cesarb

11 ms·

181.
by cesarb 1y ago
> <script type="application/wasm" src="./main.wasm"></script> <applet code="./Main.class"></applet> Plus ça change...
182.
by cesarb 1y ago
> A log4j level vulnerability happens again. [...] The more you are drifting behind on updates, the worse it gets That one is a funny example in this context. If you were drifting far behind on updates, so far that you were still on the
183.
by cesarb 1y ago
AFAIK, no, the most common standard for console size is 80x24, which came from the VT100 and is used by default on terminal emulators like xterm or the GNOME terminal.
184.
by cesarb 1y ago
> The move from javax to jakarta was not really connected to the changes in the language. It sort of was; it was caused by Java no longer coming with the J2EE libraries. Before that, J2EE could be considered part of Java; now that it&#x2
185.
by cesarb 1y ago
> Wasn't that possible since java 22? From what I've seen, most people only care about the LTS versions of Java. Which means that after Java 21 LTS comes Java 25 LTS. The same happens with Ubuntu (after 22.04 LTS comes 24.04 LT
186.
by cesarb 1y ago
> or 2) write my own DTLS implementation in Java, and virtually guarantee I'd get something wrong and break it cryptographically. Java doesn't have constant time guarantees, so for at least the cryptographic part you have to ca
187.
by cesarb 1y ago
One famous example is ripgrep ( https://github.com/BurntSushi/ripgrep ). Its Cargo.lock (which contains all direct and indirect dependencies) lists 65 dependencies (it has 66 entries, but one of them is for itself).
188.
by cesarb 1y ago
> For us 8 to 17 was tough due to a lot of things you weren’t supposed to be using going away (sun packages). But TONS of libraries did it anyway. AFAIK, these libraries did so because there was no alternative, and some of the changes in
189.
by cesarb 1y ago
> I'm interested in knowing whether there's something intrinsic to Go that encourages such a culture. I've also seen something similar with Java, with its culture of "pure Java" code which reimplements everything
190.
by cesarb 1y ago
> If an attacker rug-pulls of course there is nothing that can be done about that other than security scanning. As another subthread mentioned ( https://news.ycombinator.com/item?id=45261303 ), there is something which can
191.
by cesarb 1y ago
> Why isn't DNS in a service on the operating system instead of libc? On modern Linux systems, it is: systemd-resolved ( https://www.freedesktop.org/software/systemd/man/latest/syst... ) is a syste
192.
by cesarb 1y ago
> I don’t see why glibc would have to do that inside a call to getaddrinfo. can’t it do that once at library initialization? If it were a library dedicated to DNS, sure, but glibc is used by nearly every process in the system, including
193.
by cesarb 1y ago
> Given that Teams doesn't work in anything other than Chrome That's news to me; I use Teams on Firefox every work day and I see no issues (other than it being one of the very few sites which need third-party cookies to work, b
194.
by cesarb 1y ago
> Among other things, they are completely unfishable. From what I've heard, they're also unbackupable, and tied to the ecosystem used to create them (so if you started with an Apple desktop, you can't later migrate the pas
195.
by cesarb 1y ago
> but the FEAT_ bits are all readable only from EL1, [...] I don't care if it'd be slow, just give us the equivalent of a dedicated CPUID instruction, even if it just a reserved opcode that traps to kernel mode and is handled i
196.
by cesarb 1y ago
If you prefer to read it in Portuguese, the link seems to be https://www.gpiaaf.gov.pt/upload/processos/d054238.pdf (source: https://www.gpiaaf.gov.pt/detalhe-noticias?uri=1665 which has both link
197.
by cesarb 1y ago
> Putting out any voltage before detecting a sink is breaking the standard To be pedantic, I believe that only applies to USB-C sockets; AFAIK, a USB-C plug (like on a USB-A to USB-C cable) can in some cases put out 5V (but only 5V) befo
198.
by cesarb 1y ago
You might want to run memtest86+ (or the built-in equivalent from some OEMs like Dell), in my experience memory sticks sometimes go bad after being in use for a while.
199.
by cesarb 1y ago
> Security is the main reason to keep current with updates. For plenty of users, their only exposed attack surface is the web browser and AV codecs. Updates outside of that make no security difference for them.
200.
by cesarb 1y ago
> what kind of PR would involve that many files? A very simple example: migrating from JavaEE to JakartaEE. Every single Java source file has to have the imports changed from "javax." to "jakarta.", which can easily b
201.
by cesarb 1y ago
> It does, but if you look at the mainboard manuals of computers, usually it's 32 lanes of which 16 go to the GPU slot and 16 to the southbridge, so no storage directly attached to the CPU. AFAIK that's not the case at least on
202.
by cesarb 1y ago
> People have no "control" over their own device if they have malware on it. You are inadvertently reaching the true core of the question. The ones who have "control" over a device, are those who control the software
203.
by cesarb 1y ago
> Then, one day, an app developer thought: Wouldn't it be cool if there was an app that would interrupt what the user was doing, play a sound, vibrate the device, and put up a full-screen dialog, that this all could be activated rem
204.
by cesarb 1y ago
> Anyone remember how fast geocities pages loaded? Yeah, they were slow. Mostly due to the low speed of dial-up modems.
205.
by cesarb 1y ago
> What was the last time there were some actually good news in big tech? The issue is that the good news are often incremental, while the bad news come in large steps, which makes them much more noticeable.
206.
by cesarb 1y ago
> There's no reason a competitive Linux-based smartphone can't exist There is; it's the "phone" part of "smartphone". Being a phone makes the device subject to a lot more requirements (for an obvious ex
207.
by cesarb 1y ago
> and alternatives still are decades behind in terms of app ecosystem. That's if they're available at all. In my country, only cell phones certified by the telecommunications government agency (ANATEL) can be imported, so the a
208.
by cesarb 1y ago
The reason I chose the Android ecosystem over the Apple ecosystem, once I found out that the Maemo/Meego ecosystem was a dead end and the Openmoko ecosystem was a non-starter, is that the Android ecosystem allowed me to develop and ins
209.
by cesarb 1y ago
> Can we count on ISPs not mucking with stuff at the transport layer? That used to be common in the past, many ISPs ran transparent HTTP proxies to reduce the use of their slow upstream links. The current push to use strong encryption an
210.
by cesarb 1y ago
> I struggle to generate more than a few hundred MBs per year. You must not work with video. Even with photography, a single raw photo can already use tens of megabytes (source: just looked at a raw photo file I happened to have around).

More ›