cm3

13 ms·

91.
by cm3 10y ago
I cannot express how much I like this. This is a great tool and the right one to write a replacement TLS stack with. Excited for things to come.
92.
by cm3 10y ago
The original NaCl had assembly implementations, I believe generated with a Perl script (not unlike OpenSSL's asm generator), and looking around libsodium I cannot see assembly implementations of the loops. Does anyone know why that is?
93.
by cm3 10y ago
Not criticizing the project, genuinely curious: It's great that browsers can achieve more functionality previously exclusive to native applications, but anytime a code editor written in JavaScript to be run in a browser is announced, I
94.
by cm3 10y ago
hg absorb sounds very useful. I'd like to know details, since I can imagine undesired results it might produce.
95.
by cm3 10y ago
Of course Python as an abstraction layer made it more readily available on Windows and allowed allocation of developer resources to hgtk, including a Windows Explorer extension. Still, despite its flaws, C is the common layer we have to exp
96.
by cm3 10y ago
The possibility of extending the Mercurial core with a well-defined API is one major reason. In fact, most interesting features are extensions, bundled with Mercurial, and after several releases and experience, the functionality usually get
97.
by cm3 10y ago
Despite conflicts and power games one might follow on the news, the world economy is totally global. This also includes supplies coming from armed conflict or politically volatile regions. If you completely disassemble your Detroit-branded
98.
HyperHaskell – the strongly hyped (visual) Haskell interpreter(mail.haskell.org)
2 points by cm3 10y ago|0 comments
99.
by cm3 10y ago
Right. Unfortunately, Rotate and Repave are not common practice, just like periodically restoring backups isn't.
100.
by cm3 10y ago
> I still think the exfiltration threat is the worst. Any secret injected into the environment of any tested codebase is vulnerable -- especially if your logs are public. Fair point, though instead of worrying about that, I think the rea
101.
by cm3 10y ago
That CircleCI post seems to talk about different issues than I see when I think safety of random CI jobs. It's a non-trivial problem to solve, especially with caching of artifacts involved. You'd probably want to run a sandbox ins
102.
by cm3 10y ago
What would be the course of action for an opensource project to set up a CI worker there (ideally per-commit on X branches, not periodic) such that it could be integrated in a pre-merge check? I'm not bound to Gitlab CI runners, but it
103.
by cm3 10y ago
Since Zaius also seems to have fully open firmware for most (all, including USB controller?) pieces, it would be nice to get something like a <3k$ workstation. I would say Raptor Talos, but they seem to have their hands full with the POW
104.
by cm3 10y ago
If Rackspace, given their major support for various opensource projects, were to provide POWER9 runners for, say, Gitlab CI, this could be a major help in porting software. Or, they could, like IBM provide SSH access to interested projects.
105.
by cm3 10y ago
Right, that's why I wrote "_a_ linux distro", not "some linux distros". I'm sorry for not making that clearer.
106.
by cm3 10y ago
A not-yet-fully-upstreamed branch maintained by the linux foundation can, yes. But just like FreeBSD has to make an exception to build certain packages with gcc, the kernel can be exclusively built with gcc for the time being. If you'r
107.
by cm3 10y ago
I'm glad that VoidLinux isn't anymore the only distro in town that's switched to LibreSSL. And with Docker defaulting to Alpine, more OpenSSL/LibreSSL compatibility fixes will trickle into upstream projects. This is good
108.
by cm3 10y ago
Fair enough. The more important part of my question: isn't there a focused effort to complete FreeBSD's security feature checklist?
109.
by cm3 10y ago
Are you saying that the measures listed here http://hardenedbsd.org/content/easy-feature-comparison do not work properly?
110.
by cm3 10y ago
Can you rewrite history in those?
111.
by cm3 10y ago
> Why aren't we using it for everything yet? There are some features which are so far exclusive to FreeBSD but go under the radar of the wider community of developers. In addition to CloudABI, Capsicum is another one, which, while n
112.
by cm3 10y ago
Kees Cook and others have been porting or reimplementing features exclusive to grsec in upstream linux. https://outflux.net/blog/archives/2016/09/26/security-things... https://outflux.net
113.
by cm3 10y ago
I still have hope some or all HardendedBSD features might get ported or reimplemented in FreeBSD 12. Too much low hanging fruit, and now that linux has been steadily closing the gap to grsec, the competition in mainstream kernel branches is
114.
by cm3 10y ago
> https://svnweb.freebsd.org/base?view=revision&revision=30090... . Is this a unique feature or how is this handled on illumos or Solaris?
115.
by cm3 10y ago
Yeah, git doesn't restrict you in that regard and supports both workflows, which may differ from project to project. Mercurial has a nice improved version of this, where it's safe to rewrite locally but you're not allowed to
116.
by cm3 10y ago
Bots can still learn with that reCAPTCHA behavior. We're basically providing free labor to Google and they're making is love Solvemedia and other captcha services for providing something that actually doesn't turn into a minu
117.
by cm3 10y ago
If I load test/03.md with it, the process consumes around 19MB. Is that expected and normal for displaying ansi text?
118.
by cm3 10y ago
It's not that kind of hang.
119.
by cm3 10y ago
> systemd answered a difficult question and hopefully we willsee more similar advancements shortly for Linux. Agreed, but I hope that systemd starts focusing on stability and fixing the regressions they've introduced compared to sys
120.
by cm3 10y ago
> no one still has come with a golden response SMF or Nosh

More ›