Readit News logoReadit News

Deleted Comment

Deleted Comment

cookiengineer commented on XSLT removal will break multiple government and regulatory sites   github.com/whatwg/html/is... · Posted by u/colejohnson66
troupo · a day ago
> Simple: xslt is a giant attack surface entirely in C, and no browser maintainer cares to expend resources on maintaining that

And yet they have no qualms shoving huge attack surfaces in the form of WebUSB, WebSerial, WebMIDI, WebTransport, WebBluetooth, WebKitchenSink, most of which have as much usage as XSLT: https://chromestatus.com/metrics/feature/timeline/popularity... or https://chromestatus.com/metrics/feature/timeline/popularity...

cookiengineer · a day ago
This is actually a great point.

I was checking for XSLTProcessor out of curiosity, and most of the top sites seem to be all using Flarum as a software?

Found it a nice fun fact: https://chromestatus.com/metrics/feature/timeline/popularity...

If you check it though what they're using XSLTProcessor for, it seems to be a fallback for an MSXML polyfill, e.g. when you search for "XSLTProcessor" here you can see it: view-source:http://discuz.turzx.com/assets/forum.js?v=3c534b8a

So in the case of Flarum their DOMParser using alternative would chime in, as that's an additional fallback to the MSXML / ActiveX using polyfill.

cookiengineer commented on XSLT removal will break multiple government and regulatory sites   github.com/whatwg/html/is... · Posted by u/colejohnson66
cookiengineer · a day ago
I don't understand how WHATWG decides to remove XSLT, contradicting the 30+ years of never break the web doctrine... And simultaneously doesn't want to fix the typeof null specification bug because of, wait for it, Microsoft Exchange 2003 relying on that.

This makes absolutely no sense.

We could've had such a nice language. The efforts for a cleaner language and web platform API were there, but doctrine always said no because of legacy and people have moved on to alternatives now.

cookiengineer commented on Copilot broke audit logs, but Microsoft won't tell customers   pistachioapp.com/blog/cop... · Posted by u/Sayrus
Gud · 4 days ago
On the other hand, some of the most capable meat bags said fuck you to your record keeping system and dropped out.
cookiengineer · a day ago
Those meatbags usually have a different form of ledger. Be it open source contributions, built prototypes, apps or games, or other things they've shared before to create a track record of their skillset.

I never claimed that there is one type of ultrageneric ledger that works for all areas of research. But somehow, the LLM world still thinks that is the case for whatever reason.

cookiengineer commented on 9 Years of "Learning to Code" and I Still Couldn't Build a To-Do App   offpeaklog.bearblog.dev/l... · Posted by u/speckx
cookiengineer · 4 days ago
> You learn by breaking, not by watching.

I can't stress enough how important that statement is. I learned to code by refactoring and revising my old ideas. When I learned a new tech stack, a new library, a new pattern or a new methodology, I ended up refactoring old projects with the new mindset.

I always jokingly say that every codebase looks like crap after 2 months, because it is true. You see your own mistakes after what you've learned _through implementing it_.

Good engineers and architects know how to break down a large problem into small enough portions to be able to guesstimate whether it's possible. Then they build little prototypes for those unknown unknowns to come back with a better estimation. And those small prototypes / portions are something like a knowledge library, where you gain confidence over time when you solved and successfully implemented those already.

Bad engineers on the other hand always chase the new hype, instead of learning from their own mistakes they just rebuild the same crap all over again, assuming it will be better by using fancy new libraries. Unsuccessfully.

cookiengineer commented on Copilot broke audit logs, but Microsoft won't tell customers   pistachioapp.com/blog/cop... · Posted by u/Sayrus
mlyle · 4 days ago
Nearly as bad: trying to use systems made out of meat, evolved from a unrelated background and trained on an undocumented and chaotic corpus of data, to try and produce content satisfying a strict mathematical model.
cookiengineer · 4 days ago
The difference: Meatbags created something like an education system, where the track record in it functions as a ledger for hiring companies.

There is no such thing for AI. No ledger, no track record, no reproducibility.

cookiengineer commented on Website is served from nine Neovim buffers on my old ThinkPad   vim.gabornyeki.com/... · Posted by u/todsacerdoti
barbazoo · 5 days ago
I don’t get the joke here
cookiengineer · 5 days ago
^ probably an emacs user
cookiengineer commented on Hyundai wants loniq 5 customers to pay for cybersecurity patch in baffling move   neowin.net/news/hyundai-w... · Posted by u/duxup
cookiengineer · 6 days ago
This is a violation of UN regulation 155/156 where the vendor must provide free fixes and updates in case of safety or cybersecurity violations.

I'm mentioning this specifically because the CAN bus is involved, which is mandatory to be safety conform and has to be ASIL-C/D conform. If you cannot guarantee that, you will lose the license.

Without conformance to UN Regulation 155/156, the car manufacturer might lose its license for the underlying car platform (not only the downstreamed models), meaning refunding/damages need to be paid for all buyers of cars of that platform.

So chances are this can be fought in court, and Hyundai probably has to offer free replacement of that defective part.

cookiengineer commented on GDPR meant nothing: chat control ends privacy for the EU [video]   youtube.com/watch?v=3NyUg... · Posted by u/givemeethekeys
SilverElfin · 7 days ago
Start with protecting children. Then something about misinformation. Then about defending democracy. Then about stopping terrorism. And soon you can escalate your authoritarian policy to just about anything.

This is why having the structure of fundamental civil rights, like in the US constitution, is important. I’m surprised the EU doesn’t seem to have such protections for free speech and privacy and against warrantless surveillance.

cookiengineer · 7 days ago
I want to be not snarky but I can't:

Which constitution are you talking about? The one that includes the House of Congress' right to militia to defend the constitution...or the one without that article?

Lately, the constitution of the US is as much worth as toilet paper, because the Trump administration does everything to exploit it using the "invasion excuse".

In Europe, there is the EU charta of fundamental human rights. If they are violated, laws can be fought above country level.

[1] https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex:12...

u/cookiengineer

KarmaCake day6980August 15, 2016
About
8 letters, Harold.

I'm a Cyber Security Engineer with a mixed Blueteam and Redteam background. My projects have involved co-evolutionary AI concepts to automate the generation and adaption of code and network protocols, as well as fuzzing and exploiting binaries.

Currently I'm trying to automate Cyber Defense in the form of the https://tholian.network

The projects I've built in the past can be found on either GitHub, GitLab, or my personal Website: https://cookie.engineer

Fun fact: All my comments have been written on the toilet. Shit has to be produced where shit belongs, after all. I don't use social media anywhere else.

Have a great day!

If you want to contact me, use my nickname at my project's domain.

View Original