arghwhat

7 ms·

61.
by arghwhat 8mo ago
If you believe TLS is more fragile than PGP and plain HTTP, then I have reason to believe you have never looked at any of those wire protocols/file formats and the logic required. Adding TLS in front of HTTP when talking to an untruste
62.
by arghwhat 8mo ago
This statement makes no sense, TLS is a complicated protocol with implementations having had massive fun and quite public security issues, while HTTPS means you have both and need to deal with a TLS server feeing you malicious HTTP respon
63.
by arghwhat 8mo ago
You seem to have forgotten all the critical TLS bugs we had. Heartbleed ring a bell? > An attacker doesn't get to attack client's HTTP stack without first piercing protection offered by TLS. You misunderstand: this means more a
64.
by arghwhat 8mo ago
> you're also trusting that the client's HTTP stack is parsing HTTP content correctly This is an improvement: HTTP/1.1 alone is a trivial protocol, whereas the alternative is trusting the client's much more complicate
65.
by arghwhat 8mo ago
> Potentially it's even a way for a MITM to exploit the HTTP stack, some content parser or the application's own handling. TLS stacks are a significantly harder target in comparison. For signed payloads there is no difference,
66.
by arghwhat 8mo ago
They usually support both, but important to note that HTTPS is only used for privacy. Package managers generally enforce authenticity through signed indexes and (directly or indirectly) signed packages, although be skeptical when dealing wi
67.
by arghwhat 9mo ago
> Some cancerous tumors produce this hormone; therefore, elevated levels measured when the patient is not pregnant may lead to a diagnosis of cancer and, if high enough, of paraneoplastic syndromes. It is unknown however whether this pro
68.
by arghwhat 9mo ago
> Insulin for example is the opposite. You're describing entirely orthogonal issues. In case of insulin resistance, your natural production is running full blast with demand exceeding supply because the consumer stopped caring abo
69.
by arghwhat 9mo ago
> Chemistry trumps psychology To nitpick: The mind is applied biochemistry. Psychology intervenes in the chemistry, like many other activities do. The goal of that is to solve the root cause so that your future levels will be maintained
70.
by arghwhat 9mo ago
I believe that is indeed what they meant. The perception of being given a remedy is very powerful indeed, especially for issues ultimately linked to the mind. That placebos can work should not be seen as undermining the severity or pain of
71.
by arghwhat 9mo ago
For reference, golang's mutex also spins by up to 4 times before parking the goroutine on a semaphore. A lot less than the 40 times in the webkit blogpost, but I would definitely consider spinning an appropriate amount before sleepin
72.
by arghwhat 9mo ago
Nothing related to the attachment point. I don't know of any third-party AirTag-compatible trackers that have UWB right now, but this applies equally to tags that are much larger than the AirTag. The rest is identical - good battery li
73.
by arghwhat 9mo ago
From an exercise standpoint, sure, but with sports there is more to it than just maximizing exercise. If you practice judo you're definitely exercising but the goal is defeating your opponent. When biking or running you're definit
74.
by arghwhat 9mo ago
There are third-party tags out there compatible with both Google and Apple's network that is roughly the same size and use the same battery, yet have a giant lanyard opening in the design to fit anything. Apple could trivially have f
75.
by arghwhat 9mo ago
I do appreciate the visual of driving a forklift into the gym. The activity would train something , but it sure wouldn't be your ability to lift.
76.
by arghwhat 9mo ago
Dynamic libraries have been frowned upon since their inception as being a terrible solution to a non-existent problem, generally amplifying binary sizes and harming performance. Some fun quotes of quite notable characters on the matter here
77.
by arghwhat 9mo ago
> And once you're banned you cant [..] make a data request glares in GDPR
78.
by arghwhat 9mo ago
> The C language also does not specify a linked list. Go tell your developer friends that C can never use a linked list. They would not blink because the statement is accurate. To the C language and to the C compiler, there are no linked
79.
by arghwhat 9mo ago
I must admit that the ability to randomly bind on top of your "drivers" to arbitrarily overwrite functionality, whether to VPN somewhere by binding a target machine's network files, or how rio's windows were merely &#x2F
80.
by arghwhat 9mo ago
This is actually quite an interesting topic in its own right, but not quite the discussion above, which is about whether C or Rust include a GC or is considered to "use" the GC you hand-rolled or pulled in from a library. I wouldn
81.
by arghwhat 9mo ago
Indeed, you can disregard plan9 common practice and adopt the ioctl pattern, but then you just created ioctl under a different name, having gained nothing over it. You will still have the significant context switching overhead, and you will
82.
by arghwhat 9mo ago
This feels like it's into trolling, so one last round: The C language does not use your C code, it is your C code that uses the C language. The tools available to C is what the language specification dictated and what the compiler impl
83.
by arghwhat 9mo ago
They are very different. ioctl's on a file take an operation and arguments that are often userspace pointers as the kernel can freely access any process's memory space. ctl files on the other hand are merely human-readable strings
84.
by arghwhat 9mo ago
> Absolutely, C also can use a garbage collector. It is not C using the garbage collector - it is you writing a garbage collector in C. The application or library code you develop with the language is not itself a feature of the language
85.
by arghwhat 9mo ago
Rust does not have a garbage collector in any way or form. It's just automatic memory like we're used to (e.g., stack in C++), with the compiler injecting free/drop when an object goes out of scope. What Rust brings is owners
86.
by arghwhat 9mo ago
> The best apis are those that are hated by the developer and loved by the end users. No, just those loved by the API consumer. Negative emotions on one end doens't do anything positive. In the case of plan9, not everything can be
87.
by arghwhat 9mo ago
> I don't often do this You should have practiced better restraint then, as this was not a productive addition to the discussion. My experience disagrees with your opinion and I see no value in engaging further.
88.
by arghwhat 9mo ago
I wouldn't consider implementing a B-tree in C any more "arduous" than implementing any other notable container/algorithm in C, nor would making a library be "brutal" as moving data really isn't an issue.
89.
by arghwhat 9mo ago
Not really, especially as garbage collection doesn't achieve memory safety. Safety-wise, it only helps avoid UAF due to lifecycle errors. Garbage collection is primarily just a way to handle non-trivial object lifecycles without manu
90.
by arghwhat 9mo ago
> For years I thought they'd "damage" my system... Well, would you argue that the office apps you installed from them didn't cause you damage, physically or emotionally?

More ›