TheDong

19 ms·

301.
by TheDong 1y ago
You can't hide from the pickaxe $ git log --oneline -SKEY_INFLATE_SIGNAL_STRENGTH_BOOL | tail gets us the commit [0] from 2020 where config_inflateSignalStrength was renamed to KEY_INFLATE_SIGNAL_STRENGTH_BOOL $ git log
302.
by TheDong 1y ago
Let's look at the OSI definition since that's what people mean by Open Source (particularly when capitalized): https://opensource.org/osd > The license must allow modifications and derived works, and must allow
303.
by TheDong 1y ago
> Hell, they could even make it Open Source with a clause preventing other companies from using to code to make a profit Such a clause would immediately make it Source Available not Open Source.
304.
by TheDong 1y ago
It's more complicated than that though. For security, the whole context has to be considered. Like for example, look at the linked CVE-2025-12200, "NULL pointer dereference parsing config file"... Please, explain a single dns
305.
by TheDong 1y ago
"human communication is easy, just have an AI say 'buzz off' and the conversation partner and other strangers will always respond respectfully, I don't know why so many people complain about lack of spoons or other socia
306.
by TheDong 1y ago
> blindly take CVSS scoring as input without evaluating the vulnerability. Evaluating the CVSS score in your own context is the work I'm talking about. It does no one any good to have a CVE that says "may lead to remote code ex
307.
by TheDong 1y ago
> so is still a bug and should still get a CVE It's a bug, sure. The V in CVE is for "vulnerability", which is why people treat CVEs as more than just bugs. If every bug got a CVE, practically every commit would get one an
308.
by TheDong 1y ago
If someone can template in data, it's a lot easier to just set "dhcp-script=/arbitrary/code" If the person templating isn't validating data, then it's already RCE to let someone template into this config f
309.
by TheDong 1y ago
I identify with this, though I'm further along the path. Coding was incredibly fun until working in capitalist companies got involved. It was then still fairy fun, but tinged by some amount of "the company is just trying to make m
310.
by TheDong 1y ago
You have to push the signing as far out as possible. The light sensor must have a key built into the hardware at the factory, and that sensor must attest that it hasn't detected any tampering, that gets input into the final signature.
311.
by TheDong 1y ago
I think we might have hit the inflection point where being rude is more polite. It's not that I want people to be rude to me, it's that I don't want to talk to AI when I intend to be talking to a person, and anyone engaging w
312.
by TheDong 1y ago
It's open source, you can find this trivially yourself in less than a minute. https://github.com/immich-app/devtools/tree/a9257b33b5fb2d30...
313.
by TheDong 1y ago
If I went to a lot that had a sign at the entrance saying "Open Source Cars, feel free to open the hood and look to learn stuff. No warranty implied. Some may not function. All free to duplicate, free to take parts from, and free to ta
314.
by TheDong 1y ago
systemd-oomd I'm pretty sure is enabled by default in fedora and ubuntu desktop. I think it's off on the server variants.
315.
by TheDong 1y ago
systemd-oomd, oomd, and earlyoom all do poll for when to actually take action on OOM conditions. What I was trying to say is that the actual information on when there's memory pressure is more accurate for systemd-oomd / oomd beca
316.
by TheDong 1y ago
Even better than earlyoom is systemd-oomd[0] or oomd[1]. systemd-oomd and oomd use the kernel's PSI[2] information which makes them more efficient and responsive, while earlyoom is just polling. earlyoom keeps getting suggested, even t
317.
by TheDong 1y ago
Did you know if you open a page in a private browser window, once you close that page all the cookies vanish? It's even better than a button which might not even work.
318.
by TheDong 1y ago
https://mail.tarsnap.com/tarsnap-announce/msg00050.html > Following my ill-defined "Tarsnap doesn't have an SLA but I'll give people credits for outages when it seems fair" policy, I credited eve
319.
by TheDong 1y ago
Okay, so you won't use OpenSSL because it's not proprietary enough. What do you use instead? You pay for nginx plus? Oops, that uses openssl. F5 load balancers since you want to get even more proprietary and expensive? Some of tho
320.
by TheDong 1y ago
I believe you are making a technical statement and the parent poster is making a legal one. You're both right I guess
321.
by TheDong 1y ago
> Something that the XZ back door made me realise is that the fundamental difference between proprietary and open source software is not the price or source availability for most of its users — no not developers! - it is the reputation a
322.
by TheDong 1y ago
Love is a reasonably broad english word. "I love eating delicious food" is a totally sensible sentence with involves only the self and an inanimate object, and arguably only the self because it is about your own enjoyment and acti
323.
by TheDong 1y ago
Go and Java are actively hostile to integrating with C libraries, and the easiest way to make clean native UI on all 3 major OSs is to link with C libraries. There's also something akin to the Python Paradox here: https://ww
324.
by TheDong 1y ago
I think technically the CAN-SPAM act applies to an international company with any US customers, but in practice no company primarily in another country cares about that US law. Maybe if the US was willing to perform an air strike on each bu
325.
by TheDong 1y ago
It's a medical matter. If medical officials broadly agree that having a prosthetic limb gives someone better quality of life than having no limb, then yes, we should disfigure the human body by attaching a prosthetic. Medical officials
326.
by TheDong 1y ago
They all pay the price of google (micro-brainwashing by ads to buy things they don't need). I think the average person will happily pay the same price to OpenAI (being micro-brainwashed by the AI to buy things they don't need, i.e
327.
by TheDong 1y ago
The number of redis setups out there which rely on user-uploaded lua scripts and the lua sandbox being sufficient for that has got to be... close to 0? Like, the lua scripting feature is there for developers to write static trusted lua, che
328.
by TheDong 1y ago
Why is this bad? Do you run user-authored lua scripts against your redis? Do you have your redis exposed without any authentication on the public internet? If you do either of those, sure, this is bad for you. I've worked with quite a
329.
by TheDong 1y ago
Thumbnails are not transformative, they are fair use. They would be copyright infringement, except that a court case ruled them as fair use: https://en.wikipedia.org/wiki/Perfect_10,_Inc._v._Amazon.com... . The fact th
330.
by TheDong 1y ago
> There's nothing new about being able to copyright something that's a transformation of another work There is something novel here. Google Books created a huge online index of books, OCRing, compressing them, and transforming

More ›