kevincox

14 ms·

211.
by kevincox 1y ago
Yeah, I would happily run a bunch of my network services in this. I have loads of services that are public-facing doing a lot of complex parsing and rule evaluation and are mostly idle. For example my whole mailserver stack could probably b
212.
by kevincox 1y ago
I'm not aware of it being done yet. But since the RFC is accepted it should be pretty straightforward.
213.
by kevincox 1y ago
https://github.com/NixOS/rfcs/blob/master/rfcs/0097-no-read-... is relevant.
214.
by kevincox 1y ago
I see a handful of problems. 1. The loader will just get banned. 2. The application ID and permissions are that of the loader. To have different applications with separate data and permissions you would need multiple copies of the loader. 3
215.
by kevincox 1y ago
Yeah, it would be nice if the reserved numbers were random so that they didn't stand out. Sure, some nerds will still memorize the list but even with 20 numbers it would be basically indistinguishable to the average person compared to
216.
by kevincox 1y ago
I'm pretty excited this but for a slightly strange reason. I have a little monitor for the logs that posts things like player joins and deaths to a chat room. It is fun and also encourages people to hop on the server when someone joins
217.
by kevincox 1y ago
I agree that a powerful permission model is a great feature. But that doesn't obsolete the option to have the "root permission" that you can give when required. Sure, for my specific gripe a "full filesystem access"
218.
by kevincox 1y ago
Yes, if it was a measure of device security they would revoke attestation of devices that are behind on security updates. But no, a 5 year old device that never got security updates is A-OK according to Google but a completely up to date cu
219.
by kevincox 1y ago
GrapheneOS is in some ways not an open OS. The official builds don't provide root access. So for example apps are able to hold your data hostage from you. I get that this is in the name of security hardening. And you can make a build t
220.
by kevincox 1y ago
You seem to be assuming that a JSON object is a "struct" with a fixed set of application-defined keys. Very often it can also be used as a "map". So the number of keys is essentially unbounded and just depends on the siz
221.
by kevincox 1y ago
But that doesn't change the files, so it won't show up in the tree view as the user is trying to accomplish.
222.
by kevincox 1y ago
I'm curious why root was required. If I had to guess it was building some filesystem images where the in-kernel filesystem driver previously needed to be used?
223.
by kevincox 1y ago
I don't think "addressable" implies byte addressable or addressable by a single machine word. IIUC a bool* could be implemented as a byte pointer and a bit offset. Of course this then causes a cascade of things that you proba
224.
by kevincox 1y ago
I'm talking about output. For sure, if I am reading this bool from FFI I want to have "not 0" be truthy. However if I am writing a bool to a FFI interface I want the value to be predictable (for example 1) rather than "s
225.
by kevincox 1y ago
> Note: The ByteBool, WordBool, and LongBool types exist to provide compatibility with other languages and operating system libraries. Which makes sense. So these are really only intended to be used for FFI, not internal Delphi code. If
226.
by kevincox 1y ago
> Plant officials today confirmed the worker sustained minor injuries from the fall and has already returned to work. - https://www.mlive.com/news/2025/10/michigan-nuclear-plant-wo... He went back to work
227.
by kevincox 1y ago
This is enlightening chart. Only Solar beats nuclear in deaths/Wh of energy. Even wind power results in more deaths. Additionally this uses very pessimistic numbers for large nuclear incidents and doesn't count thinks like deaths
228.
by kevincox 1y ago
> Plant officials today confirmed the worker sustained minor injuries from the fall and has already returned to work. - https://www.mlive.com/news/2025/10/michigan-nuclear-plant-wo... They returned to work
229.
by kevincox 1y ago
According to https://www.mlive.com/news/2025/10/michigan-nuclear-plant-wo... he returned to work the next day (presumably at the nuclear reactor) and only suffered minor injuries due to the fall.
230.
by kevincox 1y ago
I don't doubt that many people are aware of many of the new laws. But I strongly suspect that a very significant number of drivers are unaware of many new laws.
231.
by kevincox 1y ago
> the overhead of the http layer There isn't much overhead here other than connection setup. For HTTP/1 the connection is just "upgraded" to websockets. For HTTP/2 I think the HTTP layer still lives on a bit so t
232.
by kevincox 1y ago
I don't think it is very "magic". The VFS gets you a few main benefits. 1. You can lazy download and checkout data as you need it. Assuming your build system is sufficiently realized to hide the latency this will save a lot o
233.
by kevincox 1y ago
Both things can be problems. 1. You should host dev stuff and separate domains. 2. Google shouldn't be blocking your preview environments.
234.
by kevincox 1y ago
I think the bad part is that the users are often unaware. Stripping the data by default makes sense but there should be an easy option not to. Try to get an iPhone user to send you an original copy of a photo with all metadata. Even if they
235.
by kevincox 1y ago
Does podman have a container runtime process? Or does it just exec the child after setting up the environment? In that case the overhead is just a small amount of kernel accounting.
236.
by kevincox 1y ago
That's basically what QUIC is? It is a UDP based protocol over which HTTP can be run. How else would you consider "just" switching HTTP to UDP? There are minimum required features such as 1. congestion control 2. multiplexed
237.
by kevincox 1y ago
Maybe they can pull the old console trick of just including a copy of the old hardware inside the new console. However I suspect that this isn't as cost and space effective as it used to be.
238.
by kevincox 1y ago
Sounds like a vulnerability in their cell network, not in Android.
239.
by kevincox 1y ago
I don't meant the consequences to the people who had the data leaked. I mean the consequences to the companies that didn't take security seriously and leaked the data.
240.
by kevincox 1y ago
Because the consequences of events like this are minimal so why would they waste time and effort worrying about it?

More ›