chlorion

6 ms·

31.
by chlorion 3mo ago
This is the argument I like too. It's the same argument anti-vaxers love to make. "Well you can still get covid after getting the shot", which is something I read and heard quite a lot. That doesn't make the thing useles
32.
by chlorion 4mo ago
>By trusting another chain of trust and firmware binary blobs involved in booting your PC. So what? I'm still preventing a random person from tampering with my bootloader?
33.
by chlorion 4mo ago
I disagree that there is no need for secure boot for Linux? Secure boot prevents tampering of your kernel and/or bootloader, nothing about Linux prevents this from being possible. You might argue that you don't care about this, bu
34.
by chlorion 4mo ago
No, I don't think that's what happening actually. A stripped down cold build will literally take 90 seconds without caching on modern hardware. The overwhelming majority of stuff that is being built is drivers, and most of them pr
35.
by chlorion 4mo ago
Its literally trivially objectively measurable, this isn't something that is based in opinion. You can throw it up on your own website and simply grep the logs if you don't trust it, or look for the analysis reports from people wh
36.
by chlorion 4mo ago
They are actually both much better than the things they replace, but a bunch of whiner babies can't stand the thought of anything changing and will claw and scream while being dragged into the future.
37.
by chlorion 4mo ago
Probably didn't even bother to diagnose the issue. It's hard to tell if it was even wayland related without logs and some digging. But lets just blindly blame wayland cause new thing bad!
38.
by chlorion 5mo ago
I am actually working on my own language, and getting something better than Go is actually not that difficult! The hard part about making a language is creating the stdlib and tooling and support for the language, but actually creating a la
39.
by chlorion 5mo ago
Java is probably able to bump allocate memory or something similar, where rust is using a general purpose allocator. I guess if you are formatting strings constantly this is important, but you can also use a bump allocator in rust if you re
40.
by chlorion 5mo ago
How large are your rust projects? I am able to write rust on a moto g power (a cheap android smartphone) inside of termux, running on battery, in battery saver mode, and cached compile times for every single one of my projects is under 5s e
41.
by chlorion 5mo ago
And ironically with the exception of the python sqlite3 module, the rust alternatives are much higher quality, IMO. Does anyone even use tkinter in modern times anyways?
42.
by chlorion 7mo ago
Does it though? People experience "blue screens" and kernel panics and such pretty often.
43.
by chlorion 8mo ago
openrc-init can be used on an upstart system, the daemon manager itself can't but that's because you'd have two different daemon managers. Beyond that there aren't any openrc software components, because it was designed
44.
by chlorion 8mo ago
The statistics we have on real world security exploits proves that most security exploits are not coming from supply chain attacks though. Memory safety related security exploits happen in a steady stream in basically all non-trivial C proj
45.
by chlorion 8mo ago
>The curl|sh workflow is no more dangerous that downloading an executable off the internet It actually is for a lot of subtle reasons, assuming you were going to check the executable checksum or something, or blindly downloading + runnin
46.
by chlorion 8mo ago
No it definitely is a monolith. It's NOT loosely coupled in any way. Try running any part of the systemd software suite on an openrc system and see how that works out? I have no idea why people are so insistent on claiming that its not
47.
by chlorion 8mo ago
I have been able to do some light programming in elisp in termux in emacs on my moto g. My emacs config is now setup to detect termux and config itself accordingly which is neat. Also I have a wireguard vpn setup so that I can ssh between m
48.
by chlorion 9mo ago
It adds up very quickly.
49.
by chlorion 9mo ago
I self host a small static website and a cgit instance on an e2-micro VPS from Google Cloud, and I have got around 8.5 million requests combined from openai and claude over around 160 days. They just infinitely crawl the cgit pages forever
50.
by chlorion 1y ago
I use org mode files, a small build script and git. The build system just invokes emacs and compiles org documents to HTML, and installs them in /var/www/${site}. I have a git update hook on the server that invokes the build
51.
by chlorion 1y ago
Claude was scraping my cgit at around 12 requests per second, but in bursts here or there. My VPS could easily handle this, even being a free tier e2-micro on Google Cloud/Compute Engine, but they used almost 10GB of my egress bandwidt
52.
by chlorion 1y ago
It's not even a niche instance, protocols solve their problem lol.
53.
by chlorion 1y ago
>The type could be anything, it could be List, Tuple, Dict[int, Any], torch.Size, torch.Tensor, nn.Sequential, np.ndarray, or a huge host of custom types! That's not how you are supposed to use static typing? Python has "protoc
54.
by chlorion 2y ago
The difference is that leaking is not UB, the worst case is an OOM situation, which at worst causes a crash, not a security exploit. Crashing is also considered to be safe in rust, panicking is common for example when something bad happens.
55.
by chlorion 2y ago
What are you even talking about? I've never saw anyone claim that doing UB in Rust is okay because its wrapped in an unsafe block? If anything I've saw the exact opposite of this, cases of UB in libraries is considered a bug alm
56.
by chlorion 2y ago
So out of bounds access leading to data loss and possible security vulnerability is better than crashing the kernel? That doesn't make sense to me.
57.
by chlorion 2y ago
A disk image is just a file though. Does it do some sort of analysis of files and block disk images somehow? Maybe you mean that it doesnt do image-level backups by default?
58.
by chlorion 2y ago
Being able to use string formatting without a heap is pretty cool. Rusts string formatting machinery does not require any heap allocations at all, you can for example impl fmt::Write for a struct that writes directly to a serial console byt
59.
by chlorion 2y ago
I'm pretty sure that gentoo also packages ada, but it doesn't get installed by default, as its behind a USE flag.
60.
by chlorion 2y ago
Theres even more than just UAFs that you have to worry about in a single threaded context, but yes you are correct. Here's a good post that talks about why shared mutability even in single threaded contexts is dangerous: https:/&

More ›