Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
chlorion
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
39 ms
·
391.
▲
by
chlorion
4y ago
Yup I have had the same exact experience with Common Lisp and every time somebody talks about standardization being so great I think back on this. Scheme is suffering from the same issues. Scheme is standardized, but implementations end up
392.
▲
by
chlorion
4y ago
>I want to know what stuff you guys are putting in public GitHub FOSS repos that you don't want replicated in any way... Nobody has claimed that they want this. People just want derived work to adhere to the license they chose for t
393.
▲
by
chlorion
4y ago
Gentoo's portage (which is based on freebsd ports to some extent!) also allows patches like this! You just put the patches in /etc/portage/patches/$cat/$pkg(-$ver|:$slot) and it applies them automatically for y
394.
▲
by
chlorion
4y ago
I think a lot of people think you have to use crazy key-combos in Emacs because it gets compared to Vim so often, but you can get by fine with the very basic combos, mouse use and the minibuffer! I mostly just use M-x to run interactive com
395.
▲
by
chlorion
4y ago
From the link I posted about: >you can’t simply use a static key pair with age to achieve authenticated encryption as age’s key-wrapping algorithm is completely insecure when used in this way >an attacker cannot tamper with the encryp
396.
▲
by
chlorion
4y ago
This is what I was referencing: >For public key cryptography, the notion of authenticated encryption becomes more complicated. I wrote a three-part blog post about it. There are public key authenticated encryption modes, such as NaCl’s b
397.
▲
by
chlorion
4y ago
I really like the general ideas behind age, like being composable in shell commands and having a more narrow focus than something like GPG. My biggest frustration with GPG is that it needs to have keys imported to do anything useful. I grea
398.
▲
by
chlorion
4y ago
Emacs has a built in package manager as well as several alternative external package managers! Most of the time installing a package is as simple as running "package-install" or having a "use-package" expression somewher
399.
▲
by
chlorion
4y ago
Threading is not an alternative to "async" and can't replace it. The alternative to "async" is non-blocking IO and an event loop written by hand, possibly with some threading thrown into the mix for certain tasks. T
400.
▲
by
chlorion
4y ago
You can do resource control with cgroups. With systemd based distros you can use "systemd-run" and pass various flags that define the exact limits. Non systemd distros can use libcgroup or use the sysfs cgroup interface directly.
401.
▲
by
chlorion
4y ago
Yup, I have seen this person post something similar at least once before as well and it's pure misinformation at best. Both projects are very good and everyone should give both a shot and see which they prefer, but spreading misinforma
402.
▲
by
chlorion
4y ago
>Finally for LSP, I always recommend Eglot over LSP Mode, as Eglot is written by an Emacs contributor that has deep knowledge of Emacs and Emacs Lisp. LSP Mode is written by volunteers on Github, and the code is nowhere near as good. Thi
403.
▲
by
chlorion
4y ago
Normally you are going to want to go into the "offtopic" channels for general chatting. Normal support channels are often very focused and explicitly disallow non-support conversations, but it depends on the specific channel and t
404.
▲
by
chlorion
4y ago
You could mistype the url by a letter or two and hit enter before realizing the mistake. Creating malicious domains that are very close to popular ones is somewhat of a common thing for exactly this reason. If you downloaded and peeked into
405.
▲
by
chlorion
4y ago
I guess the major thing is opening up the code to review it in an editor of choice and then having an LSP server running the build scripts automatically without you realizing it. Reviewing code that you don't trust seems to be a pretty
406.
▲
by
chlorion
4y ago
You can just specify the type along with the variable itself instead of relying on type inference in this case, which makes it look a lot better I think. There is also the collect_vec method from Itertools that avoids this. I normally am no
407.
▲
by
chlorion
4y ago
Flatpak's sandbox is pretty weak and there are many subtle loopholes that allow for trivial escapes. Relying on it as a security measure is not a great idea. An example of such a thing, that is related to this thread, is the X11 socket
408.
▲
by
chlorion
4y ago
Wat I don't think you actually understand what's going on here. The untrusted programs in this case would be javascript and other exploitable things that firefox interprets every time you visit a webpage. Unless you run firefox it
409.
▲
by
chlorion
4y ago
Gentoo still uses the split setup by default. Unifying the directories is currently a work in progress and will eventually be the default from what I understand. It's possible that Gentoo will still support the split setup even after t
410.
▲
by
chlorion
4y ago
The part about them being buggy is definitely true. Up until somewhere around 2016-2017 the ATI/AMD drivers were really bad. I had an "HD 7850" GPU on Linux around that time and it was barely usable. The performance was less
411.
▲
by
chlorion
4y ago
I am not sure the comparison to regular tools is very accurate. For many people, programming language and compiler/interpreter design is one of the major parts of computer science that they are interested in. Language development is an
412.
▲
by
chlorion
4y ago
As far as I can tell this doesn't actually require a "big tech account". I am imagining this working like OTPs that are generated on phones. The actual standard will be open and the implementations do not require a specific p
413.
▲
by
chlorion
4y ago
>Panic is idiomatic error handling. Take something as basic as indexing into a list. Get it wrong and Rust will panic. This is not really true. If you are indexing into something that may fail you use the `get` method which returns an `O
414.
▲
by
chlorion
4y ago
On Linux we have something called "cgroups" which is integrated with the kernel's scheduler. Cgroups can be used to control and limit resources and do exactly what you are describing! Cgroups can be used to limit the maximum
415.
▲
by
chlorion
5y ago
They are more limited than C++ moves for sure, whether that is a good or a bad thing I am not so sure of! I am curious if there are any examples of things you wanted to do but couldn't with Rusts move semantics. After using both C++ an
416.
▲
by
chlorion
5y ago
Yeah I agree using vector::at is a common and fairly bad anti-pattern. So long as you make sure your program is correct you never need to worry about indices being out of bounds. Requiring bounds checking is a sign you need to eliminate the
417.
▲
by
chlorion
5y ago
Moves don't require any runtime checks in Rust to my knowledge. Moves do involve some compile time analysis to make sure you aren't accessing a value that has been moved, maybe that is what you are thinking of? In Rust, moves are
418.
▲
by
chlorion
5y ago
I feel the same way, I am just not willing to pipe curl into a shell blindly. Even if this specific instance of curl'ing into sh is safe, or if I download and then run it, it's still extremely poor practice and gives me serious do
419.
▲
by
chlorion
5y ago
You can toggle between the SUID and unprivileged user namespaces implementation at compile time. I think most distros are shipping the unpriv'd userns configuration, and if they aren't they should be.
420.
▲
by
chlorion
5y ago
The first source I always check are man pages, both for the program and for the config files for that program. Then anything else is normally on the Arch or Gentoo wiki. The are very few topics that aren't covered by one or more of the
More ›