eeZah7Ux

73 ms·

781.
by eeZah7Ux 7y ago
Coming from a company with a 40 years long tradition of EEE? Nooo...
782.
by eeZah7Ux 7y ago
A good bricklayers places MORE bricks in a day than others. A good construction engineer builds a house using LESS concrete that others. I'd rather be a good software engineer than a "x10 developer".
783.
by eeZah7Ux 7y ago
Or many other languages.
784.
by eeZah7Ux 7y ago
Even if something is "in some sense normal" it is still completely unacceptable.
785.
by eeZah7Ux 7y ago
"Microsoft supports Open Source now!" /s
786.
by eeZah7Ux 7y ago
"Why are you being so dense?" is an example of a question that includes a statement.
787.
by eeZah7Ux 7y ago
The silent downvotes are telling.
788.
by eeZah7Ux 7y ago
This is not some large corporate-driven, heavily marketed project. It is real , community FLOSS.
789.
by eeZah7Ux 7y ago
> Apache 2.0 mixes US Contract law with Copyright law, and that is considered wholly "not permissive enough" by many And also too permissive by many other. It does not protect from tivoization, freeloading and yet it's not
790.
by eeZah7Ux 7y ago
...and yet SSHing on a production system to make configuration changes is prohibited in many large companies including some FAANGs. Because you (or some intern hired a week ago) are 1 typo away from making a disaster. For the record, securi
791.
by eeZah7Ux 7y ago
I use different languages, none of which is company-driven or had significant marketing campaigns, starting from Python. Same for other projects (not programming languages).
792.
by eeZah7Ux 7y ago
The downvotes are really telling.
793.
by eeZah7Ux 7y ago
Nobody is pointing at the elephant in the room: GSM, WiFi, TCP/IP, SIM cards, debit cards could provide strong privacy for everybody by default. Requiring random, temporary, untracked addresses by law is possible and achievable. Yet, s
794.
by eeZah7Ux 7y ago
...especially when the large majority of HN readers are already aware of rust "thanks" to the rust evangelism strikeforce.
795.
by eeZah7Ux 7y ago
> Who says the hardware doesn't have a separate IC overriding the ostensibly clean firmware? Cost, space on the PCB or on the die, additional complexity, and it's a very big thing to keep secret. And if it's found it becom
796.
by eeZah7Ux 7y ago
No. FOSS firmware immediately makes backdoors thousand times more risky to implement.
797.
by eeZah7Ux 7y ago
> Open source has near-zero appeal outside of the hacker niche Not really. Plenty of people are willing to modify the technology they use, both professionally and as a hobby. You don't need to be a developer to understand that you c
798.
by eeZah7Ux 7y ago
> It’s all about creating a brand and selling it these days. Yes, and that's a big problem. Nowadays huge numbers of developers pick choose technologies because they are hyped up (aka marketed) rather than being wary of them.
799.
by eeZah7Ux 7y ago
Just use an onion service.
800.
by eeZah7Ux 7y ago
A system designed to SSH into production host with high privileges and make changes automatically instead of enforcing staging...
801.
by eeZah7Ux 7y ago
It has a huge attack surface, also a lot of its code runs with high privileges. There's plenty of documentation on this.
802.
by eeZah7Ux 7y ago
Trolls (either human or bots) are way more dangerous that TV propaganda because the act as legitimate actors in the public discourse. It gives them the ability to hide between other people and manipulate the conversation.
803.
by eeZah7Ux 7y ago
Yet they are both security disasters.
804.
by eeZah7Ux 7y ago
I worked on some of the technologies you mentioned but I cannot disclose more. > So all the FAANGs use something like Kubernetes to manage infrastructure. No, you cannot just hand-wave that they are "like Kubernetes".
805.
by eeZah7Ux 7y ago
First, distribution do exactly that. The GPG chain of trust is preinstalled. Second, there are at least 3-4 more attacks possible during curl-bash. You can simply read the links on HN.
806.
by eeZah7Ux 7y ago
That's far from enough. Extremely far.
807.
by eeZah7Ux 7y ago
Wrong. You are trusting much more than that, including network components outside of your control and the author's. Plus you are pushing forward the bad pattern and being part of the problem. You are encouraging other authors and users
808.
by eeZah7Ux 7y ago
> A resource scheduler is more complex than not having one, but it solves the single-point-of-failure problem and the bin-packing CPU+memory problem. And yet various FAANGs choose not to use a smart scheduler, because it does not improve
809.
by eeZah7Ux 7y ago
Go ahead and compare the SLOC count with a parser for the "rec" format. Also, why are you ignoring the other points?
810.
by eeZah7Ux 7y ago
A security critical daemon running in docker? Given docker abysmal security track record?

More ›