cesarb

4 ms·

31.
by cesarb 2mo ago
> Software as a list of requirements and that's it. [...] a document specifying hardware, interfaces, and requirements [...] For that, you'd want the list of requirements and hardware documentation to be written in a precise, f
32.
by cesarb 2mo ago
> maintain and keep your fork of software with the changes you want or need Then you'll have the same problem everyone who forks a piece of software ends up having, sooner or later: as the original evolves, keeping your fork up to d
33.
by cesarb 2mo ago
> It's absolutely irrelevant to compare these two languages. Calling the former "Javascript" was just a marketing trick. Playing devil's advocate: back when you still could use Java in the browser, you could use Javas
34.
by cesarb 3mo ago
> I wish Codeberg were more forward-looking here: willing to host the Open Source software of tomorrow, not only software made in the ways its community approves of today. Is "vibe-coded software" really going to be the &quot
35.
by cesarb 3mo ago
Since nobody seems to have posted it yet, relevant xkcd: https://xkcd.com/416/
36.
by cesarb 3mo ago
> The real nightmare scenario is the AI using its abilities to copy itself to new locations. [...] it could effectively self sustain itself as long as it is able to find work. [...] Isn't this the plot of Endgame: Singularity? ( htt
37.
by cesarb 3mo ago
As a less extreme example: consider how many non-USA hosts say they follow the DMCA.
38.
by cesarb 3mo ago
Didn't Chrome also come bundled with other software like torrent clients? That is, unless you unchecked a checkbox in the installer for these software, you ended up with Chrome installed? Unless people were careful to pay attention to
39.
by cesarb 3mo ago
> The reality is that each update is its own potential security issue Even beyond security issues: each update is a new opportunity for breakage, not only from bugs in the third-party package, but also from unexpected dependencies on the
40.
by cesarb 3mo ago
I saw plenty of mechanical typewriters by the 80s/90s, when I learned typing at school. A relative of mine also taught a typewriter course, with several different mechanical typewriter models. Everyone I know who had a typewriter had a
41.
by cesarb 3mo ago
> Fill the room with typewriters. Playing devil's advocate: one reason I'm good at typing on computers is that I learned on typewriters, which need much more force for each key press, especially the little fingers. Someone who
42.
by cesarb 3mo ago
> Realtek makes some pretty affordable networking chips but their Linux drivers can be a real gamble. Either it works out of the box or you're in for years of messing around. And that's when it's a legitimate Realtek chip.
43.
by cesarb 4mo ago
> nobody else should ever be using my machines in the first place, and if they are, I'm going to have larger issues than what OS they decide to try to boot. The threat model secure boot was actually designed to protect against is no
44.
by cesarb 4mo ago
> You could've changed the setting that puts the button back on the lower left corner and saved your relative the trouble. Nice, I didn't know that was possible; I expected it to be unchangeable, since I heard that the whole ta
45.
by cesarb 4mo ago
> There is an assumption that by now everyone knows what the menu in the bottom left corner does Except that... it's no longer in the bottom left corner! Recently, I had to help a relative with a Windows system, and what passes for
46.
by cesarb 4mo ago
> their proposal usually begins by proposing that it "should" be possible to just compile Linux as C++ software That has already been done in the past. Quoting the FAQ: "[...] the kernel was once modified to be compiled un
47.
by cesarb 4mo ago
> It’s fairly easy to build your own kernel packages from vanilla sources in Debian. IIRC, Debian has a command called "make-kpkg" which does nearly all the work for you, ending up with a installable package which works identic
48.
by cesarb 4mo ago
> You have to run coal feeders, blowers, and water pumps for an hour before you can spin the generator. That's probably the reason most grid black start facilities in my country (Brazil) are hydroelectric dams, which need none of th
49.
by cesarb 4mo ago
> Magnifica Humanitas is that rarest of treats, a 40,000-odd word AI policy document written in Latin. I stopped reading at this sentence. If you go to the source ( https://www.vatican.va/content/leo-xiv/en/
50.
by cesarb 4mo ago
> Rust does not bring more performance. Just more safety. Though more safety can in some cases bring a bit more performance. For instance, with Rust you can often avoid "defensive copies" of objects.
51.
by cesarb 5mo ago
> That's unfortunate, because it's precisely why things like this will keep happening. I have the opposite opinion. Its use being rare means CPU designers have less need to optimize for that rare case, and hardware optimization
52.
by cesarb 5mo ago
> I wouldn't have problems with AI-generated code, but LLMs are not AIs, they are random sentence generators. AI includes a lot of technologies, LLMs being just one of them. Several of these technologies use probabilistic algorithms
53.
by cesarb 5mo ago
> people who grew up in developing countries or even in extremely rural areas of Western countries who grew up with water unsafe to drink before boiling it off will be even more skeptical. I'm Brazilian. We learn early in school tha
54.
by cesarb 5mo ago
No, Web 3.0 was the Semantic Web: https://en.wikipedia.org/wiki/Semantic_Web
55.
by cesarb 5mo ago
That's the promise of self-driving cars. Every time an issue is found, no matter how minor, it's fixed and updated everywhere. From now on, every car of that model (and future models, and related models) will no longer have that p
56.
by cesarb 5mo ago
> Doing terrible work every 2 years is better than doing it every day? And by skipping some releases, you will have less of that work. When something is changed in one release, then changed again on the next one, by waiting you only have
57.
by cesarb 5mo ago
> It's important to look at the actual vulnerability at the context, and not just list any CVE which matches by version. Unfortunately, that's not enough. Even if the vulnerable parts of the code are not being built, heck even
58.
by cesarb 5mo ago
What you're missing is that, to create a signature, you need to know the private key corresponding to the public key; it's an asymmetric algorithm. > Client takes its own public key and the server's public key and create
59.
by cesarb 5mo ago
> Other comments say that this mitm stops working when you use public key authentication. It doesn't completely stop working; a MITM can still pretend to be the server, it just can't authenticate to the real server on your beha
60.
by cesarb 5mo ago
> Couldn’t the MITM ssh server just forward the client’s fingerprint to the legitimate server? The client sends not only the public key, but also a signature, and that signature depends on the output from the key exchange, so it's &

More ›