comment on Entrust_Issues wiki page

The page lists the following issue: “ 5. EV Certificate missing Issuer’s EV Policy OID - https://bugzilla.mozilla.org/show_bug.cgi?id=1888714 Entrust issued 1,963 EV TLS certificates September 11-22, 2023, without including an EV TLS CP OID. Root Causes were the misinterpretation of the EV

Re: evaluation of aggregate behaviour for CAs

Oh, I feel dumb for not searching the old Google group, considering that I used to subscribe to it. Thanks for that, I'll review those cases and see how they were brought forward. Mike On Thu, 2 May 2024 at 18:25, Andrew Ayer wrote: > Hi Mike, > > On Thu, 2 May 2024 17:09:42 -04

Re: evaluation of aggregate behaviour for CAs

On Thu, 2 May 2024 at 17:54, Watson Ladd wrote: > Bugzilla is not the place to look for this kind of conversation. In > recent memory I can recall Camerfirma > (https://wiki.mozilla.org/CA/Camerfirma_Issues and > mozilla.dev.security.policy) and I recall a few more that searching > hasn't turned

evaluation of aggregate behaviour for CAs

Hello, I have been re-reading the Mozilla root policy, which necessarily leaves substantial discretion to Mozilla as to when revocation of a root (or otherwise constraining it, if such capabilities existed) is appropriate. >From also reviewing a number of historical incidents in Bugzilla, it

Re: CA Incident Transparency and Public Audits

Thanks, Wayne. I think this sort of analysis is quite valuable for constructing a reliable history of behaviour when evaluating CA operational effectiveness. Where should it be kept longer-term? I wonder if there should be a per-root journal generated/maintained, to better help identify patterns

Re: [JS-internals] JSContext refactoring

On Fri, Jun 17, 2016 at 2:45 AM, Jan de Mooij wrote: > After hundreds of Gecko/SpiderMonkey patches (thanks to bholley, bz, and > many others), each JSRuntime in Gecko now has a single JSContext. > This is amazing! Mike ___

Re: [JS-internals] C++ Exception Handling

Has there been some innovation in EH since Cargill's spine-chilling exploration of making a simple container strongly exception safe? I recall the consensus being that it was quite difficult to actually be strongly exception safe, but it sounds like that's no longer the case now. Mike On Mon,

Re: [JS-internals] Facebook Open Academy projects from SpiderMonkey?

My experience looking for similar things for Seneca would recommend: - relatively isolated subsystem: they should have to internalize less than 1KLOC - multiple meaningful milestones - good existing test coverage - few/no spec loose ends On Wednesday, September 17, 2014, Till Schneidereit

Re: [JS-internals] MIPS backend

Having the work in-tree also makes it easier to use the standard Mozilla tools to keep up: bug tagging, try servers, awfy, tbpl, etc. I think that's a substantial win for the MIPS team (and the code they maintain) even if it comes with utter disregard from the core SpiderMonkey hackers. On Thu,

Re: [JS-internals] Revisiting the removal of __noSuchMethod__

On Wed, Sep 11, 2013 at 2:37 AM, Kannan Vijayan kvija...@mozilla.comwrote: That behavioural change would make it pretty painless for the JITs. I'll start working on a patch for that. How would we communicate it and what sort of lead time would we want between communicating our intent and

Re: Uninteresting parameters

On Wed, Sep 28, 2011 at 2:50 PM, Brendan Eich bren...@mozilla.com wrote: I agree holes need better handling in future arraylike extras. Design effort there can start now, using today's JS. I'd welcome it. Perhaps underscore does well already? IIRC I chose the hole behaviour in the ES5 array

Re: Uninteresting parameters

On Wed, Sep 28, 2011 at 9:11 PM, Brendan Eich bren...@mozilla.com wrote: No worries, array extras are a great addition, we just need to keep rolling. Oh, no offense taken. I just meant to say that there may be consistency-with-existing-pattern reasons to prefer one hole behaviour over another,

Re: Class Syntax Proposal, Complete With Arguments For and Examples.

On Sun, Sep 18, 2011 at 1:36 AM, Jonathan Dumaine jonathan.duma...@dumstruck.com wrote: You could go all the way and make classes a very strict subset of the language: throw an error if the user tries to set a property of a class instance that has already been declared private [...] I would

Re: IDE support?

