arccy

43 ms·

661.
by arccy 2y ago
oci is just the image spec. there's cri which describe a runtime api, but you still need an implementation for it, like containerd, cri-o, etc.
662.
by arccy 2y ago
as in windows is nice when you ignore the windows bits and run a linux vm (what WSL2 is).
663.
by arccy 2y ago
that's too much tech for a trust problem it can't solve. just use a TimeStamp Authority like https://freetsa.org/index_en.php or https://knowledge.digicert.com/general-information/rfc3161-c...
664.
by arccy 2y ago
sounds like a pretty sane thing to do: github protects the majority of their customers from instability caused by a few. unless you're a super important partner, the people on call might never have heard of your little app and just dec
665.
by arccy 2y ago
you also have to trawl through the flags to make sure it actually checks types, e.g. check_untyped_defs
666.
by arccy 2y ago
While it all falls under "security", it feels too confused in what it's trying to show. I think it focuses too much on the happy path of security, typically you'll want to focus on specific areas. For example, access to
667.
by arccy 2y ago
there's still a "bamboo ceiling"
668.
by arccy 2y ago
interoperability between vendors, so your business isn't stuck with a vendor who can raise prices because their SDKs are deeply embedded in your codebase, so open source libraries / products have a common point to hook into withou
669.
by arccy 2y ago
They support ingesting via otel (ie competing with other vendors for their customers) but won't support ingesting via their SDKs (they still try very hard to lock you in to their tooling).
670.
by arccy 2y ago
this is why Go is so great....
671.
by arccy 2y ago
depends on the city
672.
by arccy 2y ago
"every significant company"? i'd say most of them just use postgres or mysql and scale fine.
673.
by arccy 2y ago
if only everyone used my preferred set of tools (thunderbird + pgp)...
674.
by arccy 2y ago
if anything it's Apple / iOS that dumbs down users, Google / Android provide a perfectly fine file picker / file management app.
675.
by arccy 2y ago
so you pay them to abuse other people's privacy (how else did they train their ai) but don't want them to abuse yours...
676.
by arccy 2y ago
positive for users of spotify, relative higher cost for users of other streaming services, cementing spotify's market position.
677.
by arccy 2y ago
number of actual imports in code
678.
by arccy 2y ago
if you used to stumble across things like this on google, then google wasn't very good at being a targeted search engine. stumbling across things you didn't know you wanted to know is for discovery sites, aggregators, etc., not se
679.
by arccy 2y ago
concentrated solar uses steam
680.
by arccy 2y ago
this is just marketing spam for: install this plugin.
681.
by arccy 2y ago
presumably the QR code is just an ID and the actual counting is done on a server, so there's not much room for "replacement" qr codes
682.
by arccy 2y ago
go's MVS only means >=, capped at major version, selected from all declared versions (excluding external latest released). >= doesn't really mean anything below it will break
683.
by arccy 2y ago
I'd think logic bugs are the majority of CVEs, and rust doesn't magically make those go away
684.
by arccy 2y ago
and yet everyone recommends ssh keys over passwords. passkeys are just the ssh keys of the web
685.
by arccy 2y ago
Lua is nice but it being embedded in many different places means that there will often be environment specific context that's injected for you to interact with, but any editor tooling won't know what's injected
686.
by arccy 2y ago
"tamper" sounds much more involved than what they (their implementation) probably do: the proxy decodes the http request, potentially modifies it, and uses the decoded form to send a new request using their client, which only spea
687.
by arccy 2y ago
honeycomb "bubble up"
688.
by arccy 2y ago
until you wire up alerts, and auto remediation steps driven by alerts....
689.
by arccy 2y ago
what's bad about Resolve
690.
by arccy 2y ago
if you want to build a coherent storyline across multiple media releases, you have to be able to recognize mistakes/missteps and be able to disavow them from what future releases will build on top of

More ›