pandalicious

>The presence of EMTE leaves Spectre V1 as one of the last avenues available to attackers to help guide their attacks, so we designed a completely novel mitigation that limits the effective reach of Spectre V1 leaks — at virtually zero CPU cost — and forces attackers to contend with type segregation. This mitigation makes it impractical for attackers to use Spectre V1, as they would typically need 25 or more V1 sequences to reach more than 95 percent exploitability rate — unless one of these sequences is related to the bug being exploited, following similar reasoning as our kalloc_type analysis.

Did they ever explain what that mitigation does?

Am I misreading this or is that "How close is Spanish from Different Countries" graphic kind of jank? There's intersecting lines that are missing, like Puerto Rico and Dominican Republic.

that's amazing, do you know why it works?

For anyone else that’s confused, TLS = thread local storage

"apps my mom could build" kind of describes Excel workbooks. People effectively use excel to build (highly constrained) GUIs for processing data using custom logic that they specify themselves. And excel's popularity speaks for itself, it's completely pervasive. So that's the answer; the audience isn't programmers, it's the officeworkers all over the world currently using Excel to automate office tasks and want a better delivery mechanism than a shared Excel file on the office LAN. That's such a big pie that even capturing a small slice of it might be a reasonably profitable endeavor.

The .NET standard library docs are a thing of beauty because they intermingle autogenerated javadoc-style documentation with generally well-written freeform "remarks" sections that include more general explanations, context, and code samples.

>Don't all great projects start young and gain interested folks to make it widely used?

The counterpoint to this is that making a robust cross-platform GUI library is a massive endeavor and there is a veritable mountain of cross-platform gui projects out there and overwhelmingly they end up as never-finished abandoned projects. The exceptions like Qt and electron that actually succeeded tend to have large organizations behind them.

sort/index the db table by string length, start your search with the closest length strings (bigger and smaller) and then stop if you find a levenshtein distance that's smaller than that the length difference between the key and the next closest length string? In many(most?) cases you'd still end up searching the whole table but at least in some cases you could end the search early.

Spotify vs Google Play Music is the perfect showcase for this. They both get the job done but Spotify is better in so many small ways. Meanwhile, instead of being improved, GPM is in the process of being abandoned for the new shiny thing, Youtube Music.

what about local filesystem access, os integration, and all the other things that you expect a desktop app to be able to do (like in this case executing a separate binary) which violate the security models of browsers?

I think you're overestimating how much development at tech companies is done using newer languages. Java is the dominant language at both Amazon and Google.

I always wonder why Google didn't just keep improving/extending Hangouts. Was the codebase just unsalvageable? Was it something to do with Google's internal politics?