On Fri, Sep 16, 2011 at 1:55 AM, Andreas Rossberg rossb...@google.com wrote: Being able to detect when a condition is violated is not equivalent to knowing that it always holds. You're right, of course. Thanks for slicing that more finely for me. Mike

Re: IDE support?

On Thu, Sep 15, 2011 at 9:02 AM, Andreas Rossberg rossb...@google.com wrote: On 14 September 2011 00:00, Brendan Eich bren...@mozilla.com wrote: So, static+dynamic. The static side has some powerful algorithms to bring to bear. Dynamic is necessary due to eval and kin, and gives strictly more

Re: Language modes (Was: Block scoping and redeclarations)

On Wed, Aug 24, 2011 at 11:30 AM, Allen Wirfs-Brock al...@wirfs-brock.com wrote: The modern mode won't seem very modern twenty years from now. allen My understanding is that anything after the Middle Ages is fair game, and I see strict as the middle age between ES.now and ES.future. :-) MIke

Re: JavaScript terminology: non-function-valued property

Which primitives have own properties? I thought even str.length conceptually came from the prototype. Mike On Jul 22, 2011 6:13 PM, Axel Rauschmayer a...@rauschma.de wrote: To contrast non-method properties with methods: - To say that instances usually only have non-method properties. - To

Re: Pure win: Array.from and Array.of

On Sun, Jul 10, 2011 at 7:09 AM, Dmitry A. Soshnikov dmitry.soshni...@gmail.com wrote: If I hadn't made map skip holes, then the fill pattern would be simple enough: Array(4).map(function (_,x) x * x); It's in particular case, you try to multiply indices, which in current implementation of

[Mudlet-makers] [Bug 805594] [NEW] importing with different filename can cause partial (failed?) import

Public bug reported: If I have the mudlet-mapper XML file named mudlet-mapper(1).xml, then importing it from the package manager adds a mudlet-mapper(1) entry to the package list, but doesn't add any of the aliases, triggers, or scripts. If I rename the file to mudlet-mapper.xml, then everything

Re: prototype focus

On Jul 1, 2011 1:14 PM, Brendan Eich bren...@mozilla.com wrote: On Jul 1, 2011, at 2:21 AM, Tim Smart wrote: I quite the current prototype model we have in ecma5. My only gripes would be that `prototype` to too wordy, Do you use it that often? 15 years ago, writing an overwrought prototype

Re: Mailing list reminder: password is sent in the clear

What can someone do with that password, though? Just change your subscription settings, afaik, so the security in place seems proportionate. Could report it upstream to the mailman team, I suppose. Mike On Jul 1, 2011 10:09 AM, Axel Rauschmayer a...@rauschma.de wrote: That’s a good start,

Re: Mailing list reminder: password is sent in the clear

On Fri, Jul 1, 2011 at 2:30 PM, Mike Samuel mikesam...@gmail.com wrote: 2011/7/1 Mike Shaver mike.sha...@gmail.com: What can someone do with that password, though? Just change your subscription settings, afaik, so the security in place seems proportionate. Could report it upstream

Re: Mailing list reminder: password is sent in the clear

On Fri, Jul 1, 2011 at 2:50 PM, Mike Samuel mikesam...@gmail.com wrote: 2011/7/1 Mike Shaver mike.sha...@gmail.com: On Fri, Jul 1, 2011 at 2:30 PM, Mike Samuel mikesam...@gmail.com wrote: 2011/7/1 Mike Shaver mike.sha...@gmail.com: What can someone do with that password, though? Just change

Re: JavaScript parser API

On Tue, Jun 28, 2011 at 6:34 PM, Axel Rauschmayer a...@rauschma.de wrote: http://blog.mozilla.com/dherman/2011/06/28/the-js-parser-api-has-landed/ I’ve just read D. Herman’s post on Firefox’s parser API. Is there any chance that this kind of API will make it into Harmony? It would be really

Re: Summary: prototypes as classes

On Tue, Jun 28, 2011 at 3:34 PM, Bob Nystrom rnyst...@google.com wrote: I like the simplicity of this, but I'm not crazy about how it merges two distinct objects into one. TodayJS (and most class-based languages) let you distinguish two things: 1. A set of properties relevant to the class

