Thorrez's comments

On: A shirt whose price increases by 1 euro with every purchase

[Thorrez]

Usually there are ways to tell counterfeit from a real item.

[Cpoll → Thorrez]

Only if the cost of making a better counterfeit exceeds the cost of the legitimate item. It's a t-shirt, it doesn't have a chain of attestation.

On: Finland applies the “Housing First” concept (2020)

[Thorrez]

>Those affected by homelessness receive a small apartment and counselling – without any preconditions.

That photo doesn't look like it would beat a small apartment to me.

>The policy applied in Finland is called “HousingFirst”. It reverses conventional homeless aid. More commonly, those affected are expected to look for a job and free themselves from their psychological problems or addictions.

That quote seems to me to say that people are given housing without a sobriety requirement.

On: Global sales of combustion engine cars have peaked

[Thorrez]

Your argument seems to be that cities shouldn't mandate carparks.

Nothing in your argument goes against what I think edwcross's proposal was: "IF an apartment has parking, that parking must have charging."

On: Zelensky leaves White House after angry meeting

[Thorrez]

>Now there's country that traded nuclear weapons for protection by the US that is being invaded by a fascist dictator.

Are you talking about the Budapest Memorandum? According to Wikipedia, it says

>Seek immediate Security Council action to provide assistance to the signatory if they "should become a victim of an act of aggression or an object of a threat of aggression in which nuclear weapons are used".

So AIUI, that's a guarantee that the US will defend Ukraine if Ukraine gets attacked by Russia with nukes. It's not a guarantee that the US will defend Ukraine if Ukraine gets attacked by Russia with non-nukes. So I don't think the US has violated the agreement. Russia violated the agreement by attacking Ukraine (Russia was a signatory, and the treaty also says the parties won't attack each other with any type of weapon).

https://en.wikipedia.org/wiki/Budapest_Memorandum

[dgb23 → Thorrez]

That's fair and technically correct.

But had Ukraine not agreed, they very likely wouldn't have been invaded. Meanwhile Putin was threatening to use nuclear weapons if western countries would have directly intervened. This threat is looming over _all_ negotiations and actions.

So really Russia is getting away with invading Ukraine and expanding their territory and use their nuclear arsenal indirectly to achieve that.

On: Zelensky leaves White House after angry meeting

[Thorrez]

>In a zero-sum game world USA does not join WW1 nor WW2

WW2 is not the best example. The USA got attacked (Pearl Harbor). The USA didn't enter WW2 until the USA got attacked.

On: How to gain code execution on hundreds of millions of people and popular apps

[Thorrez]

Are you saying Chrome should block all script includes that don't have hashes? That'll break tons of sites. See "Don't break the web"[1].

Disclosure: I work at Google, but not on Chrome.

[1] https://flbrack.com/posts/2023-02-15-dont-break-the-web/

[LtWorf → Thorrez]

Also expired certificates break a lot of websites… should we disable checking?

[ameliaquining → LtWorf]

Certificate expiration isn't an unanticipated regression. You know when you get a certificate when it will expire.

[hyperdimension → ameliaquining]

I don't mean to be pedantic, but not always--see the recent DigiCert delayed revocation issues. I will admit it is rare though and more often than not, you (should) know when your certs are going to expire.

[Thorrez → LtWorf]

Those websites set up the expiring certificate themselves.

On: GPT-4.5

[Thorrez]

I think Warren Buffet doesn't just buy stocks. He also influences the direction of the companies he buys.

On: WASM Wayland Web (WWW)

[Thorrez]

Would this break all existing HTML websites? That seems pretty untenable.

On: Github scam investigation: Thousands of “mods” and “cracks” stealing data

[Thorrez]

If you claim in the repo description that it's not malware in order to trick people into downloading it, then definitely yes.

On: Github scam investigation: Thousands of “mods” and “cracks” stealing data

[Thorrez]

>You are still on microsoft github

Who is on microsoft github? The article is about malware distributors using github to distribute malware. Are you suggesting that malware authors should avoid github because it's not noscript friendly? Malware authors care about how to distribute the most malware, not about whether their distribution site is noscript friendly.