bottom still set when keyboard appears
  27. 2020: Support for background-attachment: local has suddenly completely disappeared
  28. 2021: IntersectionObserver and ResizeObserver fire in incorrect order
  29. 2021: Mousemove events fire when modifier keys are pressed, even if the mouse isn't moved
  30. 2021: Scrolling in home screen apps incorrectly latches to document
  31. 2022: WebM Opus support is inconsistent in Safari
  32. 2022: Installed web app with viewport-fit cover causes overscroll issues, breaks position fixed and -webkit-fill-available
  33. 2023: iPadOS: Viewport doesn't correctly restore after dismissing software keyboard for installed web apps
  34. 2023: iPadOS: window loses focus when dismissing the keyboard, breaks Page Lifecycle API
  35. 2024: Svh and lvh are incorrect on iOS in third party browsers

DOM query

let a = ''
for (let x of document.querySelectorAll('h3 a[title]')) a += x.title + "\n"
a

[โ€“] Kissaki@programming.dev 1 points 1 month ago

Now that you say so, I feel like I've read about this before. In comments about Diatraxis/one of them years ago. :)

view more: โ€น prev next โ€บ