antocv

40 ms·

331.
by antocv 10y ago
They dont boot a "complete OS", they boot the kernel and a process - that is it, not your systemd which brings in Firefox kind of "complete OS".
332.
by antocv 10y ago
How has the guest kernel been optimized? Just recompiled vanilla kernel and stripped all unnecessary parts? What do you use for storage, how is the hosts storage accessed from the guest-container? virtfs? Doesnt that add a bottleneck/p
333.
by antocv 10y ago
That is Dockers problem, they even want to be on Windows, I mean come on. But thats docker the company for you.
334.
by antocv 10y ago
Aliasing the sudo command? Are you serious? I dont even have sudo, let alone if I had it, I wouldnt use its dumb caching of credentials/session or "ask no password" "feature". Just because my system is single-user d
335.
by antocv 10y ago
It is a social problem, there is a saying, "Humans are like pigeons, alone and in small groups they are elegant and nice, together in large group they are obnoxious and leave huge piles of corroding shit".
336.
by antocv 10y ago
Install cyanogenmod, do not install any google apps or "pay services", use f-droid. Use webapps, a browser to sandbox better websites. Phone is marvelous now.
337.
by antocv 10y ago
Indeed. al Assads next interview "Sure, I did not win the vote, but this is not a direct democracy, the presidential ballot is mere a poll". Direct democracy for export to some (exclude Saudi), power for others. All this Brexit ev
338.
by antocv 10y ago
Someone should send a memo Bashar al Assad that "dire consequences" are a valid reason to postpone democracy. In fact, democracy seems to be reserved only for use by western NATO powers, even when not respecting a democratic vote,
339.
by antocv 10y ago
This, this is the real golden solution. Thank you for your work and links, so full of information, golden, golden!
340.
by antocv 10y ago
Wow, that is informative, did not know. Thanks to you, and others!
341.
by antocv 10y ago
Well, you are wrong the man page is correct. It is not a snapshot of a directory, if you want that use btrfs snapshot support, or use tar and gzip or duplicity. A commit records changes to a repository, which can be changes to only a file a
342.
by antocv 10y ago
So this seems to be the old "local user www-data makes a symlink in /var/log/nginx/access.log pointing to /sbin/give_me_root_on_open_by_root.sh" and nginx when it starts up is running as root and open
343.
by antocv 10y ago
> You will need to let Sandstorm start as root Joke of today, thanks for the laugh.
344.
by antocv 10y ago
> That's the way nginx is traditionally installed No. That is not how nginx is traditionally installed. You misunderstand basic Linux package management and build systems, which is why you end up in this mess. But thats okay, world
345.
by antocv 10y ago
It was badly written, it was checking /etc/lsb-release instead of actually checking for that feature, and I hope you dont rely today on /proc/config for "checking for the feature" since /proc/config i
346.
by antocv 10y ago
With many ~/development folders on various containers organized by "tag" and a ~/projects folder, a top-level todo.txt, and a todo.txt in each ~/development/project_name, with vim and ssh. Just use ssh + vim +
347.
by antocv 10y ago
> Our installer is capable of automatically installing dependencies on current versions of So you dirty the system where its supposed to be installed, a server, with gcc, make and friends? > . If you're running something else it
348.
by antocv 10y ago
Sure, so make it clear what curl | bash is, tell your users "we dont have any packages for your system, here is the source and we use X build tool, please do ./configure && make install, or cmake or whatever", that wo
349.
by antocv 10y ago
>Almost no one actually audits the source they download before they run it, Thats not the security issue here, its effectively running build-time logic during install-time, on every bodies machine at every install, instead of at package
350.
by antocv 10y ago
It doesnt ever work. Ive yet to see a "curl https://thisshit.net/trust/us/really/we/have/https | bash" script which didnt fail for whatever dumb reason, such as only working on specific va
351.
by antocv 10y ago
You said it mon, "curious".
352.
by antocv 10y ago
Theoretically, no. LXC or docker will not help against this. Not even against this particular exploit seen in the wild, but that could be mitigated with lxc (maybe docker), partically lxc.container.conf you can set seccomp to drop ptrace sy
353.
by antocv 10y ago
This is the time to get to know https://mail.yandex.com Seriously, the interface is so much better than todays gmail, its astonishing. There is no spam either, and no ads.
354.
by antocv 10y ago
> and more about how to make sure data is useless outside of its domain. This explains why most enterprise applications and platforms are a nightmare to work with. This class is called "UserView" oh but you see comrade it actua
355.
by antocv 10y ago
Oh that is nice, was not the case last time I checked duck. Still, duckduckgo is an US company, better stay away from those given the history of last decade.
356.
by antocv 10y ago
There cant be. People/powers-to-be would fuck it up, there would be "copyrighted material" and eventually it would be declared an illegal activity. Only companies such as Google and Facebook prevail not due to technical reaso
357.
by antocv 10y ago
Yandex is pretty good, they have search and a better mail than gmail, just try it out, you will be surprised. I was. There was NO ads! You can actually read your email - and NO ads! That is amazing!
358.
by antocv 10y ago
Bing is still using Google as its backend. www.yandex.com is a really good alternative, I found it even offers better search results for most topic I look at.
359.
by antocv 10y ago
Ill jump on the top post for now, and recommend everyone to use Yandex Search. Yes that is right. Not duckduckgo, because that one is anyway using Google in its backend. Yandex is surprisingly good, take some time to try it out, whenever yo
360.
by antocv 10y ago
Ridiculous. Try using www.yandex.com as your search engine, it is surprisingly good, and has less ads disguised as "search results" and results from blog-spam sites and such nonsense.

More ›