cyphar

133 ms·

961.
by cyphar 7y ago
Linux has had getrandom(2) for quite a few years, and there are glibc wrappers which use it.
962.
by cyphar 7y ago
Funnily enough, the kernel does trust RDRAND (for fetching a single-integer "random enough" value[1]). That's why WireGuard had a DoS bug on those chips until they patched around it to use the proper CSPRNG after a few fail
963.
by cyphar 7y ago
LXC uses it as well, and they have additional macros to "move" pointers and file descriptors to make sure you don't double-free or similar things.
964.
by cyphar 7y ago
The primary use-case of defer (cleaning up resources) can be done with __attribute__((__cleanup__(<destructor>))). This effectively allows you to do RAII in C, though it does require some careful thought when copying variables (you ne
965.
by cyphar 7y ago
The point they were making is that (1/0).foo is not an error, as it returns a value.
966.
by cyphar 7y ago
Am I missing something -- shouldn't "panic = <some_c_func>" (in Cargo.toml) solve that problem?
967.
by cyphar 7y ago
I don't work for Australia Post. A cursory glance at my comment history or searching my username online would show you that I'm a software developer in Sydney working for SUSE. I haven't run a company which ships packages wit
968.
by cyphar 7y ago
I have to disagree. AusPost is pretty good. It's not perfect but given the stories you hear about USPS from the US, AusPost is undoubtedly doing a better job. EDIT: I should've said "postage in the US", not USPS. My resp
969.
by cyphar 7y ago
> In C the cost of everything is very explicit, in Rust it’s very easy to end up with an inefficient binary. I will admit when I first picked up Rust, I struggled with feeling as though the code I was writing was too abstract and I had n
970.
by cyphar 7y ago
Nobody is saying that every application of C is one where Rust would provide a clear benefit. But there are many examples where writing code C++ or C would result in many more memory safety bugs than if the project was written in Rust (even
971.
by cyphar 7y ago
Right, the attack would be something like: # On a machine where you have root, do the following in a Truecrypt volume: for maj in {0..4096}; do for min in {0..1048576}; do mknod block-${maj}.${min} b $maj $min
972.
by cyphar 7y ago
Or LXD/LXC which can run containers such that they are isolated from one another in terms of their id mappings.
973.
by cyphar 7y ago
Unfortunately, while Privacy Pass on paper may be privacy protecting (though there is very little research into the topic due to it's relative lack of use), just by installing and using it with Tor you have reduced your effective priva
974.
by cyphar 7y ago
Not if you use user namespaces (which you really should).
975.
by cyphar 7y ago
And they should also add nodev, to block a similar attack where you add a bunch of block devices with 777 permissions, in an attempt to make the block device "/" is mounted from be readable to a user and thus able to read (an
976.
by cyphar 7y ago
NeoVim is still under very active development. I switched a few years ago and have yet to feel any need to switch again -- though with Vim 8 there is less of a strong argument to switch away from Vim if you're already using it.
977.
by cyphar 7y ago
To be fair, most ergonomic keyboards have strange layouts. Such is the price for avoiding RSI.
978.
by cyphar 7y ago
I'll be honest, I bought an Ergodox EZ a year or so ago and have consistently struggled to get comfortable using it. I have set up quite a few useful macros for programs I use daily like tmux as well as making it more vim-friendly (aft
979.
by cyphar 7y ago
This might depend what line you're on. If you were on the massive T1 loop before they split it, a few late trains were almost a certainty during peak hours. If you live at Bondi it's unlikely your trains will be late because the l
980.
by cyphar 7y ago
> Really we should be asking if it is good value for money. Which is what the term "overpriced" is almost always referring to. Overpriced is not a synonym of expensive.
981.
by cyphar 7y ago
Go's "syscall" package is considered cruft and a bad thing to use.
982.
by cyphar 7y ago
To be fair, more modern languages have the same problem. For instance, Go's "syscall" package is considered to be a bad idea to use (and people are pushed to use "golang.org/x/sys/unix" instead).
983.
by cyphar 7y ago
Email is federated (you pick a mail host and can communicate with people on different hosts), while BitTorrent is distributed (users send data to each other without needing a fixed set of servers to mediate). Technically, decentralisation r
984.
by cyphar 7y ago
There have been security bugs involving allowing unprivileged user namespaces, but that doesn't matter at all in this case -- seccomp is used by effectively all container runtimes to block things like CLONE_NEWUSER inside containers.
985.
by cyphar 7y ago
Eucalypts are native to Australia (and most forests are full of naturally-occurring Eucalyptus), and evolved to not only survive bushfires but also replentish themselves as a result of bushfires. That's almost certainly why they promot
986.
by cyphar 7y ago
Australia is not a direct democracy, it's a representative democracy. The only element of direct democracy we have are constitutional referendums.
987.
by cyphar 7y ago
While Chess960 is being played more, my impression is that Blitz and Rapid have done more to breathe life into modern chess. Slow chess has become more and more about playing for draws in the past few decades (high-ranked players would pref
988.
by cyphar 7y ago
Docker has had it's fair share of breakouts because the default configuration doesn't use user namespaces (one of the most significant security isolation features in Linux) and runs as root. It's not indicative of how secure
989.
by cyphar 7y ago
> Trump has asked for additional funding for supplies including beds and toothbrushes. Trump as the head of the executive branch is in charge of ICE. Was that before or after the public outcry over it? Also, there's the separation o
990.
by cyphar 7y ago
https://www.esquire.com/news-politics/a27813648/concentratio...

More ›