Yeroc

8 ms·

61.
by Yeroc 3y ago
Yes, but sandboxing and fuzzing are insufficient. As pointed out in the article Google had been fuzzing this library and it didn't find the issue. They even tweaked the fuzzing after this issue was found to specifically target the ar
62.
by Yeroc 3y ago
May help? Studies have shown that ~70% [1] of all security issues (including this one) are memory safety issues. [1] https://security.googleblog.com/2021/02/mitigating-memory-sa...
63.
by Yeroc 3y ago
Yes and Google Chrome has invested heavily in sandboxing and still had to ship this as a high-priority fix. I'd say sandboxing in conjunction with memory-safe languages is the future.
64.
by Yeroc 3y ago
I'm surprised the summary of the article only talked about over-reliance on fuzzing and then suggested 1) more thorough code reviews and 2) sandboxing as solutions?! To me, the solution lies in using memory-safe languages.
65.
by Yeroc 3y ago
FYI, even in the most recent Java (21) LTS release this is flagged as an "early access" feature so you're unlikely to see production applications using it yet.
66.
by Yeroc 3y ago
Check out Peter Lawrey's blog [1] has lots of excellent content coming from high performance trading background. Also some older (probably dated) content on Martin Thompson's Mechanical Sympathy [2] blog. [1] http://bl
67.
by Yeroc 3y ago
I hear you. My compromise has been to use a cheap ChromeBook with touchscreen that flips around. I use the (somewhat clunky) Android MobileSheets app which supports syncing across various cloud storage so that part works quite nice. But p
68.
by Yeroc 3y ago
Relevant quote from the article: "The lack of real-world examples available - this obviously isn’t a limitation of the model itself but rather due to the fact that companies don’t want to advertise their architecture in detail in publi
69.
by Yeroc 3y ago
Perhaps long-tenured folk that are now incentivized differently from how they were previously?
70.
by Yeroc 3y ago
Yes, it's not about being able to pay the salaries of engineers. It's about being able to pay dividends to shareholders too!
71.
by Yeroc 3y ago
That, and if you need to run some COTS (commercial off-the-shelf) software package chances are the vendor will only support it on RHEL (or CentOS). However, many of these vendors also support Ubuntu LTS or Suse Enterprise now so there are
72.
by Yeroc 3y ago
Most likely yes. Can't speak for other organizations but the one I work for licenses RHEL on our critical servers and uses CentOS/Alma on all non-critical infrastructure. Obviously the reason that is done is because it's ea
73.
by Yeroc 3y ago
There were similar discussions when the CentOS Stream thing was announced and Red Hat didn't change course so I'd guess they're not going to back off this change either.
74.
by Yeroc 3y ago
I suppose Eclipse Che < https://www.eclipse.org/che/ > would also count?
75.
by Yeroc 3y ago
Well it seems like the President and CEO of the company was onboard the craft so I suppose the answer is "yes".
76.
by Yeroc 3y ago
Sky News < https://news.sky.com/story/uk-billionaire-hamish-harding-on-... > identifies several of the passengers including: - Hamish Harding - Paul-Henry Nargeolet - Stockton Rush (the President and CEO of OceanGa
77.
by Yeroc 3y ago
Is there any plan to introduce some simplifications to the processes using things like a bread machine to handle automating the rise and kneading of the bread doughs?
78.
by Yeroc 4y ago
I second the Music Matters recommendation. The way he explains things and walks through the creation of various harmonies I find very illuminating.
79.
by Yeroc 4y ago
All good points but while this saves you from the docker images disappearing it does nothing to solve the issue of those images no longer receiving important security updates and bug fixes going forward.
80.
by Yeroc 4y ago
You'll only need the expertise to perform in-depth optimization if you're scaling to the level of Stack Overflow though. For the vast majority of sites it won't be a concern. The simpler architecture should be the default b
81.
by Yeroc 4y ago
It's worth reminding people what is actually possible with a relatively simple architecture. There's a vast number of websites and services with a very small fraction of the traffic of Stack Overflow with a much more complicated
82.
by Yeroc 4y ago
Unless you live in Iran of course.
83.
by Yeroc 4y ago
Indeed repairability may have been the biggest change. Major appliances centralize virtually all functions including on one or two main circuit boards including the high-voltage relays which in my experience are very prone to failure (they
84.
by Yeroc 4y ago
Even on Quay the centos7 tag hasn't been updated in 2 years so it's clearly not getting any of the package updates. Yay, security!
85.
by Yeroc 4y ago
Not to worry. There's nothing inherent in the platform that encourages to be more civil and friendly other than established cultural norms that will soon be trampled by the influx of new users if things continue on the current traject
86.
by Yeroc 4y ago
The article notes that Finch is simply curating and/or wrapping Lima etc...
87.
by Yeroc 4y ago
This sounds like much-ado about nothing. We probably need to be far more concerned about "Docker Official Image"s that have been deprecated and are no longer receiving updates such as the "official" /_centos images
88.
by Yeroc 4y ago
I was hoping someone would mention "Learning How To Learn" as I was immediately reminded of this as well. The process described in this article aligns completely with portions of Barbara's research and teaching.
89.
by Yeroc 4y ago
Bizarre. Most VPNs used in a workplace would take care of name-based host resolution (ie DNS) for you. This is not a new thing unique to Tailscale.
90.
by Yeroc 4y ago
I would think the ambient outdoor temperature would have a rather large impact here. If it's cold outside the car has to use battery power to keep the batteries themselves within operating range.

More ›