Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
akdev1l
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
12 ms
·
211.
▲
by
akdev1l
1y ago
> when it breaks, path of least resistance is often to reinstall the OS Can you elaborate how do you even break this? Adding a systemd unit cannot really break much on systemd itself. Unless you’re messing with internal systemd stuff, I
212.
▲
by
akdev1l
1y ago
afaik journald can just forward logs via rsyslog directly to a remote server Why would it need to store plaintext locally?
213.
▲
by
akdev1l
1y ago
I disagree with your premise that 3 years ago “people” knew about hallucinations or that these models shouldn’t be trusted. I would argue that today most people do not understand that and actually trust LLM output more on face value. Unless
214.
▲
by
akdev1l
1y ago
That’s not a typo. They’re complaining about Discourse. The signal forums that guy linked are from a Discourse instance/forum. Discourse is a platform to build forums. https://www.discourse.org/
215.
▲
by
akdev1l
1y ago
are you linking to the fact that “useradd” exists to prove your point…? Lmfaoooo I’m assuming you have actually never ran a linux on your desktop. Lmaooooo. Yeah sure init runs as root, and maybe you have background services that run as som
216.
▲
by
akdev1l
1y ago
The context is that on a traditional Linux laptop/desktop you are in fact running everything as one user. Firefox, the desktop environment, your password manager and even `sudo` are traditionally all running as your own user. This is n
217.
▲
by
akdev1l
1y ago
Android is not a single user system. Every app, every service basically everything gets its own user. Applications have different user IDs and different SELinux contexts. Android security is tight
218.
▲
by
akdev1l
1y ago
Why we don’t have t9 support on tv remotes??? I gotta aim and peck some bullshit or open up some app with a QR code instead. Give me T9
219.
▲
by
akdev1l
1y ago
> If they really wanted to, they would already have it. Enriched material was transported from these centers some time ago. … > 60% enrichment is not considered weapons-grade enrichment. So which is it? 1. They already have enriched u
220.
▲
by
akdev1l
1y ago
> Seriously, you never had to provide tech support to a parent, relative, or friend whose computer got totally fucked because they had root? Literally 0 here, have you really? Like I literally do not know anyone who is even using Linux t
221.
▲
by
akdev1l
1y ago
This is what peak innovation looks like
222.
▲
by
akdev1l
1y ago
Looks like you don’t have Fedora package either If I find time I could throw a spec file + ci/cd workflow to get you going that way too
223.
▲
by
akdev1l
1y ago
Also people found out and nothing happened? So literally no downside to putting a backdoor and lying about it
224.
▲
by
akdev1l
1y ago
I don’t think it’s necessarily a C++ thing If the post was about rust and it was using unsafe code and casting function pointers then everyone would quickly jump to try and correct it all the same
225.
▲
by
akdev1l
1y ago
I guess the point is that the articule does not prove what he did is better in any of the ways he claimed except for the “I understand it” part Making changes like this claiming it will result in faster code or more smaller code without any
226.
▲
by
akdev1l
1y ago
It’s not a warning, it’s a compile time error and I am not even using -Wall -Werror I also believe there are platforms where a function pointer and a data pointer are not the same but idk about such esoteric platforms first hand (seems Itan
227.
▲
by
akdev1l
1y ago
I think none of these points are demonstrated in the post hence I fail to visualize it Also I copy pasted the code from the post and I got this: test.cpp:70:14: error: assigning to 'void ' from 'func0Ptr' (aka 'voi
228.
▲
by
akdev1l
1y ago
I don’t really understand what problem this is trying to solve and how the solution is better than std::function. (I understand the issue with the crash reports and lambdas being anonymous classes but not sure how the solution improved on t
229.
▲
by
akdev1l
1y ago
I think technically those are targeted towards C++ but sure they probably work also It will likely have less packages than the other established ones though
230.
▲
by
akdev1l
1y ago
C the language doesn’t but if you’re truly writing a C program you’ll just default to using the platform’s package manager unless you have specific requirements So in that sense dnf/apt/zypper/pacman are all “C” package manag
231.
▲
by
akdev1l
1y ago
> it’ll compile a binary for your system too (assuming static linking I guess). I’ve tried as you said and I’ve found that this is not a good assumption to make glibc doesn’t support static linking so this is not working in the general c
232.
▲
by
akdev1l
1y ago
> Make is a good replacement for shell script. it’s not, you need to start thinking about .PHONY targets and other stuff quite quickly
233.
▲
by
akdev1l
1y ago
Do you think using `psql -c "SELECT 1"` is actually doing sql injection? Because yeah if your program provides “invoking the shell as a feature” then it sure as fuck needs to invoke the shell. I was just replying to this far-fetch
234.
▲
by
akdev1l
1y ago
Yes the user controls the path and in the example provided they could just call whatever command they want anyway This doesn’t give the attacker any access that they wouldn’t have. Also you can just clobber the “PATH” variable if it is so i
235.
▲
by
akdev1l
1y ago
There is literally no way Firefox could have fixed the entire OEM landscape. OEMs are not going to release the driver source code. They simply will not, at best they do random code dumps of whatever kernel version they were using at the tim
236.
▲
by
akdev1l
1y ago
Ironically, WhatsApp created their web client years later If the web client would have existed back then it might have helped
237.
▲
by
akdev1l
1y ago
Kind of the opposite, I think AWS was the first hyper scaler so tooling did not exist for many of these problems back then Like they have their own custom clustering software where you would probably use k8s if you were to rebuild things to
238.
▲
by
akdev1l
1y ago
Yes, in this specific use case you need a shell. But that’s the same as saying you technically need SQL injection so that `psql -c 'command'` can work > you cannot simulate all of this with command vector Uhh, yes we can just c
239.
▲
by
akdev1l
1y ago
> Note also that if you're using a deficient shell that supports neither `printf %q` nor `${var@Q}` it's still easy to do quoting in `sed`. GNU `./configure` scripts do this internally, including special-casing to only quo
240.
▲
by
akdev1l
1y ago
At Amazon scale mostly everything is custom Less puppet/chef
More ›