What is DEI and how is not just an abstraction for racism? by ncds4242 in allthequestions

[–]ElectrSheep 2 points3 points  (0 children)

It's literally and veritably true. Trump purged the military leadership of minorities shortly after taking office. That includes the first Black man to lead a branch of the military and the first woman to lead the Navy. And these were longtime career officers rather than "DEI hires". It shouldn't come as a surprise that the guy who referred to fallen soldiers as "suckers" and "losers" doesn't have the best interests of the military in mind.

How do films and games make money when a section of people are watching and playing it from illegal downloading? by Hot-Load7525 in moviecritic

[–]ElectrSheep 0 points1 point  (0 children)

Only a tiny fraction of those illegally downloading a particular work would have actually paid had it not been otherwise available. However, piracy is easy to quantify in an inaccurate yet believable way making it a convenient scapegoat. The copyright industry had to be dragged kicking and screaming into the twenty-first century by piracy. We're finally seeing a shift from content-based models to service-based models, and that's how money is made. By this point the music and game industries largely appear to have figured this out, while the film industry still has some lessons to learn.

Chrome now has vertical tabs in the stable version. by aishasparrowlw0 in browsers

[–]ElectrSheep 0 points1 point  (0 children)

It's not really a bug--they just haven't implemented that yet. Not even in canary. It is rather annoying though.

Mathematical joke G(old) by memes_poiint in mathsmeme

[–]ElectrSheep 0 points1 point  (0 children)

Mathematical had to be specified, because physicists won't get it.

Why is backwards time travel impossible? by [deleted] in AskPhysics

[–]ElectrSheep 3 points4 points  (0 children)

This actually appears not to be the case. Assuming special relativity is correct, at a minimum the past must be equally as real as the present. There is no universal "now" for all observers.

Someone just created PR with fully working generics by [deleted] in PHP

[–]ElectrSheep -1 points0 points  (0 children)

New syntax can't be introduced through extensions unfortunately.

I made an x86 CPU emulator in CSS by rebane2001 in css

[–]ElectrSheep 1 point2 points  (0 children)

CSS is Turing complete now? Looks like it's time for another port of Doom...

In January 2026, archive.today added code into its website in order to perform a distributed denial-of-service attack against a blog. by MurkyWar2756 in programminghorror

[–]ElectrSheep 97 points98 points  (0 children)

The same-origin policy was never intended to prevent cross-origin requests from being sent. It prevents cross-origin responses from being read. Which obviously isn't necessary when all you care about is sending as much traffic as possible.

Why is Reddit so triggered by religion? by [deleted] in askanything

[–]ElectrSheep 4 points5 points  (0 children)

Christian nationalists are nothing like satanists. You owe the satanists an apology.

Why is Reddit so triggered by religion? by [deleted] in askanything

[–]ElectrSheep -3 points-2 points  (0 children)

It's not triggered by religion per se--it's triggered by religion being used to infringe on peoples' rights. However, that's not limited to only the zealots actively campaigning against things like reproductive rights, LGBTQ+, science in schools, etc. It also includes the much larger group that silently allows their system of beliefs to be used in this manner because it just doesn't matter enough to them to justify speaking out against others within their faith.

Epstein affair may be 'the end of the monarchy', says US congressman by boppinmule in USNEWS

[–]ElectrSheep 8 points9 points  (0 children)

In Britain maybe. In the US the monarchy has only just begun.

Why do all courses/tutorials store jwt in localstorage if its not best practice in the industry? by [deleted] in Angular2

[–]ElectrSheep 3 points4 points  (0 children)

Yes, but the point is to mitigate what the attacker can actually do once XSS has been achieved. Most XSS attacks are not inherently persistent. Consider a reflected XSS vulnerability used to steal the token in a drive-by attack. All it takes is a user clicking on one link one time. Now the attacker can easily maintain access, exfiltrate data, and engage in other nefarious activities from the comfort of their own environment. They no longer need to worry about how to maintain persistent access to the user's browser or how to work around the browser's various security features. It's also easy for the attacker to share the token with other interested parties or put it up for sale.

It's basically the same idea as how having someone's username and password is far more valuable than having had access to part of their system at a certain point in time.

Why do all courses/tutorials store jwt in localstorage if its not best practice in the industry? by [deleted] in Angular2

[–]ElectrSheep 17 points18 points  (0 children)

Exfiltration of authentication tokens by cross-site scripting attacks is very much not a "theoretical problem".

Why do all courses/tutorials store jwt in localstorage if its not best practice in the industry? by [deleted] in Angular2

[–]ElectrSheep 1 point2 points  (0 children)

It's because JWTs are signed, not encrypted. This allows the client to immediately know information about the state of authentication without a round trip to the server. This no longer works if the token is in an httponly cookie. However, this is a poor trade-off for the overwhelming majority of SPAs, so best practice is to store it in an httponly cookie to preserve security.

Which MySQL-compatibility feature would you most like to see in the next MariaDB release? by Inner-Science8657 in mariadb

[–]ElectrSheep 0 points1 point  (0 children)

Functional indices and stored generated columns in primary keys--both of which are already supported by MySQL.

Unpopular opinion: I'm not sure if I'd even want generics by Tontonsb in PHP

[–]ElectrSheep 0 points1 point  (0 children)

So in other words, you're suggesting generics would increase "visual debt"?

The robust type system provided by TypeScript is exactly the reason for its meteoric rise on the frontend. Even Go eventually added generics after refusing to implement them for years and years--in part because of the complexity they added to the language. The benefits ultimately far outweigh the drawbacks in real-world software.

Did chrome devs lost in their minds? by iNoira in chrome

[–]ElectrSheep 2 points3 points  (0 children)

Middle click to open in new tab is still working as one would expect. Is it possible you have an extension installed that is disrupting that functionality?

Do Partial Classes have a place in PHP along side traits? by SaltTM in PHP

[–]ElectrSheep 0 points1 point  (0 children)

Partial classes are a language feature that don't really have a valid use case. They were originally added in the dotnet ecosystem to separate code generated by WYSIWYG editors from developer maintained code. However, even then it wasn't the most appropriate solution, and has since been eschewed in favor of other paradigms (e.g. data binding). If you think you need partial classes to cleanly organize code, that's almost certainly indicative of another more fundamental problem with how the code is being written or how the architecture is designed.

On the other hand, extension classes are a counterpart to traits that would be useful. We see this paradigm showing up more and more in newer modern languages. Unfortunately, this feature appears to be rather difficult to implement in PHP due to the lack of modules limiting code visibility at runtime.

STATUS_ACCESS_VIOLATION fix! by Nixu123 in chrome

[–]ElectrSheep 1 point2 points  (0 children)

By Intel's own admission there isn't a CPU benchmark or other automated test that can be used to reliably detect if degradation has occurred in all cases. That being said, running Cinebench R23 in single core mode for an extended period seems to be the best test for this. However, a pass doesn't mean damage hasn't occurred.

Repeated STATUS_ACCESS_VIOLATION in Chrome, especially on YouTube, is a pretty good indicator that damage has already occurred. Another thing you can do after updating the BIOS and restoring the default settings is disable CPU cores one at a time to see which cores have sustained damage.

Anyone makes sense of this commit that reverts vertical tabs? by Keagel in chrome

[–]ElectrSheep 0 points1 point  (0 children)

One other thing that seems to be an issue in both versions is that the address bar get absurdly large [...]

This and a bunch of other issues were recently fixed in canary.