altfredd

10 ms·

61.
by altfredd 5y ago
> GOPATH and modules mean that the tooling has to handle two different cases... No, the main thing, that GOPATH meant, is that Google (and everyone else) had to make their Go libraries open-source — since entire logic of GOPATH revolves
62.
by altfredd 5y ago
> Not all webservers support/enable it Could you provide an example of server that does not? AFAIK, Range is supported by all major CDNs, so not supporting it in web server would be a death knell for it's real-world adoption.
63.
by altfredd 5y ago
This is a slippery slope fallacy. Your government has enough power to detain and execute you. Does that mean, that you should give them even more power? Even if one OS component (Google Services) is centrally controlled and can be used to a
64.
by altfredd 5y ago
This isn't about Google's control over OS. Of course, Google fully controls Android it, so they can compromise it anytime. But if such compromise gets detected, Google will lose trust. The move away from developer signing towards
65.
by altfredd 5y ago
> in theory, since Google controls the OS, it can also make it lie to you Google controls Android, but it does not control every other OS and every piece of hardware. If someone downloads an apk with their own custom Google Play client,
66.
by altfredd 6y ago
SQLite can promote connections, but it does not demote them back to read-only. As I understand, when a database connection is tainted by a single write, it's lock on SQLite file in promoted to write lock, which prevents other processes
67.
by altfredd 6y ago
> you can have any number of concurrent readers, but only a single writer Only if your readers and writers are cleanly segregated. Most languages and web frameworks don't have SQLite drivers out of box (or have extremely bad ones).
68.
by altfredd 6y ago
> you end up doing a lot of horizontal scaling to read block quotes what block quotes?
69.
by altfredd 6y ago
Linux entropy pool is designed to accept and mix different low-quality entropy sources and has explicit workarounds for problems like these. Systemd is literally the only software, that has this problem. I am not aware of any other software
70.
by altfredd 6y ago
It seems, that many RedHat developers have rather unique world views. When PulseAudio introduces random crackles and scratches in sound output, they claim, that I have a misbehaving sound card. It does not "misbehave", when I use
71.
by altfredd 6y ago
Orwell's book actually described 3 super-states, all of which share same ideology and, presumably, have their own "ministries of truth".
72.
by altfredd 6y ago
> Shouldn’t those offenders face jailtime instead of censorship when inciting violence? How can they face jail, if they are FBI operatives, acting on direct orders? I means, are we supposed to believe, that FBI — the same FBI that survei
73.
by altfredd 6y ago
In my experience, descriptions of the so-called "foot cannons" within Git are exaggerated by people, who don't understand Git and didn't use it much. It is virtually impossible to lose data, committed to Git. Between re
74.
by altfredd 6y ago
You have forgotten to type a handful of zeroes...
75.
by altfredd 6y ago
> What are the state-actor-level attack implications of this? Before this was revealed, a party that compromised (or was able to be issued) a certificate for a website could be reasonably likely to be detected and have that certificate r
76.
by altfredd 6y ago
> There is no intrinsic reason that "AJAX" apps need to be slow -- you can do a database roundtrip in less than 10ms. This is a wishful thinking. You can't expect consistent 10ms (or even 100ms) response times from network
77.
by altfredd 6y ago
> Which completely overlooks how bad search results were 20 years ago compared to now. Care to elaborate? Do you have examples of today's "good results" as opposite to "bad results" of old?
78.
by altfredd 6y ago
> It’s just that all the stories I’ve heard about Ransomware in the past ask for sums of at least $500, often much more. That's when they target corporations and governments. Such small amounts are nothing when those are concerned.
79.
by altfredd 6y ago
Sounds like CAs will be forced to keep shrinking cert length until everyone standardizes on 1 month. They no longer have any real power.
80.
by altfredd 6y ago
According to the article, Amnesty International assumes , that the Journalist in question was targeted by http-MITM attack. This assumptions nicely fits into popular "http is bad, https is good" narrative, but it is just a guess
81.
by altfredd 6y ago
If your primary use case is Linux, xpra is very good. Unlike RDP, xpra defaults to passing over individual windows — it acts as windows manager for it's own Xorg process on server. This can completely side-step the hassle of wrapping a
82.
by altfredd 6y ago
The actual alternative is PhantomReference, which exists since ancient times. Cleaner simply provides safe way to use PhantomReferences, which are rather tricky to use (by Java standards).
83.
by altfredd 6y ago
Impact of Android 10 on Termux usability is already old news. What worries me more is behaviour of Termux developers. They make dubious claims and effectively sabotage their own application (more on that below). The solution to Android 10 p
84.
by altfredd 6y ago
> If this flag is specified, the preadv2() system call will return instantly if it would... wait for a lock. Doesn't this sound a bit different from ordinary short reads? Receiving EAGAIN usually happens under fairly specific cond
85.
by altfredd 6y ago
> A search engine is optimizing for billions of queries. Most of which are on the long tail. Citation needed. As far as my personal observations go, Google is NOT optimized for long tail at all. It is always trying to return most popular
86.
by altfredd 7y ago
> there is no real-time dependency on online systems for use of physical currency You are underestimating degree of our reliance on banking. Stores, restaurants and repair shops don't have enormous vaults with cash — they store mone
87.
by altfredd 7y ago
No, Spectre is always about reading your own memory. Your link is about exploiting MDS aka Zombieload — a separate hyper-threading vulnerability, specific to Intel CPUs.
88.
by altfredd 7y ago
AMD does not "patch" Spectre. Spectre has to be patched by developers, who execute untrusted code within the trusted address space (e.g. browser and OS developers). I am taking AMD press release to mean, that this "attack&quo
89.
by altfredd 7y ago
> Do you know of an example of an attacker "easily demolishing" Cloudflare's free DDoS protection I can name dozens of websites, that folded under Cloudflare's supposedly flawless DDoS protection (at the time when the
90.
by altfredd 7y ago
> why are relational databases not able to tell you how many rows are in a table without a full table scan This is unrelated to database being relational or not. Any mutable database will have hard time with that challenge. Can you remem

More ›