berdario

47 ms·

421.
by berdario 11y ago
That assumes that you verify the contents of EVERY commit since the last tag, when you sign a new tag. NO ONE i know does this. Conversely, everyone expects to be held, and hold others, accountable for the contents of their commits. We don&
422.
by berdario 11y ago
> Getting an interview is not all that hard these days, you can get an interview with google/facebook ect pretty easily. Maybe... I got contacted by 2 google recruiters in 2 separate instances. I replied to them, but I never heard b
423.
by berdario 11y ago
I also think that Nix/Guix are the way forward... Guix really needs an installer/Linux package, though Just yesterday I added a few tasks to the ansible playbook for my workstation to automate its installation: https://
424.
by berdario 11y ago
I think that something similar is also done by the Chicken Scheme folks: http://wiki.call-cc.org/eggref/4/salmonella#introduction http://tests.call-cc.org/
425.
by berdario 11y ago
I'm not a frontend developer but... is it still truly necessary to transpile stuff like for-of ? It's supported by every desktop browser on the market, modulo some bugs (like inability to iterate over HTMLCollection and co. on Chr
426.
by berdario 11y ago
You can use gpg on windows or macosx as well to verify the signed hashes. As linked in the blog post in my other comment, tails explains things quite well: https://tails.boum.org/download/index.en.html#verify
427.
by berdario 11y ago
They provide gpg signed sha hashes, it's apparently just not documented: https://micahflee.com/2016/02/backdoored-linux-mint-and-the-...
428.
by berdario 11y ago
I thought about this issue some time ago: http://security.stackexchange.com/questions/109026/security-... I agree that there's a distinction to be made between core/base and user-applications/ports
429.
by berdario 11y ago
Rather than jumping the gun, it'd be better to assume good faith/do a bit of research > "An encrypted copy of your forums password" Likely is just a non-technical wording for "Your salted and hashed passwords&quo
430.
by berdario 11y ago
I read some time ago that ZFS is definitely NOT the right tool for laptop/external storage, unless you actually have a zpool with mirroring/raidz (which means you have to always keep the devices connected). The reason is that when
431.
by berdario 11y ago
There're obviously fewer segfaults/memory access vulnerability in software yet-to-be-written in any sane language.
432.
by berdario 11y ago
Ansible and my own python script. I use ansible, to template my gitconfig for different unix machines, and to install software that might be referenced in a dotfile https://github.com/berdario/dotfiles/blob/ma
433.
by berdario 11y ago
This is the crux of the issue. Gmail itself is unusable on Android + Firefox. When using an alternative browser you'll also stumble in problems with plenty of Android apps: Slack, Citymapper, etc... (when opening a web page intent, the
434.
by berdario 11y ago
> That being said, Facebook does let you chat via Jabber. Facebook planned to shut down that service since 2015/04/30, and in my experience they actually did it around 2015/07/12 I'm puzzled as how you haven&#x27
435.
by berdario 11y ago
plenty of things can go wrong, since you have control of how many and which variables to interpolate, e.g: i"SELECT {settings.SECRET_KEY};" PS: (I don't know why but HN is not updating the page with the reply links n
436.
by berdario 11y ago
I'd strongly prefer to focus on honoring the memory of Ian, but... while googling, I found this page: (warning, it's a 4chan thread, overflowing with hateful comments) https://archive.is/2Cdj1 In there, horrible p
437.
by berdario 11y ago
It seems weird to me that the first byte for index.htm i the many-files test arrives at 0.175s while for the packaged-files test it arrives at 0.092s Since it's the first request, there're no concurrent requests in the view. Maybe
438.
by berdario 11y ago
It's not just you. It's basically unreadable on Firefox on Android (and what's worse... the page prevent arbitrary zooming, unless you "request the Desktop page"). It's depressing how a supposedly well-designed
439.
by berdario 11y ago
I noticed that, but he's doing a single REST query for every timing: https://github.com/jhb/neo4j-experiements/blob/master/query_... There's no way that a single HTTP request is responsible for
440.
by berdario 11y ago
I was also wondering about the same thing: Implementing a graph on top of a RDBMS is trivial, and if the semantics are correct (the same as the ones exposed by a graph db?), then I'm not sure why would people want to use a proper graph
441.
by berdario 11y ago
That era is over since 2010 at least. http://teleread.com/ebooks/amazon-removes-incest-related-ero... Color me cynical, but I don't have the slightest faith in a corporation's fairness and integrity.
442.
by berdario 11y ago
It's very common for linux applications to store stuff in $XDG_DATA_HOME (~/.local/share by default) (config files and caches go somewhere else) In my ~/.local I also have a bin/ directory (created by some Haskell t
443.
by berdario 11y ago
It's also possible (and quite likely) the the faulty ad wouldn't cause exactly the same problems on other websites, due to the way in which it'll interact with the page, the size of the viewport of the browser, etc.etc.
444.
by berdario 11y ago
That only works with direct messages. Spammers have upped their ante, and they are now sending spam by adding you to group messages which (when I looked it up) don't allow you to report them as spammer (you can still block them, but th
445.
by berdario 11y ago
Yup... my comment about "detracting from the point" was about such an important semantic change to slip through unnoticed. (not about the points delivered in the talk itself or anything) There's nothing wrong with if/els
446.
by berdario 11y ago
if color.saturation > .5: print("bright!") elif color.luminosity > .5: print("light!") it's an `elif`... it will never print both "bright" and "light" This kind of
447.
by berdario 11y ago
Actually, the nature of this vulnerability would prevent any attacks against docker >> The vulnerability does not enable the execution of arbitrary code but the exploit was able to inject a JavaScript payload into the local file conte
448.
by berdario 11y ago
Not only it's not well known, but it breaks them: some years ago I reported this issue on gitorious, which yielded an HTTP500 when the repository contained a signed commit: https://issues.gitorious.org/issues/193
449.
by berdario 11y ago
Well, as this submission demonstrates... you lose integrity and accountability (which you never had in the first place, if you don't sign your commits)
450.
by berdario 11y ago
Location: London Remote: I prefer onsite, but willing to consider it Willing to relocate: No Technologies: Haskell, Clojure, Python Email: berdario@gmail.com github: http://github.com/berdario In lieu of the CV (which I can

More ›