euid
Joined 12 years ago
Karma
87
Submissions
29
Member since
Jun 18
Recent submissions
Comment · 6 years ago
Comment · 6 years ago
You can audit the code of a Firefox extension by unzipping the .xpi file in the extensions directory within your browser profile directory.
Not ideal, but it's better than nothing.
Comment · 6 years ago
Alternatively: I was thrown off by the new tab behavior in Tree-Style Tabs and didn't want the complexity of a tree of tabs. Vertical Tabs Reloaded[0] gives me the "tabs in a sidebar to the left" without the complexity.
[0]: https://addons.mozilla.org/en-US/firefox/addon/vertical-tabs...
Comment · 6 years ago
Yeah, when I worked at thousand-person companies it was like this:
CEO -> SVP -> VP -> Eng manager -> IC
Or, alternatively,
CEO -> Director -> Manager of managers -> Manager -> IC
I didn't feel like either needed more middle management (each had about ~2k employees), but in the case of the latter some reorganization would have helped (some managers had 50+ reports).
Comment · 6 years ago
Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0 - https://people.eecs.berkeley.edu/~tygar/papers/Why_Johnny_Ca...
Comment · 8 years ago
Compact mode, which Reddit also offers, is an easy way to satisfy both camps. Set the default to whatever your users prefer (determine this with A/B testing) and allow the other choice in Settings.
Comment · 8 years ago
Totally agree. I did government research for a while and published papers. Don't exclude them - anyone at the intersection of government work and research is likely to have meaningful contributions to this website.
Comment · 11 years ago
In this contest, you are to intentionally insert a difficult-to-detect bug into otherwise legible code. In the obfuscated C contest, you are writing obfuscated code.
Comment · 11 years ago
Emulates Vim quite nicely, too.
Comment · 11 years ago
Since that page links to
[1]: http://git.suckless.org/sbase/
instead of
[2]: http://git.2f30.org/sbase/
I'm guessing [2] is a mirror, and [1] is the original Git repository. They appear to have the same content.
Comment · 11 years ago
Then you add an optional CLI argument that makes it skip the prompt, and use that version in scripts.
Comment · 11 years ago
There is no reason in principle, and you can even do it for kicks.[1] The only issue here is a practical one, as the parent poster described: from an end-user perspective, browsers do SSL/TLS better than ad-blocking proxies.
[1]: An example from the other side of the coin: http://www.wired.com/2010/03/packet-forensics/
Comment · 11 years ago
It's a poor choice on the author's part
http://doc.rust-lang.org/std/collections/
Use a HashMap when:
- You want to associate arbitrary keys with an arbitrary value.
- You want a cache.
- You want a map, with no extra functionality.
Use a BTreeMap when:
- You're interested in what the smallest or largest key-value pair is.
- You want to find the largest or smallest key that is smaller or larger
than something
- You want to be able to get all of the entries in order on-demand.
- You want a sorted map.Comment · 12 years ago
You probably want something like pyfakefs[1], a reimplementation of Python's (old) filesystem modules for the purpose of testing.
My guess is that either you will have to write it, or you will have to convince a C++ developer that it is worth writing cppfakefs.
Otherwise, you can build a test_root_dir RAII object that creates a directory in /tmp and does the cleanup automatically in its destructor.
I'm reminded of the ArchLinux AUR, which deals with a problem kind of like this. AUR managers show a diff of what changed in a package on each update.
Perhaps one could make extension auditing easier by scripting together a Git repository from extracted xpis, and presenting updates as patches to that repository. This is probably only viable for high-security environments - it's not with it in the common case.
Of course, the real fix would come from Firefox itself: it should provide signed extensions and a way to tie them back to Git repositories with source code, which would eliminate the need for the above automation, and allow people to crowdsource extension auditing.