anaphor

36 ms·

331.
Capability Myths Demolished [pdf](srl.cs.jhu.edu)
1 points by anaphor 7y ago|0 comments
332.
by anaphor 7y ago
I think the difference is just that seccomp/eBPF is lower level and more powerful in terms of what it can do. So pledge gives you a simpler interface to manage things, whereas with eBPF you have much more flexibility (since you're
333.
by anaphor 7y ago
seccomp and eBPF will let you build something like this but it does not do the same thing as pledge.
334.
by anaphor 7y ago
https://man.openbsd.org/pledge.2 is also pretty damn cool. It effectively lets you make your program use a least authority model of execution, and then you can grant it the capabilities it actually needs to run. I would lov
335.
by anaphor 7y ago
By "OTP-like" library, do you mean basically supervision trees and things like that? I think one of the issues Pykka (not sure about Thespian) would run into is that they're using python threads as one of the backends, and I
336.
by anaphor 7y ago
Check out https://www.pykka.org/en/latest/ as well which is based on the actor model. My understanding is that it's used by https://www.mopidy.com/ and actively developed by them.
337.
TLA+(github.com)
1 points by anaphor 7y ago|0 comments
338.
The Actor Model (everything you wanted to know, but were afraid to ask)(channel9.msdn.com)
3 points by anaphor 7y ago|0 comments
339.
ACLs Don't [pdf](waterken.sourceforge.net)
1 points by anaphor 7y ago|0 comments
340.
by anaphor 7y ago
I think another way might be to have a set of file descriptors you know correspond to safe paths before doing anything, as you say (they could be dirfds which let you traverse downwards). Then when the `docker cp` command is executed, it do
341.
by anaphor 7y ago
https://github.com/google/capsicum-linux would basically render this entire class of bug impossible if used correctly. It would probably require a redesign of how docker interacts with the host filesystem though, and o
342.
by anaphor 7y ago
So maybe what's really needed is an editor plugin for GraphQL that lets you auto-rewrite queries, or if the queries are generated by a library, then that library should do it.
343.
by anaphor 7y ago
Yeah that's true, and now that you mention it, maybe patch theory could help (in the sense of Pijul, Darcs, etc) Though I don't know how much effort I would spend on trying to make this work.
344.
Steve Wozniak's Surprise Tribute to Ted Nelson, 2014(youtube.com)
3 points by anaphor 7y ago|0 comments
345.
by anaphor 7y ago
They should look into whether they can base it on object capabilities, if they haven't already done that. I think things like sandstorm.io (and others, see: https://github.com/dckc/awesome-ocap ) are the future of
346.
by anaphor 7y ago
Basically you would have to prove that your rewrites are confluent in the sense of a term-rewriting system[1]. I'm not sure if the project here gives you any help in doing that, but it would be pretty cool if you could somehow prove th
347.
by anaphor 7y ago
On Linux you can just ignore the intel-ucode package (or whatever it's called) and not update your CPU microcode. BUT, I think they also have mitigations in the kernel, so you would have to not update your kernel, or somehow remove the
348.
by anaphor 7y ago
If you're interested in E and Object Capabilities (ocaps) in general, I highly recommend reading this essay: https://web.archive.org/web/20190423063056/http://habitatchr... I found it really enlig
349.
by anaphor 7y ago
If you can get this to work with the Gecko driver that would be fantastic. I initially tried using Gecko and ran into some difficult to debug issues, but it might be possible now.
350.
by anaphor 7y ago
There should be a fix for this released soon. Thanks for trying it out! I believe it is a race condition which wasn't handled in the most elegant way.
351.
by anaphor 7y ago
Sounds like you're trying to run it from source? If so the steps would be: 1) virtualenv -p $(which python3) ./venv 2) source ./venv/bin/activate 3) pip install -r requirements.txt Then you should be able to run it,
352.
by anaphor 7y ago
It's similar to https://nixos.org/ but instead of using the Nix language, it uses GNU Guile to configure everything (Scheme). I think they actually were inspired to create it by NixOS. So to answer your question, it&#x
353.
by anaphor 7y ago
I'm working on fixing that, however it's a bit tricky because Facebook does some very weird things with Javascript that seem to interfere with Selenium. In particular, the only way I could get it to actually focus on the "D
354.
by anaphor 7y ago
Great idea. I had also thought of adding a feature to unfollow/unlike pages, but haven't had much time yet to work on it.
355.
by anaphor 7y ago
Thanks! I just added a note to the README mentioning it. I'm not sure how I forgot it.
356.
DeleteFB: Selenium script to delete all of your Facebook wall posts(github.com)
1067 points by anaphor 7y ago|265 comments
357.
by anaphor 7y ago
That's true, behind the scenes they can be running on multiple CPUs, which is the definition of parallelism. I think threads are a bad abstraction for doing parallelism personally, though. Programs designed to run in parallel should be
358.
by anaphor 7y ago
I think he's saying that they allow you to do concurrency, but not parallelism. Those are two different things.
359.
Stand up against the stand-up(techcrunch.com)
4 points by anaphor 7y ago|1 comments
360.
by anaphor 7y ago
I'm considering building a registry (manually to start with) using https://tahoe-lafs.org/trac/tahoe-lafs as a PoC to see if it could work. If it does, then that gets you verifiability, immutability, as well as th

More ›