[Mudlet-makers] [Bug 801768] [NEW] show lua code generated by trigger/alias/etc. wizard

Public bug reported: For learning how to make scripts in mudlet, it would be helpful to be able to see the Lua that gets generated by filling in different things in the UI. ** Affects: mudlet Importance: Undecided Status: New -- You received this bug notification because you are

[Mudlet-makers] [Bug 801768] Re: show lua code generated by trigger/alias/etc. wizard

Ah, I saw some things in the debug console that made me think it did. I guess I'm asking for a way to generate equivalent Lua, but that's probably harder. Maybe I'll play with it myself once I get it building. -- You received this bug notification because you are a member of Mudlet Makers,

Re: Proposal: Object.defineProperty shorthand

On Thu, May 26, 2011 at 11:37 AM, Sean Eagan seaneag...@gmail.com wrote: // ! implies non-writable, ~ implies non-enumerable // all assignment operators can be used ! a.b += c Legal parse today, though I'm not sure you can get runtime semantics that aren't an error. !~a.b++ !(~(a.b++))

Re: Proposal: Object.defineProperty shorthand

On Thu, May 26, 2011 at 11:54 AM, Sean Eagan seaneag...@gmail.com wrote: On Thu, May 26, 2011 at 1:43 PM, Mike Shaver mike.sha...@gmail.com wrote: On Thu, May 26, 2011 at 11:37 AM, Sean Eagan seaneag...@gmail.com wrote: // ! implies non-writable, ~ implies non-enumerable // all assignment

Re: Standardizing out-of-memory and stack-depth-exceeded errors?

On Wed, Mar 23, 2011 at 6:21 PM, Garrett Smith dhtmlkitc...@gmail.com wrote: javascript: alert(new InternalError(Got on tha inside, bitch!)); Hrm. seems odd to expose the constructor publicly. Necessary to permit instanceof testing, no? The infinite recursion could be detected and reported

Re: About private names

On Mar 20, 2011 3:34 PM, Kyle Simpson get...@gmail.com wrote: BTW, if you know that a property name is foo, why would you ever code obj[foo] instead of obj.foo? The most obvious reason is if the name of the property contains a character which cannot be an identifier character in the property

Re: Bringing setTimeout to ECMAScript

On Sun, Mar 20, 2011 at 12:24 PM, John J. Barton johnjbar...@johnjbarton.com wrote: Looping as fast as possible is likely to be a bug. It's not similar to queuing events. It's the behaviour intentionally (if unwisely) requested by a lot of animations and games, for what it's worth. There are

Re: Native JS Encryption

On Sat, Mar 19, 2011 at 10:09 AM, Mark S. Miller erig...@google.com wrote: I agree about outside domain experts. In fact, I wish we could invite outside domain experts participate in all tc39 activities as we deem appropriate. I do not understand the rationale for bounding invited expert

Re: Native JS Encryption

On Sat, Mar 19, 2011 at 2:45 PM, Robert Accettura rob...@accettura.com wrote: Are there any successful key based encryption schemes that have actually succeeded with normals? TLS would be the obvious example, bitlocker and other encrypted file systems as well. We have hopes for the Firefox

Re: Standardizing __proto__

On Fri, Mar 18, 2011 at 9:14 AM, John-David Dalton john.david.dal...@gmail.com wrote: The __proto__ property is a powerful language feature that cannot be reproduced through any existing part of the language. Current proposals like, http://wiki.ecmascript.org/doku.php?id=strawman:array_create,

Re: Standardizing __proto__

On Fri, Mar 18, 2011 at 9:29 AM, John-David Dalton john.david.dal...@gmail.com wrote: @Mike Shaver For other possible uses please check out: http://msdn.microsoft.com/en-us/scriptjunkie/gg278167 https://github.com/jdalton/fusebox#readme Those all look like they are needing custom

Re: Standardizing __proto__

On Fri, Mar 18, 2011 at 10:45 AM, Oliver Hunt oli...@apple.com wrote: I think so -- my proposal doesn't take instances, nor produce instances, it takes the constructor function (Image is one of a handful of DOM constructor that can actually be used to construct things) and returns a new

