cyanmagenta

8 ms·

31.
by cyanmagenta 2y ago
> but does the kernel then also do certificate validation for you No, the asymmetric cryptography is all done in userspace. Then, post-handshake, symmetric cryptography (e.g., AES) is done in-kernel. This is the same way it works with
32.
by cyanmagenta 2y ago
> I'd far rather have the OS provide a verified safe socket layer There is work going on right now[1] to implement the QUIC protocol in the linux kernel, which gets used in userspace via standard socket() APIs like you would with TC
33.
by cyanmagenta 2y ago
> I am pretty sure almost everyone will gladly trade the "thinness" for a few standard USB and HDMI ports. I think there’s a lot of people that want something as light and thin as possible to slip into your purse and take to th
34.
by cyanmagenta 2y ago
Not the commenter, but “multiple branches” in this context is referring to if/else statements in the code, not source-control branches. Similarly, “flags” is referring to function arguments like a boolean “is_original.” More generall
35.
by cyanmagenta 2y ago
It’s an interesting question whether that could be fixed. I think the answer is Yes. If the author didn’t do any scrambling, and just displayed UUIDs in numeric order, then it’s trivial to enumerate search results in order. Likewise, if
36.
by cyanmagenta 2y ago
Cool! Wishlist if you’re looking for new features: - A way to skip to higher level at the start—like maybe an Easy, Normal, Hard difficulty level like in video games. - CSS themes to make it aesthetically neater. Like a ninja background i
37.
by cyanmagenta 2y ago
To complete the legal analysis a bit more rigorously, mostly because I’m drunk and bored on Thanksgiving: - The service name “continue and persist” is probably trademarkable by them if they wanted (assuming it’s not already in use). And as
38.
by cyanmagenta 2y ago
I am going to be harsh here, but I think it’s necessary: I don’t think anyone should use Emit-C in production. Without proper tooling, including a time-traveling debugger and a temporal paradox linter, the use case just fails compared to
39.
by cyanmagenta 2y ago
> If the builds are reproducible, what’s the issue? Because they’re not! Many packages (including the kernel itself, python, gcc, et al.), are not reproducible. See https://reproducible.archlinux.org/
40.
by cyanmagenta 2y ago
I really hope Arch moves to a model like Debian where all packages are built by a central build server. The current strategy—having dozens of different developers compile stuff on their laptops, sign it personally, and then upload the binar
41.
by cyanmagenta 2y ago
Looks great! One thing to consider would be adding some more specular lighting. Books in real life are shiny, and the render looks a bit flat.
42.
by cyanmagenta 2y ago
The difference is that file:// URLs can be opened by your grandparent opening a .html file that they downloaded, whereas http://localhost requires you to actually set up a web server. Imagine double-clicking a maliciou
43.
by cyanmagenta 2y ago
Unless Schanuel’s conjecture is wrong, of course.
44.
by cyanmagenta 2y ago
If you read the article, it explains reporter privilege and the legal basis thereof. It comes from an interpretation of the First Amendment, the argument being that free speech would be chilled if reporters had to cough up the details of e
45.
by cyanmagenta 2y ago
I think it’d be more accurate to say “imprecise” rather than “arbitrary.” For example, the legal drinking age is set to 21 (or whatever) based on politicians’ estimation of when most people are mature enough to handle the consequences. It
46.
by cyanmagenta 3y ago
Character login requires password, which is sent plaintext over telnet. Even if you get around that somehow, there are still concerns about session hijacking to steal someone’s in-game items and currency.