jmitcheson
Joined 15 years ago
Karma
589
Submissions
178
Member since
Jan 31
Recent submissions
Comment · 1 year ago
Comment · 3 years ago
tl;dr "inadvertent exposure to endocrine disruptors in utero"
Comment · 3 years ago
There is a newsletter called 'The Rundown' but it's more on the consumer side of gen AI; rather than hard academic research
Comment · 9 years ago
It could still be quite buggy with Oculus and Vive hardware. They have only enabled WebVR in "Cardboard" mode on mobile which has a much smaller surface area.
Comment · 14 years ago
TL;DR is for people who forget "statement, explanation, example". Usually, they write some poorly formed paragraph and put a "TL;DR" at the end. Often, that TL;DR is simply the "statement" part of the paragraph that should have been at the very beginning anyway.
TL;DR: most people can't English anymore.
Comment · 14 years ago
If anyone's interested in how the exploit works, here is my humble interpretation of the pastebin link:
jsaxton86's comment sets the scene nicely so I'll just copy it here:
"This family of JRE attacks is far too common. Basically, when an unsigned applet runs, the JRE tries really hard to prevent it from creating a ClassLoader object. However, if you manage to create a ClassLoader object, it's game over -- you can break out of the sandbox and do whatever you please."
The exploit is very clever, it never actually creates an instance of the ClassLoader object, but rather it uses Java reflection to call a particular method on a ClassLoader object, which was tricked into creation inside a separate exploit involving the JMX (Java Management Extensions) framework.
JMX has its own methods to instantiate classes, and a subclass of ClassLoader ("sun.org.mozilla.javascript.internal.GeneratedClassLoader") is passed in as a String; then the method defineClass is called via reflection in a way that deceives all the ClassLoader protection. Once this method is allowed to be invoked via reflection, it's "game over" as explained at the start.
http://pastebin.com/raw.php?i=cUG2ayjh http://www.oracle.com/technetwork/java/javase/tech/javamanag... http://www.cs.rit.edu/usr/local/pub/swm/jdoc6/com/sun/jmx/mb...
Comment · 14 years ago
When I first saw this post, it was greyed-out from down voting. Now, it's at the top of the thread. This place is strange.
Comment · 14 years ago
"Dr." is a title; "doctor" is noun which only ever refers to an MD.
Comment · 14 years ago
When I'm doing front-end development, I love having a back-end guy who can flip the switch and turn it on.
Comment · 14 years ago
It's probably related to a recent change in policy - http://www.kickstarter.com/blog/kickstarter-is-not-a-store
"-Product simulations are prohibited. Projects cannot simulate events to demonstrate what a product might do in the future. Products can only be shown performing actions that they’re able to perform in their current state of development.
-Product renderings are prohibited. Product images must be photos of the prototype as it currently exists."
Comment · 14 years ago
At that point, you were way past the idea stage.
Comment · 14 years ago
Just drag the tab out to its own window. Then you can minimize it and Chrome doesn't consider it to be in the background.
Random aside: I just noticed that after you drag the Gangnam tab out to its own window, then you can open other tabs in that same window, and it doesn't put the Gangnam tab in the background anymore. But if you put the tab/window back in the original set of Chrome tabs, then it will.
Comment · 14 years ago
Hey there, I'm the developer of a browser based IDE called pixelJET. I was researching visual JavaScript debugging concepts to integrate into pixelJET when your post came up on HN.
It's not really a real world applicatoin yet, but if it helps, your post inspired me gave me some ideas for integration into the product. If I publish anything I'll be sure to give you a shout out :)
A couple of thoughts for the demo, it would be cool to see the actual JavaScript source code too, so you could get a feel for what the visualisation is showing you. Also, noting which functions were event handlers would be useful, although a bit tricky.
Comment · 14 years ago
I know there are a million and one people offering arm chair suggestions, but IMO it's about time that HN got sub-forums and moderators.
I'd like to see a /startup or similar, moderated by entrepreneurs to set the tone of what posts or comments aren't welcome.
For that matter, a /front-end would be cool too. HTML/CSS/JavaScript demos posted here grind my gears so much; the comments are all negative and totally not constructive.
The company I work for displays large engineering drawings in the browser; right now we have to choose between manual png conversion and loading the vectors directly (each one has its own problems). I tried the snippet application with one drawing and it renders perfectly.
For our application we have a 'Google Maps' style viewport where you pan and zoom with the mouse, though. Right now I'm seeing if Gemini 2.5 Pro can refactor the snippet application to work this way. Did you have any plans for building another type of snippet application which works in the fashion?