Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
geocar
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
8 ms
·
61.
▲
by
geocar
5mo ago
> if the odds haven't properly converged what information does watching the prices get you before-the-fact? How do you know we are "before-the fact"? Because these numbers are bananas? Somebody just tanked their job, their
62.
▲
by
geocar
5mo ago
> What's the appeal of collecting high priced watches? You can carry them on your person through airports and other places reasonably unmolested in a way carrying a bunch of cash isn't so easy. > Is it kind of like art colle
63.
▲
by
geocar
5mo ago
Dereferencing does have a postfix notation, so you can try it (sort of): #define $ [0] then you can say ptr $[0] or ptr[0]$ and see if it's really better...
64.
▲
by
geocar
5mo ago
Specifically? I'm thinking of qmail. qmail was at one point the second most widely deployed email server, handling the majority of online mail. It wasn't a research project; it's not obscure. Yahoo used to use it. And what
65.
▲
by
geocar
5mo ago
great. still enjoying the algarve working on my secret projects in the sun. you able to find a reason to come visit? or am i going to have to come to blighty so we can hang out?
66.
▲
by
geocar
5mo ago
100% it's the safer option. The software with the best security track record of all time is written in C.
67.
▲
by
geocar
5mo ago
kill -SIGWINCH -1 will redraw all your windows.
68.
▲
by
geocar
5mo ago
> So does this mean that neither did the original utils have any test harness, the process of rewriting them didn't start by creating one either? Yes. > Sure there are many edge cases, but surely the OS and FS can just be abstrac
69.
▲
by
geocar
5mo ago
If the attacker can control newroot/etc/passwd they _still_ get getpwnam to return whatever userid they want. The solution is to not lookup --userspec=username:group inside the chrooted-space, but from outside. Also, hi how's
70.
▲
by
geocar
5mo ago
> Did you mean CLONE_NEWUSER? [~] it's an entirely different syscall that does something vaguely similar Yes. And I agree, but it also enables chroot(2) to work without being root, which was the syscall we are talking about, and whi
71.
▲
by
geocar
5mo ago
> And "control a directory" is weasel words; I did not choose the term to confuse you, that's from the definition document linked to the CVE: https://cwe.mitre.org/data/definitions/426.html The C
72.
▲
by
geocar
5mo ago
> The root cause of some of the bugs seems to be the opaque nature of some of the Unix API. Seems and smells is weasel words. The root cause is not thinking: Why is root chrooting into a directory they do not control? Whatever you chro
73.
▲
by
geocar
6mo ago
Read the paper. On the third page is a "Significance statement".
74.
▲
by
geocar
6mo ago
I can understand people being entertained by typing rm -rf / The idea that Copilot can do the same, and I can't sue Microsoft for it seems to me a similar kind of entertainment. Unfortunately, my company isn't allowed to purc
75.
▲
by
geocar
7mo ago
> I didn't say anything about increasing cases You also didn't read the source from where that link was from. > What matters is the order established in recent history. > Colonization was normalized Sounds pretty racist m
76.
▲
by
geocar
7mo ago
> The linked wikipedia article specifically talks about China struggling to enforce Chinese law. Here's a quote: > > Despite making efforts in intellectual property protection in China, a major obstacle in prosecution is corru
77.
▲
by
geocar
7mo ago
> You can easily look up[1] how China struggles with effective enforcement of IP laws. I didn't see anything in there about Chinese companies violating Chinese law. Can you so easily look up how American companies struggle with effe
78.
▲
by
geocar
7mo ago
> Do you think Chinese LLMs acquired training data legitimately? I think they probably acquire it in accordance with Chinese law. > but I don't think the US "started it" to be fair. Who are you quoting with those marks?
79.
▲
by
geocar
7mo ago
Initial thoughts are it's a meh protocol that does not look well thought-out, has fewer features than SSH, to the point I'm not sure it deserves to be called SSH3 and not telnet-over-websockets. Also, there's already an SSH3
80.
▲
by
geocar
7mo ago
Specifically to use a different key for each host.
81.
▲
by
geocar
7mo ago
This has history: https://egopoly.com/2008/02/ssh-slow-on-leopard.html I also know of https://github.com/Crosse/sshsrv and other tricks I agree more SRV records would have helped with a treme
82.
▲
by
geocar
7mo ago
> The HTTP traffic goes to a server (a reverse proxy, say nginx) on the host, which then reads it and proxies it to the correct VM. That's one implementation. Another implementation is the proxy looks at the SNI information in the C
83.
▲
by
geocar
7mo ago
Why exactly do you think should GitHub be penalized? Talk about perverse.
84.
▲
by
geocar
7mo ago
As this example shows, by all sites using nofollow, Github is improving the SEO of spam sites. What the fuck are you talking about?
85.
▲
by
geocar
7mo ago
I don't see any reason that GitHub should use rel="nofollow" Github only has authority because people put their shit there; if people want to point that back at the "right" website, Github should be helping facilita
86.
▲
by
geocar
8mo ago
> No need to be a dick. But there was a need for you to characterise me so? > So what problem is this solving? What makes you ask me that instead of reading the website and papers for yourself? Do you think I could possibly know enoug
87.
▲
by
geocar
8mo ago
I completely agree: If it is ugly-as-sin-but-useful I will learn it. The aesthetic of mathematics as it appears in journals is I think questionable, but undeniably convenient for communication, so it is every language making the case that
88.
▲
by
geocar
8mo ago
> Just because functions happen to be sets ZF does not mean sets of functions are functions. O(...) denotes a set of functions. We can enumerate all programs up to a given length, so up to that limit all sets of functions are functions.
89.
▲
by
geocar
8mo ago
> "I don't like having my time wasted" does not imply anything about one's skill in a field. I have no idea what you think you just said, but I did not say anything like that. > Most of the internet is noise, a
90.
▲
by
geocar
8mo ago
> I’m an expert and I find it very frustrating So you say, but I think _I'm_ an expert too, and I wasn't frustrated in the slightest. Maybe you're just not an expert in this space. Did you consider that? Of course it would
More ›