bkallus

8 ms·

31.
by bkallus 3y ago
Except the RFCs are not the only URL standards. Browsers all implement the WHATWG living standard, which is subtly incompatible with the RFCs.
32.
by bkallus 3y ago
Assuming that the script you download is the same as the script that curl|bash downloads. https://web.archive.org/web/20231128113854/https://www.idont...
33.
by bkallus 3y ago
AT&T was doing this in 2021. They called it "DNS Error Assist." I imagine they're still doing it.
34.
by bkallus 3y ago
I went to a conference at GE Research where I spoke to some QNX reps from Blackberry for a while. Seemed like they were hinting that some embedded computers in some of GE'S aerospace and energy stuff relies on QNX.
35.
by bkallus 3y ago
I've only recently had to start using BSD, and FreeBSD is definitely easier to get started with. Anecdote: I found a null pointer dereference in the OpenBSD httpd last week that allows an attacker to crash the server with a single craf
36.
by bkallus 3y ago
I care very much about privacy. I use only free and open source software on my personal and work computers, as well as my phone and router. I do not use social media, except for this site. I do not connect anything to my network that I do n
37.
by bkallus 3y ago
Curious to hear your objections to the black box. Black box data (speed, steering+pedal input logs) were invaluable in determining fault in an accident involving one of my family members recently. As long as the data doesn't leave the
38.
by bkallus 3y ago
except (Error1, Error2) as e still works in python3.
39.
by bkallus 3y ago
C makes it too inconvenient to pull in 300 dependencies. I think the recipe for dependency hell is insufficient stdlib + decent included package manager.
40.
by bkallus 3y ago
In Alacritty, ctrl-l clears the screen but does not clear the scrollback buffer. Clear also clears the scrollback buffer. This is useful for running programs with lots of output containing escape codes that may get mangled by less; just run
41.
by bkallus 3y ago
The biggest one is the Firefox ESR build from the pmOS repos with the custom userChrome.css that tries to fit everything onto the Pinephone's screen. I pretty consistently encountered pop-up prompts (for example, in the built-in passwo
42.
by bkallus 3y ago
In the past year, I have used a pinephone+keyboard with Arch, a oneplus 6t with postmarketOS, and a pixel 7a with GrapheneOS. In my opinion, Graphene is significantly easier to daily drive because the applications are designed for a phone&#
43.
by bkallus 3y ago
I had the privilege of reporting a few bugs in HAProxy in the last few months. Willy's a real treasure; he's friendly and knowledgeable, and he clearly cares a ton about HAProxy even after 22 years of development.
44.
by bkallus 3y ago
What stops you from desoldering the bad connector and soldering on a new one?
45.
by bkallus 3y ago
Definitely still a day job for some people. These DARPA and IARPA programs all have a decompilation component: 1. https://www.darpa.mil/program/assured-micropatching 2. https://www.iarpa.gov/newsroom&#x
46.
by bkallus 3y ago
Android updates often do not come with kernel updates. Major kernel updates are difficult because of the tangle of proprietary modules in most Android kernels. To partially answer GP's question: Unofficial major kernel updates have hap
47.
by bkallus 3y ago
RFC 3986 provides a generic URI grammar that is not scheme-specific, though other standards that define URL schemes may choose to subset the subset that grammar as they see fit. If a URL parser does not recognize a scheme, I would expect it
48.
by bkallus 3y ago
A student and I have been using coverage-guided grammar-aware differential fuzzing to discover bugs in URL parsers for a while now. There is extreme variation in this space; it's trivial to turn up meaningful bugs in widely-used URL pa
49.
by bkallus 3y ago
I do :) Until recently, LiteSpeed parsed Content-Length values using strtoll in the base-0 mode. Thus, by sending Content-Length values prefixed with 0, you can get it to interpret the value in base-8. Most HTTP proxy servers strip leading
50.
by bkallus 3y ago
The CVE system is all kinds of messed up. We need (at least) - A clear policy from the CNAs that describes exactly which bugs should be assigned CVEs. - A process by which bogus CVEs can be invalidated, and CVE spammers can be banned from f
51.
by bkallus 3y ago
This works only for programs that are publicly available.
52.
by bkallus 3y ago
I switched my 2012 thinkpad from dwm+st to sway+alacritty a couple years ago and noticed no difference in input latency.
53.
by bkallus 3y ago
I'm also in the New England area. In Boston, there's LibrePlanet, which is in March. I went for the first time this year; it was a lot of fun. I'm still trying to figure out if I'll fly out to Columbus for OLF this year.
54.
by bkallus 3y ago
Functional languages support this type of operation in a few different ways. One is through constructs like Clojure's `take-while`. Instead of setting a vairable when you want to exit the loop, you define a predicate that is false when
55.
by bkallus 3y ago
Dang; I found and reported this vulnerability on June 5 (after this report was made, but before it was made public or patched), and was told that they were already aware of the bug and working on a fix. I didn't realize I'd been b
56.
by bkallus 3y ago
Taking a course in abstract algebra is a good first step. A first course in abstract algebra is supposed to introduce you to groups and rings, so you won't be out of place. You might also consider taking a proof-based course in linear
57.
by bkallus 3y ago
This is good advice in general, but the Asus screenpad does work in Linux and it's extremely cool. Shows up just like a normal display!
58.
by bkallus 3y ago
Arch. I have hplip installed as well, and I'm not sure if that's necessary or not.
59.
by bkallus 3y ago
I use a LaserJet 1012 that was thrown out at a local law firm. It's almost 20 years old, and still prints great. I used it through high school, college, and now grad school, and haven't once changed the toner. It's plug and p
60.
by bkallus 3y ago
It is. The cardinality of the power set of a set S is 2^|S|.

More ›