amadvance

no profile record

comments

ano passadodiscuss

Still, it's strange to me that the GPL is considered OpenSource while the SSPL is not. When the GPL was first released, its requirement that all linked modules be GPL-licensed wasn't so different from what the SSPL enforces today at the network level. I see the SSPL as analogous to the GPL, and the AGPL as analogous to the LGPL, essentially relaxing the requirements either on linking (in the case of the LGPL versus GPL) or on network interactions (in the case of the AGPL versus SSPL)

há 2 anosdiscuss

The linked article says something different:

'We first estimate the supply-side value by calculating the cost to recreate the most widely used OSS once. We then calculate the demand-side value based on a replacement value for each firm that uses the software and would need to build it internally if OSS did not exist. We estimate the supply-side value of widely-used OSS is $4.15 billion, but that the demand-side value is much larger at $8.8 trillion.'

há 2 anosdiscuss

True, but I suppose this is at least partially compensated by the cost of such a 0-day. For sure, a 0-day on Chrome is a lot more expensive than one on Firefox

há 3 anosdiscuss

Well, unions tend to average the outcome. But IT positions, being on the top side of the employee distribution, can typically obtain more.

I can give you a real-world example. Our company (Italy) office was relocated, and unions entered negotiations to obtain three days of remote work for the entire personnel. However, I and others refused to sign the agreement because, with more negotiation power, our target was full remote work. However, in doing so, we were undermining the union positions, which made them unhappy. Fortunately, things ended well; all personnel got the three days, and a few other people were granted full remote work.

há 3 anosdiscuss

> Why someone work with full time writing articles should give the work for free

OpenSource developers did that ;)

há 3 anosdiscuss

If you need something text based, cgdb is nice: http://cgdb.github.io/

há 3 anosdiscuss

You're mixing up two different things. It's true that YouTube now places ads to small channels that have not reached the monetization requirements.

But after the channel satisfy such requirements, like 1000 subscribers, the creator gets control of the monetization and they can choose.

For any major channel you watch, it's the creator decision that you see ads or not.

há 3 anosdiscuss

From what is written, they plan to reduce the control of where ads are placed, but still allow enabling or disabling them.

Anyway, at present it's possible to disable them if you have reached the monetization requirements on the channel, like 1000 subscribers and some amount of hours viewed.

há 3 anosdiscuss

I'm also a heavy user of ad blockers, but there is something to be said in defense of YouTube.

Creators have the final decision on the ads shown. I have a YouTube channel, and I always disable monetization on all my videos, so no ads are ever shown on my channel.

If you see an ad, it's because the creator decided to include one. YouTube is simply the platform that enables this choice.

há 3 anosdiscuss

> I will tell my computer to blank the screen and mute the audio when an ad is playing.

Indeed, but you'll still have to wait for the ad to play. YouTube can definitively win this race if they decide so.

há 3 anosdiscuss

The Clang static analyzer is integrated into the build pipeline. Any warnings will cause the build to fail. Additionally, build with the flags -Wall and -Werror. When testing, run with runtime checkers such as Valgrind and sanitizers.

Periodically, run other static analyzers like Klocwork and Coverity. They can catch many more issues than Clang. It's not that Clang is bad, but it has inherent limitations because it only analyzes a single source file and stops analysis when you call a function from another module

há 3 anosdiscuss

You made me remember the scene from A Clockwork Orange where the main character is forced to watch television screens.

há 3 anosdiscuss

Is fixed-point the right term ?

As far as I know fixed point numbers have a fixed fractional part in bits, but this is different from using integers with a multiplicative factor, like 100, to represent correctly a fractional part as 1/100.

há 3 anosdiscuss

Even lookup is not easy to be done securely. You don't want that a malicious server/database knows that you are accessing always that record.

See this discussion about how to achieve that: https://news.ycombinator.com/item?id=31668814

há 4 anosdiscuss

> browser plug-in that removes clothing from every image loaded

Yep! Remove clothing and make-up to show everyone as they really are!

You can call it the "ugly truth" plugin.

há 4 anosdiscuss

> > Can they selectively drop packets > Absolutely not. That practice should literally be illegal.

Why not ? From an engineering point of view, with a scarce resource, dropping only the biggest user (Netflix) looks reasonable.

Obviously, it should be illegal to ask money to do not have them dropped.