hxtk

23 ms·

121.
by hxtk 6y ago
It's true that there's no one-liner you can use to sum up the whole field of software engineering, but that doesn't mean none of them are useful. I completely agree that things which need to be fast should be designed structu
122.
by hxtk 6y ago
It's true that most people who aren't doing sensitive work don't need cryptographically secure random number generators, but if you use something secure by default, it probably won't cause problems, and to the extent tha
123.
by hxtk 6y ago
In the theoretical sense what you care about is whether you can safely assume those hashes will always be unique. In the practical sense what matters is whether you can safely assume the hash for a particular user in a particular system wil
124.
by hxtk 6y ago
> I'm sure the nation-states have the money and people to work it out for themselves I'd suspect it's less a matter of preventing them from developing the capability and more a matter of making them spend their own money t
125.
by hxtk 6y ago
A lot of what they talk about also conflates security with anonymity. While it may be good advice for connecting to coffee shop WiFi on your laptop, for a secure network, being able to tell who performed an action is less of a security haza
126.
by hxtk 6y ago
> It doesn't matter because I don't spend any money, but I'll probably swap to Ubuntu next time I re-build my server. It kind of does matter, though, because at least for me, I am much more familiar with my home systems th
127.
by hxtk 6y ago
It's a bundle of jinja2 templates for YAML files defining Kubernetes API resources. There's an accompanying application, Helm, which applies values to the templates and handles the interaction with the Kubernetes API.
128.
by hxtk 6y ago
You can also just push a pen through the zipper to open it without leaving any evidence. Simply run both locked-together sliders back over the zipper to close it.
129.
by hxtk 6y ago
I had good experience using for rapidly-changing map data that needs to be queried based on location. Indexing over coordinates on the surface of a sphere is supported out of the box, which makes it simple to use with relatively low latency
130.
by hxtk 6y ago
> There is no situation in EMS where 250ms is the difference between life and death. It's not like the tones drop for a call and we say 'gee, I wish I could go help that person, but I still have this chart to write...'. Th
131.
by hxtk 6y ago
My understanding is that nftables and iptables+ip6tables+arptables+ebtables are for exactly the same set of use cases, with the latter being deprecated in favor of the former as the new replacement. RHEL 8 uses the nftables back end for fir
132.
by hxtk 6y ago
Yeah, I'm not sure if it's clear but the iptables family and its replacement, nftables, are what I'm referring to when I say netfilter. iptables/nftables are userspace applications and netfilter is the underlying kernel
133.
by hxtk 6y ago
The underlying netfilter has not been deprecated; the userspace application for managing it is just changing from the iptables (and ip6tables, ebtables, arptables, etc.) to nftables.
134.
by hxtk 6y ago
Sort of. By default, most SELinux systems have users logged in as `unconfined_u`, which as the name implies receives nearly no confinement. Any application that doesn't have a specific policy written for it will either inherit the doma
135.
by hxtk 6y ago
Here's a short article on it by Dan "Mr. SELinux" Walsh himself [1]. To understand it, though, you need to understand at least a little bit about type enforcement, which is a somewhat steep learning curve to get over. If you
136.
by hxtk 6y ago
Can you not just add an IPv6 entry for it in your hosts file, e.g., ::1? That would work in Linux and seems like a much less nuclear option than disabling ipv6 all together, but admittedly I've never worked with ipv6 networking on Macs
137.
by hxtk 6y ago
It has to do with the implementation of the networking. The DOCKER chain in the nat table gets hit by inbound traffic on the PREROUTING chain before UFW's chains on the filter table. IIRC, can get around this by directing UFW to write
138.
by hxtk 6y ago
In my case it's because (not counting the machines I get paid to admin, which are indeed behind a VPN) I only admin one isolated VPS, so without a dedicated bastion I feel that the benefit of a VPN is reduced. I just secured it accordi
139.
by hxtk 6y ago
> When you make that port 2222 or whatever, like so many people do, you have cut out a lot of noise... but now that compromised PHP application you had running has allowed someone to now race you every time SSH is restarted for an update
140.
by hxtk 6y ago
The only reason I know what to expect is because Suckerpinch on YouTube made a video in which he managed to define a logic system using NaN and +∞, and does so by abusing min and max, among other expressions: https://youtu.be&#x2
141.
by hxtk 7y ago
Here, we see the difference between scientists and engineers ;)
142.
by hxtk 8y ago
I can't decide if that's horrifying or brilliant. Leaning towards both.
143.
by hxtk 8y ago
I haven't studied astronomy as much as I would like, so this is probably a stupid question, but is it possible that something other than star collapses caused a bunch of anti-matter in the early universe to form black holes, both expla
144.
by hxtk 9y ago
There's a cycle in the 20 questions game that allows you to gradually fill your entire screen.
145.
by hxtk 9y ago
I started with EEVBlog, especially "Fundamentals Friday" and the series where he designs things. Next, I turned to the textbook at AllAboutCircuits. Next thing I did was design and build a DC lab. I bought my meters and scopes out
146.
by hxtk 9y ago
For what it's worth, unfamiliarity might have something to do with the fact Kodi has only existed under that name for a couple years. Prior to that, it was known as XBMC ("XBox Media Center"). Under that title it's been
147.
by hxtk 9y ago
I always carry the RSK Mk1, which is Doug Ritter's take on the Benchmade Griptilian. I picked it because I like drop point blade geometry, it's heavy-duty enough to chop with in a pinch, like all high quality pocket knives it hold
148.
by hxtk 9y ago
Would running inputs through a markdown engine on the server side fix this, assuming it didn't break some other design requirement?
149.
by hxtk 9y ago
#601 is pretty easy. Also, #512 and #521 if you have some background in prime number theory.
150.
by hxtk 9y ago
> Some problems can even be solved without any programming. Here's a fairly comprehensive list of those problems, but it hasn't been updated in a while, e.g., 601 is solvable with pencil and paper but it's new enough that

More ›