johncolanduoni

6 ms·

61.
by johncolanduoni 9mo ago
In fact, SecurityFramework doesn’t have a real Swift/Obj-C API. The relevant functions are all direct bindings to C ABIs (just with wrappers around the CoreFoundation types).
62.
by johncolanduoni 9mo ago
An easy solution to having to put your PIN in too often for SSH is to use the `ControlPersist` option in your SSH client config. This lets you only create a new SSH connection every 30s (or whatever you put), even if you’re doing separate o
63.
by johncolanduoni 9mo ago
Okay, but institutional investors didn’t create that fact of reality, and I don’t think they’re responsible for the fact that people want to live in or near cities either (instead of the middle of nowhere, which remains dirt cheap). If they
64.
by johncolanduoni 9mo ago
Manipulating markets by controlling liquidity while not holding a large percentage of the overall stock is a thing. The fact that you could juice trading volume by doing something stupid for no reason doesn’t make it a useless statistic for
65.
by johncolanduoni 9mo ago
How do I distinguish the world where institutional investors are meaningfully contributing to high housing prices and the world where they aren’t? Is there some metric you’ve seen that substantiates the mechanism? For example, are they only
66.
by johncolanduoni 9mo ago
The TPM was never designed to be the only holder of a key that cannot be reset. The idea was that it prevents you from typing in a password or reseting an attestation signature in a database for 99% of boots, but if certain things in the bo
67.
by johncolanduoni 9mo ago
It was designed mostly for mechanisms where in the event of certain changes (BIOS upgrades, certain other firmware changes, some OS changes) there is a fallback mechanism to unlock the system and reset the key. This is why Windows BitLocker
68.
by johncolanduoni 9mo ago
If you have a model where you can do price manipulation of something while owning 1% of it, I understand why you wouldn’t share it. Where are you on the Forbes Billionaire List, out of curiosity?
69.
by johncolanduoni 9mo ago
I don’t understand what your point about TLS 1.3 is. It’s only relevant if you’re doing a downgrade attack (or equivalently, using an active middleware box). TLS 1.3 itself is not vulnerable to this because it (a) doesn’t have non-PFS suite
70.
by johncolanduoni 9mo ago
The great firewall was updated to support inspection of TLS 1.3. They didn’t just decide it was whatever and let everything through. It was easier to just update their parsing than to force everyone to turn it off, so they did that instead.
71.
by johncolanduoni 9mo ago
Yeah but you can’t use the vast majority of crates that way. You have to create a separate unsafe C ABI, and then use it in the caller. Ergonomically, it’s like your dependency was written in C and you had to write a safe wrapper.
72.
by johncolanduoni 9mo ago
The best tool for your median software-producing organization, who can’t just hire a team of engineers to do this, is update embargoes. You block updating packages until they’ve been on the registry for a month or whatever by default, allow
73.
by johncolanduoni 9mo ago
The system you’re proposing wouldn’t work, because without additional effort in the compiler and linker (which AFAIK doesn’t exist) there won’t be perfectly identical pages for the same static library linked into the same executable. And on
74.
by johncolanduoni 9mo ago
Rust ABI (as opposed to C ABI) dynamic libraries are incredibly fragile with regard to compiler/build environment changes. Trying to actually swap them out between separate builds is pretty much unsupported. So most of the benefits of
75.
by johncolanduoni 9mo ago
Sequential read speed is attainable while still having a (small) number of independent sequential cursors. The underlying SSD translation layer will be mapping to multiple banks/erase blocks anyway, and those are tens of megabytes each
76.
by johncolanduoni 9mo ago
What is the nature of the architectural limit here? The bus between an individual core and the caches and/or memory controller?
77.
by johncolanduoni 9mo ago
That requires the client to only emit ECH, even if the ISP-provided (and therefore government controlled) DNS blocks HTTPS/SVCB records. China can easily make the default for a browser in China be to never even try to use ECH as well.
78.
by johncolanduoni 9mo ago
It’s certainly due for an update, but it isn’t doing nothing at all. The friction it creates for unlicensed use at scale is enough to keep all the streaming services etc. afloat, which in turn are still funding the production of content. Ma
79.
by johncolanduoni 9mo ago
It’s not good evidence, because people issue false DMCA takedowns all the time. Which I presume they would point out in court.
80.
by johncolanduoni 9mo ago
In principle, it means you could run multiple sites from the same IP and someone intercepting traffic to that IP (but not the client’s DNS path) couldn’t tell what site each connection was to. It mostly makes sense for CDNs, where the same
81.
by johncolanduoni 9mo ago
It’s also how browsers detect a website supports HTTP3. Browsers will request it just to check if they should connect to an https:// URL via HTTP3 (though they generally don’t block on it - they fallback to HTTP1/2 if it take
82.
by johncolanduoni 9mo ago
I want even the most open AI company to guard my chats jealously. But guarding them from my mother’s estate after I’m already gone is another matter.
83.
by johncolanduoni 9mo ago
Would anyone have luck suing a person on some random bodybuilding forum who was similarly sycophantic? ChatGPT didn’t invent strangers on the internet flattering your psychosis.
84.
by johncolanduoni 9mo ago
I’m not sure square footage is what matters here, though comparing the overall market for datacenter/manufacturing jobs would be more useful than individual installations anyway. It’s not like the U.S. is hurting for physical space in
85.
by johncolanduoni 9mo ago
Yeah, and that’s my point. The problem is not technological, you can make a super readable HTML site by just putting text in <p> tags, and RSS readers for blogs that didn’t rug-pull their content still work fine. People lost interest
86.
by johncolanduoni 9mo ago
Look, it’s not that complicated. If you just build your software with gcc or whatever in a docker container with pinned versions, put the binary on your website, and call it a day, 5 minutes later someone is going to complain it doesn’t wor
87.
by johncolanduoni 9mo ago
RSS is just a list of links to webpages, maybe with summaries. The readers generally fetch those webpages and filter out the text, but every browser has equivalent functionality now. You can do it with literally any HTML page, though some w
88.
by johncolanduoni 9mo ago
It has to be as ancient as the oldest glibc you want to support, usually a Red Hat release with very old version and manual security backports. These can have nearly decade-old glibc versions, especially if you care about extended support c
89.
by johncolanduoni 10mo ago
Making an executable “request” older symbol versions is incredibly painful in practice. Basically every substantial piece of binary software either compiles against an ancient Debian sysroot (that has to have workarounds for the ancient par
90.
by johncolanduoni 10mo ago
We definitely can, because almost every other POSIX libc doesn’t have symbol versioning (or MSVC-style multi-version support). It’s not like the behavior of “open” changes radically all the time, and you need to know exactly what source sym

More ›