Hacker News new | past | comments | ask | show | jobs | submit | more matmo's comments login

As much as I'd like to buy a house outside of California, I can't imagine living in cold weather constantly. I really need sunlight/warmth, and I can't help but feel like I would miss California's weather.


Luckily, there are plenty of other states with similarly nice weather.


Specifically?

The thing that I like about California is that it’s warmer than the rest of the country in the winter and cooler in the summer, generally expressed by the locals as “if the temperature is below 60 or above 80, everyone complains.”

Even inland California is too damn hot.


There are no other states that have mostly Mediterranean hot/warm summer climates (Csa/Csb) - Oregon being the exception if you enjoy a colder/wetter Csb than what you find in the Bay Area:

https://upload.wikimedia.org/wikipedia/commons/c/c3/US_50_st...


I live in San Francisco, but I've spent this whole winter in Utah, and it's actually been quite wonderful.


It’s not that bad considering modern technology and all. Get a winter hobby or sport!


What's the use case for this? Is this for crypto sensitive code or password matching that is vulnerable to timing attacks and such? Or is this for avoiding things like Spectre in a more general sense?


The latter. It's for guarding against malicious JavaScript discovering secrets. In practice, the browser should have this sort of protection built in.


For the uninformed, what's the proper way to remove a tick these days? When I was younger I heard advice to put a flame or extinguished match near the tick until it unlatches, but I've also heard that that's a bad idea because it causes them to emit some irritant into your body or something to that effect. What's the correct way?


That's terrible advice. The flame will cause the tick to unlatch, but it can also cause it to vomit, giving you any pathogens it's carrying.

The correct way is to take tweezers, side on grasping the top and bottom of the head and pull gently straight up (perpendicularly from the surface of your skin). Be patient. Taking a few minutes to do it right is better than rushing; you have about 24 hours before any significant risk of infection. Make sure you identify the head first and grasp that, as sometimes the head is buried. If you grab the body, you'll just decapitate the tick by pulling.


I always find it interesting that Chrome is charging ahead full steam on experimental API's like this while most other browsers have given no intent to implement them yet.

Did Chrome come up with Houdini? Are they being brave or pushy here?


It's a joint W3C Technical Architecture Group and CSS Working Group initiative, you can find a lot of details in this post from the Opera developer blog [1].

[1] https://dev.opera.com/articles/houdini/


Author here :)

Houdini is a task force that consists of people from Apple, Mozilla, Microsoft, Chrome, even IBM and Samsung. It’s by no means a Chrome-only thing or us being pushy.

Servo has an experimental implementation, but it’s the part of Servo that hasn’t been merged into FF. All participating browser vendors have given very positive signals about CSS Paint API.

Check http://ishoudinireadyyet.com/ to stay up to date :)


Thanks for the info. Love your youtube videos by the way :)


> Did Chrome come up with Houdini?

Most certainly not. I know people at Mozilla who've been working on Houdini-related features for a while now (cf. https://wiki.mozilla.org/CSS/Houdini). Chrome is just the first to release here.


The code in question (had to wget from the github referenced below - I'd rather not visit the domain OP posted at work):

<!DOCTYPE html><html><head><meta charset="utf-8"></head><body><script>

const a=[];

while(true) { a.push(42); }

</script></body></html>


If we had Fiber everywhere, would bandwidth arguments still be applicable?


Seems like a tit for tat thing here with multiple back and forths - but who started it?


Adam Smith


Assuming you're referring to the licensing part, it's probably because they've gotten a lot of public backlash for their previous licensing scheme that has caused some to avoid React altogether.


No, I mean - open sourcing their software. I don't know what their goal is as a company.


Sometimes to attract talent, sometimes to brings free work to a project.

Other times it's lock in for related technologies (current or future plans).

Some have speculated that it's a legal trick, like the problem everyone was insinuating with the React license before the recent change.

Anyone else have reasons I'm missing?


Three other (somewhat related) reasons I’ve heard stated by FB folks:

1. Makes it easier to identify talent out in the world that they want to go after.

2. Raises the technical reputation of Facebook, making it easier to get candidates to say yes.

3. Makes it easier to ramp new employees up on Facebook’s stack if they are already familiar with a lot of it from open source.


"One thing to pay attention to when preloading fonts is that you also have to set the crossorigin attribute even if the font is on the same domain: <link rel="preload" href="font.woff" as="font" crossorigin>"

But why?


Because the spec says font-loads from stylesheets must always be anonymous CORS. Thus the preload needs to match that.

https://drafts.csswg.org/css-fonts/#font-fetching-requiremen...


what @the8472 said, here's some more context on the implementation details: https://github.com/w3c/preload/issues/32


Tracking scripts? Can you expand on that? Legitimately curious as a user of SourceTree.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: