danudey

20 ms·

331.
by danudey 1y ago
One great way you can make things more secure is by reducing attack surface. sudo is huge and old, and has tons of functionality that almost no one uses (like --chroot). A from-scratch rewrite with a focus on the 5% of features that 99% of
332.
by danudey 1y ago
This is just "change is bad" FUD. Working on macOS for years taught me that most people are going to write code that supports what they can test even if there's a better way that works across more systems. Heck, even using &#
333.
by danudey 1y ago
It's not there yet, but there are projects to build/run it for qemu: https://github.com/OpenDevicePartnership/patina-dxe-core-qem...
334.
by danudey 1y ago
Yep! See here[0] and here[1] for patina-qemu-related repositories/projects! [0] https://github.com/OpenDevicePartnership/patina-qemu [1] https://github.com/OpenDevicePartnership/patina-dxe-cor
335.
by danudey 1y ago
It can be correct and true while at the same time being bad-faith and user-hostile.
336.
by danudey 1y ago
The problem then is that you're making a valuable tool and giving it away and then wandering around hat in hand. That's not going to work for anyone. Also, taking away things that you've already given people for free so that
337.
by danudey 1y ago
There are a few challenges with open-source projects that want to also be commercial entities. One is obviously knowing what you can add-on that people will pay for; support, for one, but people want more features too. What could minio have
338.
by danudey 1y ago
Put the 14-year-olds on shift after school, put the adults on shift during the day. The teenagers won't have time to do homework but the schools aren't funded well enough to ensure a quality education anyway.
339.
by danudey 1y ago
Whether you're in the tech industry or the warehouse, everything I've heard about Amazon is that they work you as hard as they possibly can until you burn out and then they replace you with someone new. At least on the tech side y
340.
by danudey 1y ago
There's an article about it: https://archive.is/fPAlB Walmart executives seem to claim that the pay raise led to those outcomes; specifically, they talked to employees and realized that in order to get those outcomes t
341.
by danudey 1y ago
Note that you can still do things wrong even if you're doing "package management". This morning I updated Firefox through apt, and suddenly the "running" Firefox windows weren't attached to the dock icon, and c
342.
by danudey 1y ago
This is the main benefit of UBI specifically - if something is truly universal, you don't have to spend inordinate amounts of time, energy, labour, and money on making sure people don't get it. In fact, there are a lot of articles
343.
by danudey 1y ago
Yes, but IIRC when you run `pull_request_target` the credentials are to the target repository - i.e. the one you're merging into. When you run `pull_request`, it's to the source repository, the one the attacker is in control of.
344.
by danudey 1y ago
Apple releases betas of their OS specifically so that developers can try their apps on them. macOS is so prominent that Electron-using developers should have detected the problem and found a solution well before the general release.
345.
by danudey 1y ago
It seems as though a lot of arguments about this boil down to a few inane implications: 1. Apple should test every (common?) app and any change to the OS that they make that makes an app worse shouldn't be done regardless of why they w
346.
by danudey 1y ago
If you use Kubernetes and Calico you can use Wireguard to transparently encrypt in-cluster traffic[1] (or across clusters if you have cluster mesh configured). I wonder if we'll see more "automatic SDN over Wireguard" stuff l
347.
by danudey 1y ago
The example I linked uses alignas, but the key is knowing what value to pass. std::hardware_destructive_interference_size tells you what the current/target hardware's correct align value is, which is the challenge.
348.
by danudey 1y ago
Maybe the point isn't narrower lines in L1 but wider lines in L2? Implicitly bringing in more data to the L2 cache but allowing the CPU to pick smaller chunks of it into L1 cache to work on. Something like a forced prefetch or somethin
349.
by danudey 1y ago
Deepfake stuff, now that it's trivial to produce, is going to be used for an infinite amount of harassment, constant "look here's a video of AOC kicking a dog" posts, etc. The problem is that the potential for truly posi
350.
by danudey 1y ago
If there were a box you could buy that let you think of someone and then push a button and that person died, you could argue all you want that "the technology is just a tool, it's how you use it that matters" but it would be
351.
by danudey 1y ago
Something like C++17's `std::hardware_destructive_interference_size` would be nice; being able to just say "Align this variable to whatever the cache line size is on the architecture I'm building for". If you use these t
352.
by danudey 1y ago
Honestly I don't think there's much in here that's Go-specific other than the syntax itself. I've seen basically the same tricks used in C or C++. Was there any particular part that felt like it needed more explanation?
353.
by danudey 1y ago
I could imagine some kind of compiler declaration in C that would do something like specify break points - sort of like page breaks - for structs, or tell the compiler to automatically pad structs out so that components are on page boundari
354.
by danudey 1y ago
I'm not sure if golang has the same fundamental issues in common use, but in e.g. C you don't want the compiler reordering your structs or adding arbitrary padding because that makes it incompatible with other in-memory representa
355.
by danudey 1y ago
When the goal is "harassing someone into depression and suicide" though, the incentive will never go away. People are going to start doing things like this to be deliberately malicious, sending videos of their dead parents saying
356.
by danudey 1y ago
> Switch 2 is outdated over-priced hardware Per most reviewers (e.g. Digital Foundry), the Switch 2 is expensive but not over-priced for what you get (unless what you get is motion sickness from the overdriven LCD display). There's
357.
by danudey 1y ago
> furthermore some constructions that are short and natural in Japanese have no universally good English parallel One of my favourite things that clearly makes sense and sounds natural in Japanese but obviously doesn't translate wel
358.
by danudey 1y ago
Someone who knows English natively and Japanese sufficiently is necessary for producing quality subtitles; it's arguable that potentially having slightly less accurate subtitles (i.e. missing nuance) is better than having slightly less
359.
by danudey 1y ago
There are structures in Earth's mantle which are believed to be leftover chunks of Theia, which makes the connection feel quite plausible. https://www.newscientist.com/article/2400567-bits-of-an-anci...
360.
by danudey 1y ago
Or just mandate that the telcos do it and make it illegal to tell anyone about it.

More ›