ValdikSS

12 ms·

181.
by ValdikSS 6mo ago
Well it's kind of possible to block it with routing tables+rules only, but you're right. This is also painful if iptables/nftables binaries are not installed.
182.
by ValdikSS 6mo ago
https://news.ycombinator.com/item?id=47648289
183.
by ValdikSS 6mo ago
Anyone in "your lan" (L2 of the interface, sometimes L3 like VPN). Your containers/VMs will be fully accessible from other machines in "LAN" (hosting provider infrastructure, or ISP infrastructure), despite no port
184.
by ValdikSS 6mo ago
The Linux box instantly turns into a router as soon as you run `sysctl net.ipv4.ip_forward=1`, because the default policy for FORWARD table is ACCEPT. You need to explicitly reconfigure the iptables/nftables to prevent that from happen
185.
Xerox deleted Linux drivers for EOL printers, but not Windows or macOS(forum.support.xerox.com)
4 points by ValdikSS 8mo ago|1 comments
186.
by ValdikSS 8mo ago
ghostscript does not support jbig encoding, only decoding.
187.
Windows 11 is finally killing off legacy printer drivers in 2026(windowscentral.com)
4 points by ValdikSS 8mo ago|0 comments
188.
by ValdikSS 8mo ago
>the GitHub Actions log viewer is the only one that has crashed my browser. Not once. Repeatedly. Reliably. Well, THIS blog post page reliably eats the CPU on scrolling, and the scrolling is very jerky, despite it has only text and no ot
189.
by ValdikSS 8mo ago
Damn you're right. It's double-confusing now.
190.
by ValdikSS 8mo ago
Well, you're joking, but the entire RAM industry still lists their chips in Gb (gigaBITS) to avoid confusion. 32 Gb ram chip = 4 GiB of RAM.
191.
by ValdikSS 8mo ago
I know the only other software with this kind of error: https://github.com/lsd-rs/lsd/issues/807
192.
by ValdikSS 8mo ago
>Why do we often say 1 kilobyte = 1024 bytes? Because Windows, and only Windows, shows it this way. It is official and documented: https://devblogs.microsoft.com/oldnewthing/20090611-00/?p=17... > Explorer i
193.
by ValdikSS 8mo ago
>Unfortunately Archive.today complies with these attack requests in some situations, but is still usually better than others. Use Onion version :D
194.
by ValdikSS 9mo ago
There are SoCs with 64 or 128 MB integrated, and people run reasonably complex stuff on it. I still have 64 MB VPS (OpenVZ) which I use in production since 2012. It runs DNS, VPN, some logging stuff.
195.
by ValdikSS 9mo ago
Linux (the kernel) has LOTS of functionality anyone barely use or even know. Without that, there's no tooling around this functionality, no adoption. Not even all TCP socket options (setsockopt) are documented! Systemd pushed forward p
196.
by ValdikSS 9mo ago
As my friend said: >If the old h4xx0rs make it easy and convenient so that there is no effort working with the system, their ass will fall off.
197.
by ValdikSS 9mo ago
They can, and they do. Opera does great zoom + text reflow since ≈2010 and counting.
198.
by ValdikSS 9mo ago
Oh, and there's TWO page zooms btw: the one you activate with +/- (or ctrl + +/-), and another one available with touchpad pitch-to-zoom / touchscreens (you can't use it on desktops without touchpad/touchscreen
199.
by ValdikSS 9mo ago
It you know what you're doing and scrupulous enough, you can package the software in a way that it works 25 years later. https://xcancel.com/ValdikSS/status/1843044963443253678
200.
by ValdikSS 9mo ago
>I wonder though, if I package say a .so file from nVidia, is that allowed by the license? It won't work: drivers usually require exact (or more-or-less the same) kernel module version. That's why you need to explicitly exclude
201.
by ValdikSS 9mo ago
AppImage is not what you need. It's just an executable wrapper for the archive. To make the software cross-distro, you need to compile it manually on an old distro with old glibc, make sure all the dependencies are there, and so on.
202.
by ValdikSS 9mo ago
`dlopen`'ing system libraries is an "easy" hack to try to maintain compatibility with wide variety of libraries/ABIs. It's barely used (I know only of SDL, Small HTTP Server, and now Godot). Without dlopen (with reg
203.
by ValdikSS 9mo ago
And it is a SoC requirement for Android certification.
204.
by ValdikSS 9mo ago
Baikal definitely has anti-rollback, and Loongson should have it too. That's a common feature. As of efuses, they are present essentially anywhere. In any SoC and microcontroller. They are usually used to store secrets (keys) and for c
205.
by ValdikSS 9mo ago
I cracked into many x86-based arcade machines (and non-arcade gambling machines), and none of them used anything really bespoke. I never seen non-BIOS/UEFI x86 system in my life. Not going to say they are non-existent, but probably the
206.
by ValdikSS 9mo ago
On ARM, you control the whole boot process on many SoCs, and can make your own bespoke secure/trusted/measured boot chain, starting from bootrom to the very latest boot stages (given that your SoC manufacturer has root of trust an
207.
by ValdikSS 9mo ago
Well, you have much more control of lower-level boot process on ARM chips, and each of the SoC manufacturers have their own implementation of Trusted Boot which relies on the cryptography and secrets inside the SoC rather than TPM as in x86
208.
by ValdikSS 9mo ago
Sure, why not? You have a reference implementation for both TrustZone OP-TEE (from Microsoft!) and in-Linux-kernel. No need to code anything, everything is already there, tested and ready to work. https://github.com/OP-TEE&#
209.
by ValdikSS 9mo ago
Then also do this: echo vm.page-cluster=0 >> /etc/sysctl.d/85-swappiness.conf
210.
by ValdikSS 9mo ago
Sigma-star does many very high quality embedded blog posts, and touches not popular and hardly discussed topics pretty in-depth.

More ›