darkamaul

5 ms·

61.
by darkamaul 1y ago
The comment above is something I love about HN. I never knew this existed and would not have even thought to search for it but, but that’s something that I see me using everyday.
62.
by darkamaul 1y ago
I recently made the move from a Framework to a M4. And god that’s so convenient to simply be able to close or open the lid to instantly use the laptop. On the Framework, I had to get it plugged before I could turn it on, due to a problem wi
63.
by darkamaul 1y ago
The short-term effects of relaxing vaccine requirements won’t be obvious right away, but the consequences will likely compound over time. I don’t know how much time of lower coverage it will take before we start to see measles, rabies, or o
64.
by darkamaul 1y ago
The results highlighted in cURL are truly promising. Finally, it seems to be an augmented vulnerability researcher with deep knowledge across various topics. The missing escape in the Telnet payload is trivial to find for someone with exten
65.
by darkamaul 1y ago
Actually, even for families with kids, the safer option is still bikes and low-car environments. Fewer cars means less air pollution, less noise, and less sedentary behavior for both kids and adults. The data we have shows that the presence
66.
by darkamaul 1y ago
Nothing. However, exfiltrating a token is much more easy than modifying the workflow itself. A token is usually simply stored in an env variable.
67.
by darkamaul 1y ago
Really awesome write-up. The OCInception challenge is based around creating a self-replicating Podman image archive that, when loaded, produces another image which in turn produces yet another, etc. The author digs deep into Podman. The end
68.
OCInception Writeup(github.com)
1 points by darkamaul 1y ago|1 comments
69.
by darkamaul 1y ago
> We do not run postinstall scripts. This prevents packages from executing arbitrary code during installation. I get the intent, but I’m not sure this really buys much. If a package is compromised, the whole thing is already untrustworth
70.
by darkamaul 1y ago
Huge kudos to Mike for handling this attack and appropriately contacting the maintainers. I’m also glad to see yet another case where having Trusted Publishing configured would have prevented the attack. That’s a cheap defense that has prov
71.
by darkamaul 1y ago
Nick Wellnhofer is stepping away from libxml2 after a decade of unpaid maintenance. He’s forking it under the AGPL, but that will probably scare off most corporate users. Meanwhile libxml2 is still everywhere. Without someone with real back
72.
by darkamaul 1y ago
Impressive work! This makes me wonder if Microsoft’s commitment to long-term support is part of the problem: instead of deprecating these ancient APIs they keep them on life-support, but forget some "regression-test" on how they i
73.
by darkamaul 1y ago
I can’t really comment on video calls in Matrix since I never used them in Slack either. For me the main draw is having one tool that does one job well, rather than trying to be the all-in-one hub for everything. I’d rather have messaging i
74.
by darkamaul 1y ago
> That repo still contained a GitHub Actions secret — a npm token with broad publish rights. One of the advantages of Trusted Publishing [0] is that we no longer need long-lived tokens with publish rights. Instead, tokens are generated o
75.
by darkamaul 1y ago
I'm also using Orion on iOS, so far without any major issues. And adblocking still works great here.
76.
by darkamaul 1y ago
We tolerate way too much noise in our daily lives, especially in dense cities. It’s a hidden tax on our health. Constant low-level noise has been linked to stress, sleep disruption, and even cardiovascular issues. What bothers me is that we
77.
by darkamaul 1y ago
As a European, I can’t help but feel a bit sad that we’re missing out on the driverless side of things. It seems like most of the meaningful deployments are happening in the US (Waymo, Cruise). I’d really like to see either a Waymo competit
78.
by darkamaul 1y ago
In an age where everything is about clouds, it’s pretty amazing to see a high-profile service like this running smoothly on just a couple of 2 GB VMs. That’s less RAM than a mid-range laptop, and those machines struggle to run a modern brow
79.
by darkamaul 1y ago
Here [0] is the partial query on the ClickHouse dataset, with different results due to a quota error [1]. [0] https://sql.clickhouse.com?query=U0VMRUNUIHByb2plY3QsIE1BWCh... [1] Quota read limit exceeded. Results may be incomple
80.
by darkamaul 1y ago
What I find crucial about Framasoft’s work is not the idea that PeerTube will « beat » YouTube (that’s not even the goal), but that it exists at all. A small association like theirs reminds us that the way things are done online is not set
81.
by darkamaul 1y ago
I’ve never seen the appeal of using a pre-made mix for pastry. We already eat too much processed food in our daily lives, and pastry, something that should be a rare pleasure, is worth taking the time to make properly. You don’t need all th
82.
by darkamaul 1y ago
Awesome project! Looking forward to seeing it included in the next CCC CTF, like SerenityOS [0]. [0] https://2019.ctf.link/internal/challenge/1fef0346-a1de-4aa4-...
83.
by darkamaul 1y ago
So I guess this is `uv`, but for PHP? If it has remotely the same success, that would be a huge win for the ecosystem!
84.
by darkamaul 1y ago
I’d guess Germany’s opposition to French nuclear power wasn’t just about the technology itself, but tied up with political and economic strategy. There must have been stronger political reasons behind it than simply « not liking nuclear ».
85.
by darkamaul 1y ago
All the safety and countermeasure costs here ultimately stem from regulation. If we allowed less safe power plants, they would likely be cheaper to build and operate. However, I’m not sure I want private for profits actor deciding the level
86.
by darkamaul 1y ago
This is amazing. Not that long ago, even getting a model to reliably output the same character multiple times was a real challenge. Now we’re seeing this level of composition and consistency. The pace of progress in generative models is wil
87.
by darkamaul 1y ago
I believe Determinate Nix has a graphical installer but I’ve never used it. [0] [0] https://docs.determinate.systems/determinate-nix
88.
by darkamaul 1y ago
I’ve been configuring my Framework laptop with NixOS for a few years. The original premise of a reproducible OS was really appealing, but I’ve definitely run into drawbacks. The main one is that everything seems to take forever if you’re no
89.
by darkamaul 1y ago
There’s a reason why most Parisian families use a Yoyo stroller or another lightweight, foldable model: you can easily take them on the subway, and if you need help with the stairs, people are always willing to help (I’ve never seen anyone
90.
by darkamaul 1y ago
Really informative read, I agree that Homebrew’s naming conventions can be frustrating at times, but overall it’s such a great tool. I hadn’t realized it was this simple to spin up your own tap for distributing tools. How does this compare

More ›