Arnavion

21 ms·

271.
by Arnavion 2y ago
crates.io doesn't care what your build.rs does because it doesn't try to compile your code, neither now or ever in the past. There would be no point in it trying to compile your code; there are lots of crates that are bindings to
272.
by Arnavion 2y ago
I have a similar story to OP's. I had made a service that provided access to cryptographic keys but did not reveal the key material directly. Instead it had an RPC API for requesting a key "handle" for the key you wanted to u
273.
by Arnavion 2y ago
It's `pandoc --from markdown-smart --to html5` for me.
274.
by Arnavion 2y ago
A nand B = not(A and B) One of the relays gives you "A and B". The other gives you "A and not B". "A and not B" with A = 1 is just "not B".
275.
by Arnavion 2y ago
It doesn't even need to be a `static`. It can be `const` or just inlined `&0` because borrows of consts get promoted to `'static`
276.
by Arnavion 2y ago
The point of out-of-order execution is effectively to be able to run parallel computations that don't use the same underlying hardware, eg you can run an integer operation and a floating-point operation in parallel because they use dif
277.
by Arnavion 2y ago
If the value is Copy that value will continue to be usable after the runtime has been stopped and dropped, defeating the purpose. If the value borrows from the runtime to prevent that, futures that hold on to that value stop being `'st
278.
by Arnavion 2y ago
I use sway and I think it supports security-context-v1, though I haven't tried it. That said, my current setup is just to run cage + xwayland inside the container which gives decent enough sandboxing AFAIK. (I used to use Xephyr but th
279.
by Arnavion 2y ago
https://news.ycombinator.com/item?id=34634854 My current one is quite a bit different (based on Debian instead of Ubuntu, additional steps to make VR work, and some other changes) but the parts related to sockets etc are th
280.
by Arnavion 2y ago
I do the same X + Wayland + PulseAudio socket mounted inside a (Podman, not Docker) container thing for sandboxing GUI programs like Steam, so that they do not have access to any host resources (especially the filesystem, which Steam has a
281.
by Arnavion 2y ago
You're supposed to use a new private key for the new CSR. There is no reason to reuse the previous key.
282.
by Arnavion 2y ago
There's only one version of zlib, the distro-packaged version, in the scenario of this discussion.
283.
by Arnavion 2y ago
We're talking about distro packages, not upstream software releases.
284.
by Arnavion 2y ago
Vendored copies of libraries is a special case that's unrelated to this discussion. This discussion is about a distro whose packages dynamically link to the distro's zlib package vs a distro whose packages statically link to the d
285.
by Arnavion 2y ago
True. I'm involved in Alpine, postmarketOS and OpenSUSE packaging and I've seen builders of the first two become noticeably slow on mass rebuilds. OpenSUSE tends to be fine, but it has a lot of builders so that's probably why
286.
by Arnavion 2y ago
That's not a difference of security, only of download size (*). A statically-linking distro would queue up those thousand packages to be rebuilt and you would receive them via OS update, just as you would with a dynamically-linking dis
287.
by Arnavion 2y ago
I'm not going to switch to a firefox fork over one line in the configure script invocation. Forks have their own problems with maintenance and security. It's not useful to boil it down to one "adversarial relationship" b
288.
by Arnavion 2y ago
Distributions optimize for software in their repos. Software in their repos is compiled against libraries in their repos, so dynamic linking has no downsides and has the upside of reducing disk usage and runtime memory usage (sharing pages)
289.
by Arnavion 2y ago
I was thinking `NOT (1|2)` and `NOT () 2` could make sense if the parser just has a `not_in_effect` flag that gets set to true when a `NOT` is encountered and then applies to the next integer as soon as one is parsed. So `NOT (1|2)` sets th
290.
by Arnavion 2y ago
Rust has a generic assert too `assert!(foo >= bar);`. I assume (haven't used the crate myself) the advantage of `assertable::assert_ge!(foo, bar)` is that it prints the values of foo and bar in the assert message. The `assert_eq!(fo
291.
by Arnavion 2y ago
Yes, Wayland compositors like cage and sway can be nested too. That said, with both the X nesting approach and the Wayland nesting approach, you'd also need to run the screencasting application itself inside the nested server, not the
292.
by Arnavion 2y ago
ddevault isn't involved with wlroots for a few years now. The tiff between hyprland and wlroots / freedesktop was because of https://blog.vaxry.net/articles/2024-fdo-and-redhat . See also https://b
293.
by Arnavion 2y ago
Note that the .desktop files that waydroid generates by default for each installed Android application already do that.
294.
by Arnavion 2y ago
>it doesn't do rootless windows (Android apps are rendered into a single window that contains an entire Android UI) If you launch individual Android programs via `waydroid app intent ...`, they render as separate windows in the pare
295.
by Arnavion 2y ago
To add on to the other replies, you *can* load unsigned extensions with desktop Firefox if the build you're using disabled the signing requirement at build time. A bunch of distros' FF packages do that, for example, and is why I u
296.
by Arnavion 2y ago
I know little about it and I'm not sure that it works. It might. I do know that for regular std-using programs, std has its own panic strategy that it was compiled with, so even if you set your own code's panic strategy to abort,
297.
by Arnavion 2y ago
>I get an error that the _Unwind_Resume symbol is not defined (despite it not supposed to be needed) Try `-Z build-std=core` if you're not already doing it.
298.
by Arnavion 2y ago
It's trivial to check that it was. https://web.archive.org/web/20240905203257/https://binarygec...
299.
by Arnavion 2y ago
It was also useful for getting the plaintext version of the page that Google's indexer saw and actually contained the search term, vs the real page that has it hidden in some collapsed section that isn't visible to Ctrl-F until yo
300.
by Arnavion 2y ago
chasil is talking about a star that was able to form an iron core naturally through fusion, not a thought experiment of a ball of iron with the same mass as the current Sun.

More ›