Re: Standardizing __proto__

On Fri, Mar 18, 2011 at 1:53 PM, John-David Dalton john.david.dal...@gmail.com wrote: Ya, some people have that reaction at first, but after use it's not bad. Most of the time you create a string or value once then pass around the variable. Because these sandboxed natives chain, usage is

Re: Standardizing __proto__

On Fri, Mar 18, 2011 at 5:11 PM, John-David Dalton john.david.dal...@gmail.com wrote: Extending the Object.prototype is a compatibility nightmare It was a compatibility nightmare when people didn't namespace, and when you couldn't make non-enumerable properties. Using a namespace for additions

Re: Harmony is a super-set of ES5 strict

On Fri, Feb 25, 2011 at 7:36 AM, David Bruant bru...@enseirb-matmeca.fr wrote: Does it mean that the use strict directive is implicit whenever an ESHarmony feature is used? (this sounds wrong, but I'm asing the question anyway) It means that the semantics of Harmony are based on ES5-strict,

Re: [whatwg] Cryptographically strong random numbers

On Fri, Feb 11, 2011 at 1:36 PM, Adam Barth w...@adambarth.com wrote: Regardless, the ability does not exist in JavaScriptCore.  If you'd like to contribute a patch that makes it possible, I'm sure it would be warmly received. That is surprising to me. Isn't it necessary in order to implement

Re: idea: try/catch and rethrow...?

On Tue, Feb 1, 2011 at 10:53 AM, Kyle Simpson get...@gmail.com wrote: ?I have something that annoys me about how JavaScript try/catch error handling currently works. Don't get me wrong, I totally understand why it works that way, and it makes sense. But having the option to get around that

Re: Suppressing CSS error reporting when using the DOM selector APIs

On Mon, Jan 31, 2011 at 6:16 AM, Boris Zbarsky bzbar...@mit.edu wrote: [09:01:04.453] uncaught exception: [Exception... An invalid or illegal string was specified code: 12 nsresult: 0x8053000c (NS_ERROR_DOM_SYNTAX_ERR) location: file:///tmp/test.html Line: 14] Of course that's full of the

Re: Stupid i18n use cases question

On Sun, Jan 30, 2011 at 10:32 AM, Shawn Steele shawn.ste...@microsoft.com wrote: I'm still trying to grok word processing in JavaScript (beyond the simple case) What's to grok? Microsoft is putting word processors on the web, even. They don't want to go back to the server for all processing

Re: Stupid i18n use cases question

On Sat, Jan 29, 2011 at 9:24 PM, Shawn Steele shawn.ste...@microsoft.com wrote: I realize what line breaking's for, but I didn't think that would often be done in JavaScript.  You preformat some text in JavaScript? Yeah, for use in SVG or rendering atop canvas, for example. Mike

Re: Operator Overloading

On Mon, Jan 10, 2011 at 10:55 AM, Brendan Eich bren...@mozilla.com wrote: In light of the incubation argument and big-ticket items, I don't think value proxies break our complexity budget but they are very new. They're unlikely to get into ES6. Let's keep discussing here and working on the

Re: Colons and other annotative characters

I'd expect that o = { a : b = 5 } Was legal now, setting both o.a and b to 5. Not at a shell, is there an exception in the grammar for assignment expressions in the value position? { a = 5 : T } might work, though. Mike On Nov 22, 2010 6:09 PM, Waldemar Horwat walde...@google.com wrote: On

Re: Errors in syntax for array destructuring?

On Fri, Oct 15, 2010 at 8:34 AM, Brendan Eich bren...@mozilla.com wrote: On Oct 14, 2010, at 11:47 PM, Dominic Cooney wrote: On the harmony:destructuring page http://wiki.ecmascript.org/doku.php?id=harmony:destructuring it specifies this syntax for patterns: Pattern ::= { (Field (,

Re: Syntax for Efficient Traits is now ready for discussion (was: Classes as Sugar is...)

On Tue, Sep 14, 2010 at 8:46 AM, Mark S. Miller erig...@google.com wrote: Btw, the current proposal does currently repurpose with for renamings. Even though there's no syntactic conflict, if we use with instead of mixin we should choose a different syntax for renamings. Suggestions? as. Mike

Re: use strict; prepended blindly to scripts in the wild

On Thu, Sep 9, 2010 at 1:09 AM, Dmitry Soshnikov dmitry.soshni...@gmail.com wrote: Currently, a site may normally concatenate 3rd-party libs with use strict at the global level. The technique is the same as with forgotten semicolon -- just to put an empty statement at the beginning of the end

Re: [whatwg] Canvas API: What should happen if non-finite floats are used

On Wed, Sep 8, 2010 at 10:33 AM, Oliver Hunt oli...@apple.com wrote: In a lot of cases all you want to do is ignore NaN and Infinite values, otherwise you basically have to prepend every call to canvas with NaN and Infinity checks if you're computing values unless you can absolutely

Re: WeakMap API questions?

On Fri, Sep 3, 2010 at 8:22 AM, David Herman dher...@mozilla.com wrote: Mike momentarily forgot what they mean Yes, it was a lapse from a casual observer reading the conversations quickly; please don't let my brain-blip harm the sweet naming. Mike ___

Re: WeakMap API questions?

On Thu, Sep 2, 2010 at 12:46 AM, Erik Corry erik.co...@gmail.com wrote: And this is as it should be.  As it stands the weak map can be used as an object with private members.  The object key acts as a capability that controls whether or not you have access to the private member. If I were to

Re: WeakMap API questions?

On Thu, Sep 2, 2010 at 11:32 AM, Erik Corry erik.co...@gmail.com wrote: Surely that is the case with WeakMap?  At least unless you lost the key and don't have any other references to the value.  In which case you can't reach the value any more, so why would you care whether it is kept alive?

Re: [whatwg] Adding ECMAScript 5 array extras to HTMLCollection

On Fri, Jul 30, 2010 at 12:43 AM, Oliver Hunt oli...@apple.com wrote: The various html collections aren't fixed length, they're not assignable, so they can't used interchangeably with arrays at the best of times. Array generics work on arrays that aren't fixed-length, perhaps obviously, and I

Re: Rationalizing ASI (was: simple shorter function syntax)

On Sun, Jul 25, 2010 at 8:15 PM, Mark S. Miller erig...@google.com wrote: veryLongObjectName.someOtherVeryVeryLongObjectName.ridiculouslyLongFunctionName    (longArgument1, longArgument2, longArgument3, longArgument4, longArgument5); Yes. Even in the absence of ASI issues, my inclination

Re: [whatwg] Please disallow javascript: URLs in browser address bars

On Thu, Jul 22, 2010 at 4:48 PM, Tab Atkins Jr. jackalm...@gmail.com wrote: These days, though, all major browsers have javascript consoles which you can bring up and paste that into. That doesn't typically apply to content tabs or windows, though. I have a couple of questions: What is the

Re: [whatwg] Please disallow javascript: URLs in browser address bars

On Thu, Jul 22, 2010 at 5:32 PM, Luke Hutchison luke.hu...@mit.edu wrote: On Thu, Jul 22, 2010 at 5:03 PM, Mike Shaver mike.sha...@gmail.com wrote: What is the proposed change to which specification, exactly?  URL-bar behaviour, especially input permission, seem out of scope for the specs

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 9:10 AM, Nils Dagsson Moskopp nils-dagsson-mosk...@dieweltistgarnichtso.net wrote: (clients try to guess based on incorrect information and you end up with stupid switches). Could you be more specific about the incorrect information? My understanding, from this thread

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 9:43 AM, Nils Dagsson Moskopp nils-dagsson-mosk...@dieweltistgarnichtso.net wrote: Mike Shaver mike.sha...@gmail.com schrieb am Wed, 21 Jul 2010 09:15:18 -0400: and furthermore that the appropriate MIME type for ogg-with-VP8 vs ogg-with-theora isn't clear (or possibly

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 9:46 AM, Chris Double chris.dou...@double.co.nz wrote: How much data are you willing to sniff to find out if the Ogg file contains Theora and/or Vorbis? You have to read the header packets contained within the Ogg file to get this. A few kilobytes certainly seems

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 9:51 AM, Philip Jägenstedt phil...@opera.com wrote: On Wed, 21 Jul 2010 15:15:18 +0200, Mike Shaver mike.sha...@gmail.com wrote: Could you be more specific about the incorrect information?  My understanding, from this thread and elsewhere, is that video formats

