btrask

17 ms·

121.
by btrask 9y ago
Thanks. Yes, I understand. But if you started with (e.g.) Linux, and turned off all of the compile-time features that you could, isn't the end result very similar? Say you run your application as PID 1, etc., etc. My point is that a fu
122.
by btrask 9y ago
Let me try to offer a slightly more substantial comment than the others here so far. This proposal is motivated by trying to get more applications running off the shelf or with minimal changes, which is a worthy goal. But to achieve that, i
123.
by btrask 9y ago
You know, if HN was going to design a nuclear power plant, we'd all get into a dispute over what to name the bikeshed.
124.
by btrask 9y ago
Why is HTML slower than XUL? I thought XUL was pretty much just a weird version of HTML, possibly with more native toolkit support. Is it because XUL is being used from C++ rather than JS? (I checked the browser.html issue tracker but most
125.
Gene drive(en.wikipedia.org)
1 points by btrask 9y ago|0 comments
126.
by btrask 9y ago
You can mitigate the security concerns through other sandboxing techniques (e.g. Qubes, VMs). It's not like up-to-date Firefox is really that secure either. Web developers stand the most to lose from people opting to run old browsers.
127.
by btrask 9y ago
There is one plausible solution to this inequality: the Unix philosophy. Small parts, loosely coupled. Individual parts can't be significantly changed or removed, but they can be deprecated and better alternatives added. Because the pa
128.
by btrask 9y ago
Having done a fair share of reverse engineering in my time, I think the reason is that it's boring. Sure, at first it's fun: it's all about constantly solving new puzzles. But eventually you realize you're in a maze of t
129.
by btrask 9y ago
> Dystopian pessimism is more sinister than that, I'm afraid. The spirit of pessimism is the idea that what ever you do, things go wrong, because we're bad. So there's no point trying to implement things. If authors really
130.
by btrask 9y ago
I think a unikernel+ProcOS is basically the same as a hypervisor+unikernel, except backwards. The main advantages would be less overhead (one unikernel, instead of N) and greater flexibility (because ProcOS can run on any OS without a VM).
131.
by btrask 9y ago
Your post contains some good arguments, but it's couched in a tone that makes HN unwelcoming to professionals in all fields, not just psychiatry. When you try to put so much pressure on individuals (especially ones voluntarily spending
132.
by btrask 9y ago
I'm assuming that the underlying isolation mechanism is formally proven (or at least as good as possible). With a single set of reasonable features, it should be able to provide isolation between processes, users, containers and VMs. W
133.
by btrask 9y ago
Can you give a specific example of something that e.g. processes absolutely must support which users absolutely cannot? Consider that in Linux, processes and threads are implemented via the same abstraction (tasks). This abstraction actuall
134.
by btrask 9y ago
Great point. The JVM tried for this position and failed IMHO (I think it abstracted too much). Now the browser is slowly honing in on it, and it might succeed (mostly due to sheer inertia). As opposed to the JVM, I like to call the ultimate
135.
by btrask 9y ago
In terms of security/isolation, processes, users, containers and virtualization are all essentially the same thing. I wish the people working on these things would step back and notice the forest for the trees. Whatever the ultimate &q
136.
by btrask 9y ago
Thank you for taking the time to reply, despite the sea of low quality comments on this HN thread.
137.
How sandboxing works in Fuchsia(fuchsia.googlesource.com)
243 points by btrask 9y ago|167 comments
138.
July 12th: Internet-Wide Day of Action to Save Net Neutrality(battleforthenet.com)
160 points by btrask 9y ago|42 comments
139.
Jitterdämmerung: Advantages of JITs less than promised (2015)(blog.metaobject.com)
4 points by btrask 9y ago|0 comments
140.
by btrask 9y ago
If the use case isn't security critical, and you know for a fact it won't become security critical later, and MD5 is convenient for whatever reason, then just use MD5. Pardon my frustration, but: Jesus Christ, people. Why do we ne
141.
by btrask 9y ago
Does this affect users of libtls?
142.
by btrask 9y ago
I suppose pretty much everyone here already knows, but when making this specific type of comment ("I'm far more productive in Rust than C"), can you please disclose that you are one of the core people involved in Rust/Se
143.
by btrask 9y ago
Same goes for a library that was last updated 5 minutes ago though.
144.
by btrask 10y ago
This is the chance to get rid of the object prefixes (i.e. "blob" plus file length) that prevent the generated hashes from being compatible with hashes generated by other software.
145.
by btrask 10y ago
Even if you're paying you're still an additional revenue stream, as this article about paid ISPs demonstrates.
146.
by btrask 10y ago
There have been several image parsing exploits. Your browser could load a bad image and get owned.
147.
by btrask 10y ago
Zooko Wilcox privately showed some data at the Decentralized Web Summit suggesting that if you extend these results with newer data, the apparent pattern changes: up until around SHA-1, hash algorithms would eventually break, but since SHA-
148.
by btrask 10y ago
It probably wouldn't be too hard to create a fork of Git that replaces SHA-1 with SHA-256 (or Blake2, if that's your thing). At the same time, you could remove the hash prefixes (blobs are prefixed with "blob") so that t
149.
by btrask 10y ago
It feels nice to spot something on the new list, give it its first upvote, and then the next day see it on the front page. I've also seen a lot of interesting stuff on /newest that never makes it to the front page. Sometimes stuff
150.
by btrask 10y ago
404?

More ›