cyphar

72 ms·

781.
by cyphar 6y ago
This is mostly to do with the implementation of chroot(). Because it only applies to a single process (and mount tables are per mount namespace), it was implemented in such a way that directories above the root of the chroot are still techn
782.
by cyphar 6y ago
It really doesn't. I would say that "unshare -mpf ; pivot_root" matches the most minimal definition of a container more accurately than joining a cgroup (it's an isolated system which can't directly interact with th
783.
by cyphar 6y ago
Unless you're using user namespaces (which this doesn't) then root inside a container is equal to root outside the container. You don't even need access to /dev, because the container process could just mknod(2) any devi
784.
by cyphar 6y ago
> I'd like team size cubicles. That would sound to me like a good compromise between collaboration, and deep work. I agree, but isn't that just a room? When I was doing research at my university, all of the offices were laid ou
785.
by cyphar 6y ago
I guess my point is that I wouldn't necessarily expect there to be any clear trend to the set of all spectral lines. The Boltzmann fit looks fairly iffy to me as well -- it seems like they just picked an arbitrary distribution (which h
786.
by cyphar 6y ago
They're referring to this argument for where the distribution may come from (where the authors "model" the scientific community -- namely the contributors to the NIST database -- as a Boltzmann distribution in possibly the mo
787.
by cyphar 6y ago
If it's just blocked, you could probably look at the io_uring kthreads. But as I mentioned in another comment, bpftrace is probably a more useful tool for things like this (and it's useful for general kernel debugging too!).
788.
by cyphar 6y ago
You would want to start using the more modern debugging tools, namely dynamic tracing tools like bpftrace[1]. Though in fairness, it might be a tad tricky to get a trace for a specific file without some more complicated scripts. [1]: https
789.
by cyphar 6y ago
I think you're missing the point being made. GP isn't saying these schemes require a central server. The point they're making is that PoET assumes that Intel SGX actually provides the properties that Intel claims (namely that
790.
by cyphar 6y ago
> Why can the governor general replace a prime minister who has a majority? It's one of their constitutional rights. Their purpose is to act as a surrogate for the Head of State (currently Queen Elizabeth II) and the role was design
791.
by cyphar 6y ago
I'm not endorsing, nor turning a blind eye to China's government. I was responding to a comment which was only critising China, while arguing that the US has all of these protections and thus was effectively endorsing the US gover
792.
by cyphar 6y ago
I'm not sure I see where we're disagreeing. Yes, if you have a connection to China then you should opt to evade CCP surveillance and there are many CCP policies which are awful towards groups in China. That's what I said. My
793.
by cyphar 6y ago
I disagree with several aspects of your depiction of the US's "robust court system" (especially in the case of mass surveillance). There have been several attempts by citizens to sue the US Government for their illegal and in
794.
by cyphar 6y ago
The most likely explanation to me is (4) -- but it's because flour (et al) producers are struggling to get their flour into the consumer supply chain. Shipping goods to businesses is quite different to shipping it to consumers -- busin
795.
by cyphar 6y ago
Also, begin every shell script you write with set -Eeuo pipefail
796.
by cyphar 6y ago
Mirrors are generally better because you get shorter resilver times and you don't stress all the disks in your pool when you resilver (which is why a lot of disk failures happen during RAID5 rebuilds -- the rest of the pool's disk
797.
by cyphar 6y ago
People have been arguing about where the asterisk should be for a very long time. The main counter-argument to the construction you used is that multiple variable declaration immediately looks ugly given the current rules of C variable decl
798.
by cyphar 6y ago
I do think this topic is something it doesn't hurt to be mindful of. However, it's pretty clear to me that the author's first language is not English. One of my mother tongues has gendered pronouns, and I find one of the simp
799.
by cyphar 6y ago
Unless you're more than 700 years old, you're not older than common usage of singular "they" (which entered common usage in the 14th century). It's honestly not that new of a concept. I'm honestly always a litt
800.
by cyphar 7y ago
A pretty good overview of the world of OCI containers, and I really appreciate the shout-out to umoci. I will admit that I did get a little fidgety when you started talking about --detach as well as the internals of /var/run/
801.
by cyphar 7y ago
No it doesn't. You know that the result of the computation for an individual qubit will be either 0 or 1 (otherwise it would be useless -- measuring only gives you one bit of information), so you construct the system such that after th
802.
by cyphar 7y ago
You can't, it's a fundamental aspect of quantum mechanics (measuring any entangled system collapses it because you've forced the system into a state by measuring it). The idea is that you structure the QC system such that the
803.
by cyphar 7y ago
CRIU does work on mainline kernels and has for several years. However, it is still being actively developed (userfaultfd is the example the article uses -- a mainline feature which is still seeing lots of development). It doesn't usual
804.
by cyphar 7y ago
I was basing it on the public statements of the Health Minister[1]. Now, it's very possible that they'll release it tomorrow and this whole discussion will have been a waste of time -- but at the time of writing the Minister for G
805.
by cyphar 7y ago
They didn't say it was for national security ("or some other such rubbish" was the point I was making -- that it was a bullshit reason, not that it was a direct quote). The Health Minister claimed that having the source code
806.
by cyphar 7y ago
You're agreeing with the OP. The point they were making was that the Australian government could've gotten the source code under an alternative license by asking the sole copyright holder (which I believe is either the Singaporean
807.
by cyphar 7y ago
You need to make sure that the culture is stable before you use it -- it should smell sour, but with no other foul smells. In the first week of a new starter, you shouldn't use it because the bacterial cultures are still fighting for d
808.
by cyphar 7y ago
In the US, the public doesn't vote for the president directly. They elect electors for their state who then vote for the president. This system is called the electoral college and the net result is that a candidate can win the popular
809.
by cyphar 7y ago
Dough will rise just as well without any added sugar -- the starches in the flour are the primary food source for the yeast. If you don't believe me, try it yourself. The purpose of sugar in doughs is to assist browning -- especially a
810.
by cyphar 7y ago
> The best thing it does still is books. Well, that's a pretty strong indictment of how badly their business operates. Every book I've ever ordered from Amazon has been damaged (either badly folded covers or even ripped pages).

More ›