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 10:04 AM, Philip Jägenstedt phil...@opera.com wrote: Right, sniffing is currently only done in the context of video, at least in Opera. The problem could be fixed by adding more sniffing, certainly. A warning that you're about to open a 5MB text document might be humane

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 10:07 AM, Chris Double chris.dou...@double.co.nz wrote: When content sniffing are we ignoring the mime type served by the server and always sniffing? If so then incorrectly configured servers can result in more downloaded data due to having to read the data looking for

Re: [whatwg] video application/octet-stream

On Wed, Jul 21, 2010 at 10:24 AM, Chris Double chris.dou...@double.co.nz wrote: On Thu, Jul 22, 2010 at 2:15 AM, Mike Shaver mike.sha...@gmail.com wrote: ...I would probably suggest that the developers of said browser implement basic Ogg support (enough to say this is Ogg, so we don't support

Re: [whatwg] Allowing in attribute values

One advantage is almost the same as your footnote: JavaScript source is permitted in the values of many attributes, and can certainly contain the operator. On Jun 25, 2010 12:34 PM, Benjamin M. Schwartz bmsch...@fas.harvard.edu wrote: On 06/25/2010 11:50 AM, Boris Zbarsky wrote: It seems like

Re: [whatwg] input type=location proposals

On Thu, Jun 24, 2010 at 5:55 PM, Ashley Sheridan a...@ashleysheridan.co.uk wrote: I think it's quite a fringe case. What about things that are more used: type=number - a browser could aid input with some sort of spinner type=price - a browser could use the locale to select a monetary format,

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 9:11 AM, Tab Atkins Jr. jackalm...@gmail.com wrote: The WHATWG has a steering council made up of browser developers. Officially, they can override Ian's decisions or make him step down as editor.  They've never had to exercise this power yet, though. Could you elaborate

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 1:51 PM, Ian Hickson i...@hixie.ch wrote: I value technical merit even higher than convergence. How is technical merit assessed? Removing Theora from the specification, for example, seems like it was for political rather than technical reasons, if I understand how you

Re: [whatwg] input type=location proposals

On Fri, Jun 25, 2010 at 2:45 PM, Ashley Sheridan a...@ashleysheridan.co.uk wrote: On Fri, 2010-06-25 at 17:09 -0400, Aryeh Gregor wrote: type=number has been in the spec for years. Do you have a link to this to verify? http://dev.w3.org/html5/markup/input.number.html is the fourth hit for

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 3:00 PM, Tab Atkins Jr. jackalm...@gmail.com wrote: Bottom of the charter: http://www.whatwg.org/charter I believe the decision process is knife fight to first blood. Editors should reflect the consensus opinion of the working group when writing their specifications,

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 3:07 PM, Tab Atkins Jr. jackalm...@gmail.com wrote:  How can one learn of the technical motivations of decisions such as the change to require ImageData for Canvas, On the WHATWG wiki a Rationale page is being assembled by a volunteer (don't know their name, but they

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 3:09 PM, Tab Atkins Jr. jackalm...@gmail.com wrote: I wasn't precise in my language - don't read too much into my exact wording. No, certainly; I'm much more interested in the spirit here than the wording, since it doesn't match my experience or understanding. I'll take

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 3:30 PM, Aryeh Gregor simetrical+...@gmail.com wrote: I'm pretty sure they won't be.  Any significant implementer has always had veto power over the spec. I fear that simply refusing to implement is indeed the WHATWG's equivalent of how Tab described FO-threats in the

Re: [whatwg] Technical Parity with W3C HTML Spec

On Fri, Jun 25, 2010 at 6:50 PM, Robert O'Callahan rob...@ocallahan.org wrote: Who from Mozilla objected? I didn't object, because I thought Ian's approach (manifests) was better than ours (JAR files). And I thought ours was quite different from Gears' (which used manifests, IIRC). There were

Re: [whatwg] input type=upload (not just files) proposal

On Tue, Jun 8, 2010 at 10:47 AM, Ashley Sheridan a...@ashleysheridan.co.ukwrote: On Tue, 2010-06-08 at 10:37 -0400, Simpson, Grant Leyton wrote: Are you wanting the user to manually enter the filename, including the file:// scheme? If not, are you envisioning the file dialog box to provide

