cyphar

20 ms·

271.
by cyphar 1y ago
Well, because fun is an amorphous concept defined to be human-specific, your comment should say: I am willing to (sarcastically) stake something of value on the premise that you are considered to be an interesting individual to interact wit
272.
by cyphar 1y ago
Unfortunately, they still use libolm[1] for e2ee which is deprecated[2] and has known security issues[3]. The maintainers appear to not be interested in switching to the newer Rust-based library. Matrix argue that the timing channel attacks
273.
by cyphar 2y ago
Holy hell!
274.
by cyphar 2y ago
Yes, however it's not clear how they entered and why it took them so long (they entered a few minutes before the plane crashed due to fuel exhaustion -- the left engine shut down 50 seconds after he was seen entering the cockpit). It s
275.
by cyphar 2y ago
There's also at least one case[1] where the locked door itself stopped someone from stopping the crash (the CA had flying experience and Mentor Pilot[2] showed that even someone with no flying experience could be instructed to autoland
276.
by cyphar 3y ago
In short, yes. See 4(e): > Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and
277.
by cyphar 3y ago
Not directly related to the phenomenon in the article, Numberphile has a video[1] that goes into why pi has a surprising amount of regularity despite being transcendental. [1]: https://www.youtube.com/watch?v=sj8Sg8qnjOg
278.
by cyphar 3y ago
This is addressed in the second paragraph of the article. The iPhone 6S had an OS update in October 2023 (iOS 15.8) which included a security fix for a different issue . The Chromium security issue was fixed in June 2023.
279.
by cyphar 3y ago
主(nushi) has wrapped back around to being more on the polite side, though I get the impression it's used more by older people. There's also phrases like 持ち主(mochi-nushi -- person who is a holder of something) that have ossified th
280.
by cyphar 3y ago
uBlock and YouTube have been regularly updating to counteract each other's counteractions for the past few weeks (at least, in my branch of the A/B rollout). Force refreshing the filters has usually fixed the issue for me. There&#
281.
by cyphar 3y ago
Translating the Paul Graham video to Croatian works surprisingly well. (As a non-native speaker) several bits of the Japanese transcription were just Japanese-sounding noise, and the prosody was completely all over the place in the bits tha
282.
by cyphar 3y ago
Paperback uses the AEAD-and-SSS-the-key construction, but that's more to do with the properties such a scheme gives you (it allows more flexibility with how you distribute the secret -- you can keep the main document with a lawyer and
283.
by cyphar 3y ago
Unfortunately, the distinction is sometimes (though rarely) useful and would be a far more disruptive change than this one. I think you would actually need a Go v2 to change it.
284.
by cyphar 3y ago
Is that approach information-theoretically secure? Shamir Secret Sharing is, and the mathematics is very simple. Note that the encryption step is, strictly speaking, not necessary for Shamir either. But there are benefits to encrypting the
285.
by cyphar 3y ago
Paperback predates that tool (though to be fair, it still has to have a nice GUI interface made for it, and to be honest I have been working on it off more than on). Also, I suspect they don't support reconstructing lost shards or addi
286.
by cyphar 3y ago
I really need to set aside some time to work on some kind of usable interface, graphical stuff has never been my strong suit. At the moment, all of the features work but you need to copy-paste the contents of the QR codes into the command-l
287.
by cyphar 3y ago
In the Linux kernel, there are unlikely() and likely() macros which indicate to the compiler whether or not a condition is likely using __builtin_expect (which then influences the output assembly into producing code that should make the bra
288.
by cyphar 3y ago
There are new snapshots at least once a week. While there are large updates every once in a while, those are usually due to gcc or glibc upgrades which require a rebuild of most packages -- which doesn't happen every month. If you actu
289.
by cyphar 3y ago
Ask and you shall receive ;) https://linuxcontainers.org/incus/
290.
by cyphar 3y ago
I'm not sure if there is a document that mentions this in particular, but it is a consequence of how lifetimes work. The core issue is that .as_raw_fd() takes &File and returns an integer (which doesn't have lifetime informati
291.
by cyphar 3y ago
io_uring was blocked by the default Docker seccomp profile until somewhat recently. The primary issue with io_uring is that there is no mechanism to apply seccomp-like rules. > Also while user namespaces help in theory You should use use
292.
by cyphar 3y ago
I'm aware you can work around it, there are workarounds for issues in Go as well. In general, C programs do not require workarounds for dealing with kernel APIs for the simple reason that the vast majority of kernel APIs are developed
293.
by cyphar 3y ago
No, that only pins the current goroutine to a single OS thread (which is needed for some APIs -- namely, all of the other namespace APIs and some thread-related APIs). There is no way to make an entire Go program run as a single threaded pr
294.
by cyphar 3y ago
As the maintainer of a Go container runtime (runc), and having worked with Rust in various other projects, while they can be better languages for building large projects, they make it harder to understand what exactly your program is doing
295.
by cyphar 3y ago
Sadly that doesn't help you get access to the flag file you need to collect the bounty. ;)
296.
by cyphar 3y ago
This is tautologically true -- "Is X secure? Yes, assuming the technology X uses is secure." The more nuanced answer is that containers have several layers of protections (seccomp, LSMs, user namespaces, namespaces, cgroups, capab
297.
by cyphar 3y ago
bwrap is a container and AppArmor is used by basically every container runtime if the system is using AppArmor (otherwise they use SELinux). Seccomp is also enabled by default, and I would argue it is a more significant protection against c
298.
by cyphar 3y ago
We don't ship LXD in SLES, I'm the package maintainer for LXD on openSUSE (though this does mean you get access to it in SLES through the PackageHub). I am not yet sure how I want to tackle the migration issue, and obviously I hav
299.
by cyphar 3y ago
I have these in my .vimrc, to display and auto-trim trailing whitespace: augroup trailing_whitespace_show autocmd! " Make trailing whitespace red. autocmd ColorScheme * highlight ExtraWhitespace ctermbg=re
300.
by cyphar 3y ago
I never had the good fortune to meet him, but his work on vim has had an impact on my life every day ever since I started programming as a teenager. Seeing his name along with the "charityware" license of vim each time I create a

More ›