andix

39 ms·

811.
by andix 2y ago
If it was an old DOS/Windows laptop, you could just use INTERLNK via COM or parallel port. I have to post that, it's just such a nostalgic memory copying files like that. So if somebody needs to do it: Dosbox + USB-RS232 adapter a
812.
by andix 2y ago
Is there an expert statement somewhere, that analyses the similarity of the voices? Personally I can't really judge it, I can hear some similarities but also differences.
813.
by andix 2y ago
Its enough to be as good as a responsible human driver, but consistently. The AI is never going to be tired, distracted, angry, drunk, and so on. Drivers not bringing their A-game is probably the most common reason for accidents.
814.
by andix 2y ago
I would even claim it's a pretty good security boundary, good enough for most applications.
815.
by andix 2y ago
Where is the tooling to build and distribute lightweight vms like containers? How can I copy one html file into an nginx VM, built this vm image with multiple architectures (I have arm and x64 servers), publish it, pull it, and run it multi
816.
by andix 2y ago
What if you application is not just one binary. What if it's a pipeline of complex tasks, calls some python scripts, uses a patched version of some obscure library, ... It's not possible to package half a Linux distribution into a
817.
by andix 2y ago
If you run multiple instances of a container image, you get a reproducible environment. If you run a docker build multiple times, and copy a few files into the container, you get a reproducible container image. It is not a hash perfect dupl
818.
by andix 2y ago
I think containers are often misunderstood: The main benefit is not isolation and security, it's defined and reproducible environments and builds. If there is some additional isolation required, just run the container in a VM.
819.
by andix 2y ago
Cum-ex is about taxes (and criminal law). It's unrelated to the stability of banks.
820.
by andix 2y ago
Oh, now I get why you need those constants: var secondsPerWeek = Math.pow(2, SEVEN) * Math.pow(THREE, THREE) * Math.pow(FIVE, 2) * SEVEN
821.
by andix 2y ago
Nobody can tell if they are intentional or accidental.
822.
by andix 2y ago
They might not even use blackmail, they might just "help out" in a difficult financial situation. Some people are in severe debt, have a gambling problem, are addicted to expensive drugs, or might need a lot of money for a sick re
823.
by andix 2y ago
GPLv4? I doubt this would be a bigger success story than v3 and v2. Permissive licenses won the war against Copyleft a long time ago.
824.
by andix 2y ago
We know about the failed attempts, we have no idea about the successful ones, and the ones that are going to be successful in the future.
825.
by andix 2y ago
They would be really bad at their job, if they didn't try.
826.
by andix 2y ago
Sure, but being known for submitting bad code is going to make code reviews more thorough, not less. It's drawing additional attention to yourself.
827.
by andix 2y ago
One follow up to compromising existing maintainers: This makes the creators or long-term good faith maintainers maybe even more "dangerous" than new maintainers.
828.
by andix 2y ago
I don't think this is going to be a big issue. Those attacks have to be high-profile attacks. If you look at the xz backdoor, there was some top notch engineering behind it. If we ever reach a level of LLMs being able to do that, we do
829.
by andix 2y ago
That's great, but I think that's not enough. This would need to extend to crates.io, I'm sure there are some packages, that are very commonly used and not part of rust-lang.
830.
by andix 2y ago
I wanted to make a different point. If for example Google or Red Hat were deeply involved within the xz project, there might have been more people reviewing the code. The evil changes to xz were easy to overlook, but not impossible to notic
831.
by andix 2y ago
The crazy thing about the xz issue was, that xz is not even a dependency of openssh, but of systemd. And the xz backdoor exploited the systemd integration of openssh. This exploit was invisible to people that tested plain openssh without on
832.
by andix 2y ago
That's great that you are considering this more now. But the xy story taught us, that every contributor is dangerous, the most dangerous ones are probably the most helpful and most skilled contributors. If someone barely get's a P
833.
by andix 2y ago
Just for the main project, or for all/most packages on crates.io?
834.
by andix 2y ago
Maybe not so impossible. Start with making a list of projects that are everywhere. Inside every Linux distribution, inside every react/angular/vue/etc project, … Then check which companies support those projects with active d
835.
by andix 2y ago
Maybe we need a reporting system for maintainer changes of bigger projects. Some list where they get published and people can keep an eye on it. Those changes of maintainers need to be synced to package distribution sites like npm.js or Deb
836.
by andix 2y ago
Tell me I’m getting old without telling me I’m getting old. Thanks! ;)
837.
by andix 3y ago
This startled me too in the beginning. I was expecting something built in, pre-wired to one of the commercial cdn/reverse proxy offerings (like cloudfront or Azure CDN). But honestly I think the big cloud providers don’t want their kub
838.
by andix 3y ago
Thanks, now I get what you mean. I’ve always called that a kubernetes distribution. Plain kubernetes is as useless as a plain Linux kernel without a userland around it, and normally you don’t want to build a kubernetes or Linux distribution
839.
by andix 3y ago
Could you maybe elaborate on what you consider an opinionated kubernetes deployment? Are there some open source projects you find promising?
840.
by andix 3y ago
Yes, they are, but that's not related to the version number. Things like that also happened before on a smaller scale with windows 10 updates.

More ›