Re: [whatwg] input type=upload (not just files) proposal

On Tue, Jun 8, 2010 at 11:02 AM, Ashley Sheridan a...@ashleysheridan.co.ukwrote: Yes, and the rest of my email said that. Sorry, I am not familiar with KIO, and didn't see the need for OS support. KIO slaves on KDE work just like that. It's not something that I think a user agent can

Re: Structs

On Wed, Jun 2, 2010 at 7:02 AM, Sam Ruby ru...@intertwingly.net wrote: On 06/02/2010 03:52 AM, Jason Orendorff wrote: I'll still maintain that the choice that ECMA 334 takes, namely that the assignment to b in the example above, makes a mutable copy is a valid choice. I would expect  

Re: [whatwg] WebSockets: what to do when there are too many open connections

On Thu, May 27, 2010 at 11:45 AM, John Tamplin j...@google.com wrote: On Thu, May 27, 2010 at 10:28 AM, Simon Pieters sim...@opera.com wrote: From our testing it seems that Vista has a limit of 1398 open sockets. Apparently Ubuntu has a limit of 1024 file descriptors per process. On Linux,

Re: modules proposal

On Mon, May 17, 2010 at 12:37 AM, Kam Kasravi kamkasr...@yahoo.com wrote: [kam] An example might be something like SVG.*Filter* where the importer was interested in retrieving only filter related features within a SVG module. For this, I would rather let the exporter define named export lists,

Re: Adoption of the Typed Array Specification

On Fri, May 14, 2010 at 2:09 AM, Oliver Hunt oli...@apple.com wrote: The data is mutable, the length is not -- this is more in line with arrays in other languages, but more importantly the whole point of the typed array spec was to provide a compact typed storage mechanism.  Allowing the

Re: [whatwg] WebSockets: what to do when there are too many open connections

On Thu, May 13, 2010 at 1:19 PM, Perry Smith pedz...@gmail.com wrote: Hosts have limits on open file descriptors but they are usually in the ten's of thousands (per process) on today's OSs. I have to admit, I'd be a little surprised (I think pleasantly, but maybe not) if I could open ten

Re: Proposal: Array.prototype.last()

On Wed, May 5, 2010 at 8:27 AM, Jordan Osete jordan.os...@yahoo.fr wrote: I've been wondering for some time if there couldn't be a way to index arrays from the last element directly. Currently if you have an array lost in a deep objects hierarchy, you have to refer to it twice, once to access

Re: [whatwg] Offscreen canvas (or canvas for web workers).

On Mon, Mar 15, 2010 at 3:05 AM, Maciej Stachowiak m...@apple.com wrote: === Summary of Data === 1) In all browsers tested, copying to an ImageData and then back to a canvas (two blits) is faster than a 2x scale. 2) In all browsers tested, twice the cost of a canvas-to-canvas blit is

Re: [whatwg] Storage quota introspection and modification

2010/3/11 Ian Fette (イアンフェッティ) ife...@google.com: I think apps will have to deal with hitting quota as you describe, however with a normal desktop app you usually have a giant disk relative to what the user actually needs. When we're talking about shipping something with a 5mb or 50mb default

Re: [whatwg] Storage quota introspection and modification

2010/3/11 Ian Fette (イアンフェッティ) ife...@google.com: AFAIK most browsers are setting a default quota for storage options that is on the order of megabytes. Could well be, indeed. It sounded like you'd done some thinking about the size, and I was curious about how you came up with that number

Re: [whatwg] Storage quota introspection and modification

2010/3/10 Ian Fette (イアンフェッティ) ife...@google.com: As I talk with more application developers (both within Google and at large), one thing that consistently gets pointed out to me as a problem is the notion of the opaqueness of storage quotas in all of the new storage mechanisms (Local Storage,

Re: [whatwg] localStorage mutex - a solution?

On Wed, Nov 25, 2009 at 6:20 AM, Ian Hickson i...@hixie.ch wrote: Reading or writing a property on a native object doesn't do it, so   window['x'].document.forms['y'].value = 'foo'; ...doesn't release the mutex, though this (identical code) would:  

Re: [whatwg] localStorage mutex - a solution?

On Tue, Nov 24, 2009 at 6:12 PM, Rob Ennals rob.enn...@gmail.com wrote: If you run your browser in super-warnings-enabled mode then you could have it warn you if you did anything remotely suspect between calls to localStorage (e.g. calling a function defined by an external javascript file or

Re: [whatwg] localStorage mutex - a solution?

On Wed, Nov 4, 2009 at 5:13 PM, Rob Ennals rob.enn...@gmail.com wrote: How about this for a solution for the localStorage mutex problem: the user agent MAY release the storage mutex on *any* API operation except localStorage itself This guarantees that the common case of several storage

Re: [whatwg] localStorage mutex - a solution?

On Wed, Nov 4, 2009 at 5:51 PM, Rob Ennals rob.enn...@gmail.com wrote: Or to put it another way: if the thread can't call an API then it can't block waiting for another storage mutex, thus deadlock can't occur, thus we don't need to release the storage mutex. Right, but the spec text there

Re: [cairo] Pixman glyph performance, and beyond!

On Fri, Oct 23, 2009 at 5:37 PM, Robert O'Callahan rob...@ocallahan.org wrote: If there are unavoidable quality/performance tradeoffs, then as a consumer of cairo (Firefox) I would really like to be able to choose our tradeoff point, because most of the time for us performance is more important

Re: Strategies for standardizing mistakes

On Thu, Oct 15, 2009 at 2:29 PM, Maciej Stachowiak m...@apple.com wrote: Just as a minor point of technical correction - this will actually alert not IE in Firefox because the right-hand sign of an assignment is considered a detecting access. (Just tested to confirm.) Thank you! I see that I

Re: Property Iteration in JSON serialization

On Wed, Oct 14, 2009 at 7:24 PM, Waldemar Horwat walde...@google.com wrote: No.  As I wrote, there is no de-facto implementation order because the implementations do not agree on the order in general, and what you call fringes such as numbers do matter.  Trying to force, say, insertion order

Re: Property Iteration in JSON serialization

On Wed, Oct 14, 2009 at 7:39 PM, Jeff Walden jwalden...@mit.edu wrote: On 10/13/2009 10:54 PM, Luke Smith wrote: Currently FF3.5.4 doesn't properly apply replacer functions, but Safari 4, WebKit, IE8, and Chrome 3 work fine for this task. How precisely are replacer functions not properly

Re: Strategies for standardizing mistakes

On Wed, Oct 14, 2009 at 7:40 PM, Jim Blandy j...@mozilla.com wrote: There's one specific kind of contextual information that's being looked at askance here: knowledge of the expression surrounding the call that invoked you.  Perl lets subroutines check what sort of value their caller is

Re: [whatwg] Application defined locks

concerns with Database, but they are higher-level and therefore likely less compelling to its advocates. :-) ) Mike On 9/11/09, Aaron Boodman a...@google.com wrote: On Fri, Sep 11, 2009 at 6:45 AM, Mike Shaver mike.sha...@gmail.com wrote: I'm especially concerned to hear you say that DB is basically

Re: [whatwg] Global Script proposal.

On Thu, Sep 3, 2009 at 7:30 AM, Ian Hicksoni...@hixie.ch wrote: On Mon, 31 Aug 2009, Mike Shaver wrote: The multiple server-side processes that end up involved over the course of the user's interaction do need to share state with each other, and preserving blocking semantics for accessing

Re: [whatwg] Web Storage: apparent contradiction in spec

On Mon, Aug 31, 2009 at 6:11 AM, Ian Hicksoni...@hixie.ch wrote: We can't treat cookies and persistent storage differently, because otherwise we'll expose users to cookie resurrection attacks. Maintaining the user's expectations of privacy is critical. By that reasoning we can't treat cookies

Re: [whatwg] Global Script proposal.

On Sat, Aug 29, 2009 at 5:40 PM, Ian Hicksoni...@hixie.ch wrote: Furthermore, consider performance going forward. CPUs have pretty much gotten as fast as they're getting -- all further progress is going to be in making multithreaded applications that use as many CPUs as possible. We should

  1   2   3   >