Hacker News new | past | comments | ask | show | jobs | submit | danielmg's comments login

What's WASM but Java applets for Gen-Z?



I used to work with a guy who developed photos in a lab in the 90s. He saw far too much stuff along those lines.



Very good. Your cover, like your head, extends for 2 seconds before dropping off.

We trawled SNOMED extensively for fun, er, I mean, data model research in my last company. But we didn't spot that one.


If it worked, they'd study it to find out what the interaction was or if it was a metabolite that carried the action. Then they'd develop a targetted version of that drug, patent it, and cash in.

It doesn't work. So they haven't.

A good example is major clinical depression and ketamine.


Reading the bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=1749957#c5 and then the code, isn't there still a problem if content-length is not set by the server? Not that it should ever not be set but...

  if (contentLengthStart == -1) {
    // There is no content-Length.
    return;
  }
That's the same flow it would have taken with the case sensitive code.


That comment is interesting too:

"I'm just a random kibbitzer, so my apologies if this is off-base, but... isn't an even more fundamental problem here that the code is doing a naive string-based search in the first place? For example, I believe this is a valid HTTP header block that could be passed into this code:

GET / HTTP/1.1\r\nHost: example.com\r\nCookie: foo="Content-Length: 100"\r\n\r\n (In particular, GET requests normally don't have a content-length header at all, since the default if none is present is to assume an empty body.)

Wouldn't this cause the code to compute the wrong body length and break things?"


> Not that it should ever not be set

I am an HTTP/1.1 dinosaur. Is chunked transfer encoding no longer a thing in HTTP/3? It used to be a valid reason to omit Content-Length.


> Is chunked transfer encoding no longer a thing in HTTP/3? It used to be a valid reason to omit Content-Length.

IIRC HTTP/2 and HTTP/3 are essentially always chunked. I would expect a missing content-length to be completely valid.


That is correct. By default HTTP/2 and HTTP/3 requests are streamed and can have an "infinite" length. The presence of a content-length header will limit limit that length, and inform the peer upfront on how much data will be sent.

For HTTP/1.1, a stream where the length is not known upfront required the usage of chunked encoding. With HTTP/2 and /3 that encoding is no longer required since the underlying protocol already support framing and contains and end-of-stream information.


I suspect no, because there is no mismatch between there being no content length header found by this file and the content header later being discovered by some other part of the code. It'll probably require more digging but I don't think FF would crash if the header was missing, this was likely caused by the header existing but this part disagreeing about it.


Plenty of servers out there configured not to return /Content-Length:\s?(\d+)/i at all. I mostly stumble upon them in my video plugin. m3u8 (content-type: application/vnd.apple.mpegurl) resources seem to be particularly configured this way most of the time.


Note that this code is parsing the client’s requests, not the server’s responses.


FPS Bank Error Recovery is a part of the scheme rules. The money comes back.

https://www.fasterpayments.org.uk/sites/default/files/Pay.UK...


There is no FPS message that allows you to unilaterally reverse a payment as a sending institution. It requires the consent of the receiving institution, and there’s no guarantee they’ll consent, or even have the ability to.

If the person receiving the money has moved it on, then it gone, FPS BER won’t save you. No receiving institution is going to voluntarily take on liability for another banks fuck up. At best they help you recover the money because the scheme makes them be helpful, but that’s no guarantee of actual recovery.


If someone drops their wallet by accident, and you take it, you are still stealing. The ultimate "source of truth" for payments is not the payment system, but the law, so if a payment was made in error, then the receiver has a legal responsibility to return the money.

> o receiving institution is going to voluntarily take on liability for another banks fuck up.

That's not how liability works at all...

If a large amount of money is erroneously deposited into your account, you don't get to keep it. Returning the money doesn't make you "liable" for anything, it's the opposite. If you spend that money, then you're going to have to pay it back, and if you can't, then you can end up in prison.


There’s a difference between the institution that receives the money, and the person that owns the account.

If the person owing the account move illegitimate find out of their account, then there’s nothing the receiving institution can do, they can’t return money no longer on their books. They could return money, and push the account owner into an overdraft, but now they’ve taken on the liability of recovering those funds. No bank is gonna do that voluntarily, especially to cover another banks fuck up.

Now the original sending bank could then ask the receiving bank who took the funds, and the receiving bank will tell the sending bank to come back with a court order, because they have a legal obligation to act in the best interest of their customer, even if they think their customer maybe doing something dodgy. Once the sending bank has rustled up a court order, then the receiving bank will hand over the account owners PII, and the sending bank can attempt to recover the money via the courts.

But a no point is the receiving institution ever going put their neck out to help a sending bank recover incorrectly sent funds. It’s the sending banks problem to use the legal system to both discover who received the funds, and pursue recovery directly from them. They can’t recover the funds from the receiving bank directly if the monies moved on and the account owner refuses to cooperate with the recovery process.

People forget there tends to be a very large gap between the law and its enforcement. Frequently it’s too much effort to actually enforce the law, so large sums just get written off instead.


BER is a process as part of the scheme rules. The banks have to at least attempt to recover the funds.

It's not a message but a file sent from sender to beneficiaries.


Err no. The payments get settled at BoE at the end of the cycle. This would have caused double draw on their settling account. They would have had less money.


I'm assuming this was FPS and the FPS scheme has a defined Bank Error Recovery process as part of the scheme rules.


It really depends. I've put someone through a disciplinary before for a really expensive failed change. Not because they made the mistake but because they failed to do any sanity checks before hand or post-imp checks - they just bashed it in and walked away.

I'd never go this route with a geniune mistake as they are life's best lessons. But there is a difference between an honest mistake and a mistake that could have been easily avoided had process been followed.


That's the Vimes' boots theory of socioeconomic unfairness.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: