Arnavion

28 ms·

481.
by Arnavion 3y ago
>The original comment was "drop the index for being "too complicated"". Correct. Lots of alternative git frontends drop the index and force you to include all changes in the commit, because they think users find the c
482.
by Arnavion 3y ago
Based on the description in the article, it does the equivalent of `git add`ing every change by default, but allows you to choose a subset of those changes to be in the actual commit. So the net effect is the same as if nothing was `git add
483.
by Arnavion 3y ago
I'm surprised to see an alternative git frontend that doesn't immediately drop the index for being "too complicated", which in turn makes me drop the alternative git frontend for being "too simplistic". I might
484.
by Arnavion 3y ago
Correct. There is no ordering guarantee across topics, and no ordering guarantee across different QoS levels on the same topic. It would not be possible to shard topics across multiple nodes if there was an ordering requirement per client.
485.
by Arnavion 3y ago
>The point is "evil maid" style attacks where someone messes with the boot partition (and/or firmware) by booting off another device. This subthread is descended from https://news.ycombinator.com/item?id=39
486.
by Arnavion 3y ago
>The second relies on DBX not being updated, for which the remedy is "don't do that". Not updating DBX is the default state. Updating it is what requires effort. How many devices actually have up-to-date DBX? I know I ment
487.
by Arnavion 3y ago
>How? Someone with enough privileged access to write to the ESP (ie root) can also add their own MOK to the ESP that the user might blindly accept next time they boot. Especially if they time it for when there is a legitimate new MOK in
488.
by Arnavion 3y ago
Yes, if the attacker can edit the the victim machine's EFI vars or the contents of its ESP, then they can make the victim machine use HTTP boot even if the victim machine didn't use HTTP boot originally. However at that point they
489.
by Arnavion 3y ago
The HTTP client is provided as an EFI driver by the UEFI. AFAICT the UEFI spec doesn't specifically say what the behavior should be if the content-length header doesn't match the response body length, so it might very well be poss
490.
by Arnavion 3y ago
HTTP support is implemented by an EFI driver, so it's up to the UEFI to provide it in a way that works. The UEFI spec allows both HTTP and HTTPS URLs.
491.
by Arnavion 3y ago
Yes, that is how the MOK enrolment process works. The distro drops its MOK (the one it used to sign the kernel into the distro kernel package) into the ESP. On next boot shim notices the new key and asks the user if they want to enroll it.
492.
by Arnavion 3y ago
MS doesn't "issue" signing keys. MS has a signing key that it uses to sign bootloaders, and which is the default key in every UEFI that wants to be able to boot Windows with Secure Boot enabled. (*) Their argument is that i
493.
by Arnavion 3y ago
shim is an EFI bootloader commonly used by Linux distros that want to enable Secure Boot. Distros want an easy path to enabling Secure Boot using the default preloaded Microsoft signing key, rather than require users to enroll their own key
494.
by Arnavion 3y ago
https://datatracker.ietf.org/doc/draft-koch-openpgp-webkey-s... Serve the key at a certain URL from a webserver on your email domain. Clients that trust the domain can trust the key that it serves.
495.
by Arnavion 3y ago
What's hard about it? You just define `user.signingkey = $key_id` and `commit.gpgsign = true` in `~/.config/git/config` once and be done with it. Or only the first one if you want to choose what you sign instead of signi
496.
by Arnavion 3y ago
>The first step is to extract all lines which start from "author ", without checking what the rest of the line looks like. I'm saying that this already requires knowing that "without checking what the rest of the line
497.
by Arnavion 3y ago
This still has the same problem. Your solution requires them to program the first "Extract all author lines" step to accept both lines, namely they would have had to make sure their extractor considered author lines with a zero-le
498.
by Arnavion 3y ago
Reread the comment carefully.
499.
by Arnavion 3y ago
>having a private ip = definately not publicly reachable. What component of your router prevents a packet with destination IP 192.168.1.2 arriving on the WAN interface from crossing over to the LAN interface and reaching a LAN machine wi
500.
by Arnavion 3y ago
>This is starting to look very similar to "if you repeatedly add all the digits of an integer represented in base 10 representation until you have a single digit, and the result is 3, 6 or 9, then it is divisible by 3". I forgo
501.
by Arnavion 3y ago
Another option is to implement your API in a sans-io form. Since k8s-openapi was mentioned (albeit for a different reason), I'll point out that its API gave you a request value that you could send using whatever sync or async HTTP clie
502.
by Arnavion 3y ago
The first reference in the article has the working out. https://plus.maths.org/content/mysterious-number-6174
503.
by Arnavion 3y ago
The former. A tiling WM covers the entire desktop with whatever windows are visible in the workspace. One window starts out full screen, creating a second window halves the first one and tiles them side-by-side, and so on. I would only see
504.
by Arnavion 3y ago
Stellarium is also scriptable, so I was able to write a cronjob that would launch Stellaris in an invisible background window, set my latitude and longitude, set a bunch of display options, save an image of the rendered sky to a file, and t
505.
by Arnavion 3y ago
It does matter. Transmiting it in plain text, ie unencrypted, is much worse, because it means eavesdroppers also have access to it.
506.
by Arnavion 3y ago
Their concern is valid, but it's weird that they call it "in plain text". "Plain text" has a specific meaning of "unencrypted", whereas this is encrypted in a TLS connection. Yes, both TFA and the original
507.
by Arnavion 3y ago
My comment is very clearly about open-source software, yes. Also for photo editing and video editing there is open-source software, and there's no reason for Debian to not package it. In any case, "any software may be tracking the
508.
by Arnavion 3y ago
App sandboxing is less of a concern when the software you use is built from source in your distro's package repository, and is maintained by distro maintainers whose interests align more closely to yours than the software manufacturer&
509.
by Arnavion 3y ago
You're fine to have whatever rules you want of course, but perhaps a more useful rule would be "Does this game have enough content to justify its price?" regardless of its finished-ness. There are finished games for which tha
510.
by Arnavion 3y ago
It's had native Linux support since day one. I bought it (edit: on Steam) in its first week of release (2021-10) and it worked fine.

More ›