aseipp

70 ms·

721.
by aseipp 5y ago
That doesn't protect any active sessions; if you assume the attacker is capable of exploiting the browser, then they can just exfiltrate an active session for the user for any domain and bypass the login mechanism entirely. Done. This
722.
by aseipp 5y ago
Security theatre. If your browser is attacked by an 0day of any sort, or malware or whatever, it will have access to the shared credentials and information inside your browser. This means any and all cookies, shared logins, account access,
723.
by aseipp 5y ago
> This is probably mostly useful when downloading many small images. It's useful for much more than that; I'd actually argue stream multiplexing is most useful outside of the browser in bespoke HTTP APIs, because that's
724.
by aseipp 5y ago
A big thing is that you may be using HTTP/2 or HTTP/3 already if you use something that terminates HTTP for you. This doesn't have to be Cloudflare or whatever; if you run Nginx in front of your Rails server, you can just hav
725.
by aseipp 5y ago
You can download some generic specs from Synopsys under an "open source license agreement" (hah) for various things including SDC and Liberty.[1] I think it even comes with a generic set of tcl definitions for things like set_fals
726.
by aseipp 5y ago
In-memory data stores still typically have a concept of "durability" which you can think of as "the same transaction is committed on all servers in {some definition of a replica group}." So like any disk backed store, al
727.
by aseipp 5y ago
Yes they do, because very rarely would such a healthcheck kind of setup actually work in practice, at a large enough size, for a user-facing dashboard. If you want a healthcheck, look at a Grafana dashboard, not a status page. By the way, I
728.
by aseipp 5y ago
Well articulated, even if "design an appropriate IR for your target" is a bit of an old hat to more experienced compiler devs, it's good reading to point people to. I particularly liked the bit about structured control flow f
729.
by aseipp 5y ago
This isn't a memory tagging system at all and has capabilities far beyond that (pun intended), so I don't know why whatever other approaches like MTE are out in the wild are relevant.
730.
by aseipp 5y ago
I'm not sure you can trivially "dropbox" TLS because unlike dropbox, every application you use TLS certificates with needs to be aware of how to load and find and (potentially) acquire/renew them in the first place. Unle
731.
by aseipp 5y ago
It's not just Linux capabilities; on their own Linux capabilities actually suck majorly and are very limited (AKA "crapabilities"). But systemd also makes extensive usage of cgroups and namespacing facilities to back it up e.
732.
by aseipp 5y ago
Yeah, but... The noise! I just can't handle spinning rust anymore for this alone even if the $/GB ratio is still so much better. Consumer SATA SSDs are plentiful enough that I'm just going all in on flash when I revamp my ser
733.
by aseipp 5y ago
Isocline, a readline alternative by Daan Leijen (an absolute legend) is about the closest I've found to this: https://github.com/daanx/isocline That said it doesn't push "input controls" quite to th
734.
by aseipp 5y ago
Well, you can use strong types that separate e.g. String/SQLQuery/XMLBlob from one another, and then have very narrow conversion routines that are heavily audited to handle them safely. You can then use type directed programming t
735.
by aseipp 5y ago
It's so funny that if you say that actually the GPL is good because random corporations can't freely utilize it with zero consequence and make money off your labor, you'll get a bunch of bedbugs come out of nowhere saying uhh
736.
by aseipp 5y ago
Yes, it's a relatively recent innovation, but it's pretty awesome. Symbol server has always been one of the things I actually liked about Windows development, which didn't require installing debug packages for every DLL befo
737.
by aseipp 5y ago
Yeah, the bowl shape is absolutely the missing piece on my Moonlander. It is otherwise perfect in nearly every other way, and the flexibility from QMK is unmatched. But I don't know how you can reconcile it with its low profile; the Mo
738.
by aseipp 5y ago
> There's a deep and misplaced sense of entitlement here. No there isn't. > She suggests $20K may work but that is the moment to say what she thinks is fair or what would have been worth her time Actually the "right tim
739.
by aseipp 5y ago
Doesn't matter. She has the needed skills, she gets to set the terms completely. "I want X to happen" and X doesn't happen? No deal. Pretty straightforward. I read all the chat logs and I can say she was much nicer than
740.
by aseipp 5y ago
There are no latency numbers to be seen anywhere unless I missed them. If the difference in latency between RAM/disk isn't noticeable in these workloads because you have enough slack in the system, the distinction doesn't rea
741.
by aseipp 5y ago
These particular extensions come across as "long-tail" things that are probably worth standardizing, IMO. Not every core needs cryptographic acceleration, but the ones that do need it tend to really need it for those cases. Simi
742.
by aseipp 5y ago
For error messages I think you're ultimately a bit cornered. Even typed languages have serious problems with straightforward and reliable errors, everything else aside. The ones that do tend to have to make careful tradeoffs in the sys
743.
by aseipp 5y ago
A sibling comment (from an engineer at GH) has given some insight: https://github.com/github/feedback/discussions/8149#discussi... They have error monitoring, but download URLs are one thing that's trick
744.
by aseipp 5y ago
They don't let you perform sandbox escapes but that doesn't necessarily matter if all of the important data is inside the sandbox, and it has enough capabilities to meaningfully exfiltrate. seccomp has this problem in spades; most
745.
by aseipp 5y ago
Every branch in PlanetScale has its own separate MySQL connection credentials first off (and conceptually just looks like a separate DB), so no. You'll be using your main production database as usual, and you'll have separate cred
746.
by aseipp 5y ago
Basically every ex-SA user I know of describes it as simply as "He's treated like a piece of dirt, because that's what he is." In their words SA largely became successful in spite of Lowtax, not because of him, and this
747.
by aseipp 5y ago
As long as the drivers are portable wrt the platform specifics (endian-ness, memory model) then yes, it "should" work. However there's a lot more varied use cases; for instance when you boot your PC straight into UEFI, the UE
748.
by aseipp 5y ago
The context of the thread here wasn't about people with different visual abilities or anything complaining about the fact they're being left behind by Twitter's UX team, it was literally someone asking "Why do you think
749.
by aseipp 5y ago
I ended up going with the NZXT H1 for my mITX case, and while it has had issues I had to fix, I'm finally happy with it I guess. My competitor was the the Fractal Design 7 Compact had I gone ATX, so if you're diehard about this I&
750.
by aseipp 5y ago
> While it's morbid to consider the idea of just letting yourself die because you don't want to go into debt, it still is a choice... isn't it? No. I'm glad I could clear up this very difficult topic for you.

More ›