dfox

76 ms·

901.
by dfox 7y ago
Whether shell is memory-safe is completely irrelevant as the language has more significant safety issues with regards to quoting, eval and such. And second reason why it is irrelevant is that the traditional bunch-of-shell-scripts init syst
902.
by dfox 7y ago
I don’t know what EDA software was used to produce the schematics, but it certainly wasn’t KiCad. Also from the overall style it looks to me like the schematics actually were created by some east asian ODM and not by Puri.sm themselves.
903.
by dfox 7y ago
The main point that should be emphasised is that any encoding with fixed size unicode codepoints is mostly unnecessary as you mostly don’t care about the codepoints but about how the resulting glyphs or even glyph runs look like. My experie
904.
by dfox 7y ago
Is there any way to do this the other way around and integrate new rust code into non-trivial C project with non-trivial build system?
905.
by dfox 7y ago
I have the feeling that you are talking about european style socket with shallower than normal recess, ie. CEE 7/1. These sockets are sometimes used in Benelux countries for RCD protected circuits without PE, and should only be used fo
906.
by dfox 7y ago
For me: you don't want to. The underlying Darwin/XNU layer is probably the most quirky (or depending on your PoV outright broken) unix-ish system you will see in general use today.
907.
by dfox 7y ago
Well in fact I gave up about 10 years ago :)
908.
by dfox 7y ago
My .emacs on this machine is almost literally this: (custom-set-variables '(indent-tabs-mode nil) '(inhibit-startup-screen t) '(menu-bar-mode nil) '(show-paren-mode t) '(tool-bar-mode nil)) On
909.
by dfox 7y ago
qsort(3) or even ftw(3) is the simple case. You can either dynamically generate trampoline code with exactly bounded dynamic scope (and even do the gcc-style executable stack hack) or simply stash the whole context in some TLS region and co
910.
by dfox 7y ago
It is a way to create reasonably isolated environment without the VM overhead. On Linux it is usually called container and implemented in terms of clone() and cgroups, BSDs have jails, Solaris has zones and for Plan 9 that is trivial concep
911.
by dfox 7y ago
That is essentially the feature of the “good” thinkpads. You can replace almost anything, but the whole thing is built in this weird upside-down way and replacing anything that you really want to replace means that you have to take the whol
912.
by dfox 7y ago
I somehow feel compelled to point out that this idea of union/overlay FS layers has nothing to do with containers per se. But on the other hand is somehow critical for why containers got popular as that is the way to make the whole thi
913.
by dfox 7y ago
> I recorded about 10 seconds of the ENTIRE FM band to a ramdisk We live in wonderful age of SDR where this is not only possible but apparently also the way how even entry-level car infotainment's FM receiver works. And it still ama
914.
by dfox 7y ago
The problem is that the driver situation is horrible mess and also that there are three totally incompatible generations of the technology. The driver that works best is udl, which integrates with KMS/DRI and presents the dongle like a
915.
by dfox 7y ago
In my view this is some kind of argument as for why you should not (ab)use TPM as general purpose HSM (ie. for something that it is not designed for) and it does not say much about the security when it is used correctly (as a local attacker
916.
by dfox 7y ago
IIRC Project Indiana was mostly about replacing Solaris' SysV packages based packaging system with IPS, so it even originally referred to something that can be considered as "Solaris distribution".
917.
by dfox 7y ago
In context of parsing the situation when all the state machine/language theory has it's place is when you have some reason to care about compiler passes and generate output while reading input. That is, when you are not constructi
918.
by dfox 7y ago
Parsing C++ is not that hard if you use hand rolled recursive descent parser. On the other hand hacking some parser generator framework to be able to parse C++ is hard and IMO mostly pointless busywork.
919.
by dfox 7y ago
Somewhat surprising fact about most PostgreSQL deployments is that most of the frequently accessed tuples will fit into RAM and it handles this usecase really well (to the extent that people who don’t know any better do not see any issue wi
920.
by dfox 7y ago
The point there is that you don’t need a buffer for whole line, you only have to find the line terminators. Something like: printf(“0: “); ln = 1; while ((ch = getch()) != EOF) { putch(ch); if (ch == EOL) {
921.
by dfox 7y ago
With the O() notation the units are some arbitrary computation step or arbitrary unit of memory, which could even mean matrix multiplication of two 1024x1024 matrices of doubles. The whole point of big-O notation is that you don’t care abou
922.
by dfox 7y ago
CDDA is purely CAV optical medium.
923.
by dfox 7y ago
IMO the reason why Service Broker is mostly unknown and undervaluated is the name itself. It sounds like something horribly complicated, while it in fact is relatively straightforward implementation of pub/sub.
924.
by dfox 7y ago
The LISTEN/NOTIFY queue has nothing to do with MVCC. Only reason why it exists is that postgresql synchronizes the notification events with transaction boundaries (ie. you get notifications only when you don’t have active transaction).
925.
by dfox 7y ago
This behavior is not a bug much less a security vulnerability. If the camera would try to handle this in some "clever" way (and thus started to drop data), that would be a bug.
926.
by dfox 7y ago
Traditional Unix implementation of ps and similar tools work by directly reading the appropriate data structures from kernel (through /dev/kmem or something to that effect). Modern BSD implementations have libkvm.a, that abstracts
927.
by dfox 7y ago
While it is true that hooking _all_ keyboard input requires SYSTEM access (because it involves either impersonating the session manager or injecting code into kernel), you don’t really need that to exfiltrate passwords for random websites t
928.
by dfox 7y ago
If the Channel ID is included it stops MITM completely. In fact doing the authentication inside the secure channel in a way that depends on the key that is used by such channel is the best way to perform mutual authentication. In MitM case
929.
by dfox 7y ago
CDATA still does not allow you to include even arbitrary sequences of unicode codepoints, not to mention arbitrary binary data. On the other hand HTTP is in fact a binary protocol and there is perfectly good way to transport sets of binary
930.
by dfox 7y ago
No. get_random_u32() simply returns result of RDRAND if RDRAND is available regardless of any runtime configuration. For me that is pretty significant issue, because it is documented as being based on separate kernel-only CSPRNG with somewh

More ›