Xylakant

11 ms·

181.
by Xylakant 2y ago
Disclaimer: I’m one of the founders of Ferrous Systems, the company behind Ferrocene. One of the goals when certifying Ferrocene was that it serves as a drop in replacement for rustc. So while we’re happy if you start out building your prod
182.
by Xylakant 2y ago
The problem with satellites however is that they cannot loiter, so the window in which they can gather data is limited and predictable. They are also essentially fixed on their track - changing orbit requires fuel. Drones (and old-fashioned
183.
by Xylakant 2y ago
So we’re introducing new bugs to add a little extra spice? Not trying to defend the code quality of OpenSSL, but the fallout of this bug affected everything and everyone and bad keys are still found 16 years later as of 2024.[1] And it was
184.
by Xylakant 2y ago
You’re correct. It wasn’t a backport, it was an attempt to fix a perceived issue that upstream had not fixed - a read of uninitialized memory. What the maintainer did not understand was that the call was deliberate. With this and subsequent
185.
by Xylakant 2y ago
Theoretically, it can be. However, it’s only relevant in specific circumstances that Rust happens to provide, for example one of the requirements is that the package manager / build system allows you to have two different versions of t
186.
by Xylakant 2y ago
A common downside is that the distribution picks the lowest common denominator of some dependency and all apps that require a newer version are held behind. That version may well be out of support and not receive fixes at all any more, whic
187.
by Xylakant 2y ago
There are many kinds of secrets that are used for purposes where they cannot be derived from customer secrets, and those still need to be secured. TLS private keys for example. I do disagree on the second part - there’s a world of a differe
188.
by Xylakant 2y ago
An attacker gaining temporary capability to encrypt/decrypt data through a compromised instance is painful. An attacker gaining a copy of a private key is still an entirely different world of pain.
189.
by Xylakant 2y ago
The more relevant question is whether my efforts to do something lead to a better and faster result than my cloud providers efforts to do something. I get it - it feels powerless to do nothing, but for a lot of organizations I’ve seen the a
190.
Improvements to Mozilla's Searchfox Code Browser(kdab.com)
2 points by Xylakant 2y ago|0 comments
191.
by Xylakant 2y ago
Time to advertise the Phoniebox https://phoniebox.de/ , building you own Tonie clone with NFC chips and a raspberry pie. (some assembly required)
192.
by Xylakant 2y ago
“If it doesn’t damage the car, it’s not safe bike infrastructure.” someone said, and they’re right.
193.
by Xylakant 2y ago
You’ll be appalled. Germany has a notion of “Allgemeine Betriebsgefahr” which encapsulates the general danger of operating dangerous machinery. For a car/bike accident, the default minimum damages split is at least 20% for the car, eve
194.
by Xylakant 2y ago
The problem with this is that it's an agreement between Github and the Contributor which the Maintainer cannot directly enforce. The maintainer can point to it when they get sued, but they would likely need to get Github to enforce it.
195.
by Xylakant 2y ago
Or when they release a phone with no keyboard, no apps, that couldn't even do 3G speeds. Followed by the iPhone funeral parade held by microsoft. Or when they release a tablet. Everyone was talking about how that was merely a content c
196.
by Xylakant 2y ago
Or pregnancy and no subsequent childbirth in any of the many states in the US that harshly penalize abortion.
197.
by Xylakant 2y ago
Funfactlet: There's a steam locomotive in active duty shunting work trains around at the moment in western Germany. The Riedbahn between Frankfurt and Mannheim is currently being redone and they were short on Diesel engines, so one Ver
198.
by Xylakant 2y ago
The way they figured out how to defuse the bombs was pretty rough, too. The person that did the defusal would call out what they were about to do next to a person taking notes at a safe distance. If the bomb exploded, they knew not to do th
199.
by Xylakant 2y ago
They may have been hit by something entirely unexpected and may still need to get their bearings. "It's not github, it's not a DCMA takedown." may very well be the only thing they can communicate with a modicum of certai
200.
by Xylakant 2y ago
Nothing. It might not see adoption, but you can create as many IPC standards as you desire.
201.
by Xylakant 2y ago
Examples are not particularly hard to come by: All government regulations to reduce smoking, all regulations to reduce petrol cars. All regulations to ban drugs. All of those aim to reduce the sale of some item the government could or does
202.
by Xylakant 2y ago
Essentially, this has been Rusts value proposition from the outset - build a language that you can integrate into other codebases seamlessly, hence the choice of no runtime, no garbage collector etc. Bindgen ( https://github.com&#
203.
by Xylakant 2y ago
For some use cases, dynamically constructing the query is a requirement, for example if you’re building a data warehouse query interface , or have a user interface that allows selecting columns or similar.
204.
by Xylakant 2y ago
Github is free for a large class of users, but it's also an enterprise product that feeds off the funnel created by the free userbase. Almost every developer knows github by now, knows how to use it and integrating your own source cont
205.
by Xylakant 2y ago
Yubikeys don’t use a pin by default, but at least the ones I use all have the option to set one.
206.
by Xylakant 2y ago
Absolutely. My point is that pass/gopass in practice lead to larger vaults, so.you need to rotate more passwords. And more advanced password managers offer assistance for that task, which the more basic ones do not.
207.
by Xylakant 2y ago
We uses D the same approach for a while. Pass/gopass will do that for you. However, the downside here is that it quickly gets unwieldy as you’ll end up with a relatively large vaults. And you can’t really remove people, they can always
208.
by Xylakant 2y ago
But Elastic can already take the changes from Amazons fork - opensearch is permissively licensed. What they might want is that Amazon stops maintaining its fork and contributes directly to elastics mainline. I believe that ship has sailed,
209.
by Xylakant 2y ago
I don't see why this is a reason to be skeptical. Firefox is a huge codebase. Substantial chunks of it have been rewritten using Rust while maintaining the entire app and adding features. This is entirely the plan: You can slowly, as y
210.
by Xylakant 2y ago
Specifically, rust was designed and created for this use case. It’s the language created to rewrite Firefox in a memory safe language, component by component. This means rust is uniquely capable of integrating into C/C++ code bases, un

More ›