dividuum

14 ms·

91.
by dividuum 2y ago
I wrote a little bit more about this here: https://community.info-beamer.com/t/an-updated-approach-to-c... I’m a huge fan of building minimal self-contained tools, so all of the C programs statically link in the requir
92.
by dividuum 2y ago
Is using ClamAv because of some compliance checklist that forces you to include a virus scanner in there? Otherwise I don’t see how adding a ton of additional complexity with a proven track record of CVEs would add any security at all.
93.
by dividuum 2y ago
I recently redesigned my stack of validating uploaded files and creating thumbnails from them. My approach is to have different binaries per file type (currently images JPEG/PNG, videos H264/265 and truetype fonts). Each of them i
94.
by dividuum 2y ago
I'm pretty sure ClamAv would add more vulnerabilities to your stack than it might prevent from being exploited.
95.
by dividuum 2y ago
I'm surprised they basically choose to ignore explicitly made CAA records, if they don’t match any of their CAs. Why bother with setting up CAA records at all if they will be silently ignored?
96.
by dividuum 2y ago
I assume it meant to be arg1 to showcase that the malloc for arg1 can be free'd without resulting in a use-after-free after having copied the value out of argv[1] within the coroutine.
97.
by dividuum 3y ago
Hope this doesn’t come across as negative, but I’m not sure why one would use rsync when dedicated solutions like restic exists that are superior in almost all aspects, except maybe raw copy performance: built-in flexible retention handling
98.
by dividuum 3y ago
Mong Kok in Hong Kong is the first I’ve seen these type of cross-platform interchange: https://en.wikipedia.org/wiki/Mong_Kok_station
99.
by dividuum 3y ago
Color palette definitely counts. I remember the lookup table Quake used to map its 256 color VGA palette to itself to implement light levels: https://quakewiki.org/wiki/Quake_palette#Colormap You now basically have a t
100.
by dividuum 3y ago
The alternative is to use the „labels as values“ feature of GCC. You can take the address of a label and later jump to it. I contributed the code that’s now in lc-addrlabels.h back in 2005 :-) I also used the GCC local labels feature to com
101.
by dividuum 3y ago
Sounds reasonable, but the secure boot mechanism of the Pi not only allows verifying the boot chain but also enables you to implement disk encryption with keys stored in the the hardware itself that you can then only access from the running
102.
by dividuum 3y ago
True, but now I’m curious what kind of cryptographic operation you’re doing that would need to be protected from local root. Because that should be the only case a TPM is helpful (compared to the Pi secure boot option) and in that case the
103.
by dividuum 3y ago
Fellow Raspberry Pi digital signage CEO here :). Surprised you didn’t mention the secure boot support, available since the Pi4, in your talk. While our service doesn’t use it (yet?) it sounds quite solid on paper and allows you to protect t
104.
by dividuum 3y ago
Yep. Without leaving the browser, https://news.ycombinator.com/cdn-cgi/trace confirms that.
105.
by dividuum 3y ago
Or if you need another antique example: opentnl, the network library use in a 2001 released game Tribes 2 had „client puzzles“ (aka PoW): https://github.com/kocubinski/opentnl/blob/master/tnl/client.
106.
by dividuum 3y ago
Why limit yourself to walking when you can build them :) https://store.steampowered.com/app/1122120/STATIONflow/
107.
by dividuum 3y ago
Not saying this isn't true, but wtf? How could such a laughable number of users cause any kind of performance issue?
108.
by dividuum 3y ago
Why is it even possible to create a new Google account with an email like 'user+suffix@domain' if 'user@domain' is already handled by google's mail servers and thus applies the plus-routing rules? Even in the non-ex
109.
by dividuum 3y ago
It should automatically map all the commits of each file to .old, .older, .old2.old and so on. For the true „version management in a file system“ feeling :-)
110.
by dividuum 3y ago
I do something like that for my home assistant: I have a few shelly smart plugs that can scan BLE. They filter for apple watches and send the MAC and RSSI to my home assistant where a small neural net then tries to detect the location withi
111.
by dividuum 3y ago
Precursor ( https://www.crowdsupply.com/sutajio-kosagi/precursor ) is interesting with its use of an FPGA.
112.
by dividuum 3y ago
There's Retro City Rampage (which also has a DOS version) and Shakedown Hawaii.
113.
by dividuum 3y ago
Pass4wallet is a nice app for that, if you’re ok with your pass data being (according to their privacy policy) sent to their server, signed and then deleted.
114.
by dividuum 3y ago
Maybe those platforms should take a little cut from any income they make from apps to pay for more oversight and developer support… Oh
115.
by dividuum 3y ago
Facetime supports screen sharing: https://support.apple.com/en-us/HT212734
116.
by dividuum 3y ago
I'm incredibly fearful of the day Valve's leadership changes at some point. They really are one of the few bigger players (heh) in the gaming industry that's not driven by corporate greed.
117.
by dividuum 3y ago
Youtube link: https://www.youtube.com/watch?v=oCPVNLLo-mI
118.
by dividuum 3y ago
Seriously: just buy a station wagon ;)
119.
by dividuum 3y ago
You just know it would end up looking like the TV in idiocrazy after a year.
120.
by dividuum 3y ago
You might enjoy Kitboga using that to mess with tech support scammers: https://www.youtube.com/watch?v=F0peLpovDB8 and https://www.youtube.com/watch?v=XxWFdFhHd9U

More ›