kpcyrd

10 ms·

91.
by kpcyrd 2y ago
If you want certainty you'd use Reproducible Builds and know for sure which compiler generates this binary from the given source code. This assumes the code is open source, you know which specific source code release was used and the a
92.
by kpcyrd 2y ago
The build server now needs the actual build dependencies instead of relying on pre-built intermediate build artifacts. This is a good thing, and should be expected from anything that claims to "build from source".
93.
by kpcyrd 2y ago
"far-left identitarian" - what's that even supposed to mean, https://en.wikipedia.org/wiki/Identitarian_movement is defined as "far-right ethno-nationalism". "left-wing ethno-nationalism&q
94.
by kpcyrd 3y ago
I'm not a fan of the "Reproducible tarballs" section, because it's explicitly about pre-processing the source code with autotools, instead of distributing a pure, unaltered git snapshot (which `git archive` can already g
95.
Arch Linux minimal container userland 100% reproducible – now what?(lists.reproducible-builds.org)
103 points by kpcyrd 3y ago|17 comments
96.
by kpcyrd 3y ago
RSA has been known to be problematic for a very long time at this point, hopefully it just fades into obscurity soon and we can move on with less error-prone ciphers.
97.
by kpcyrd 3y ago
For programming, I would gladly go with the second option in return for proper flow-control mechanics and data structures.
98.
by kpcyrd 3y ago
In modern programming you would reject these arguments as invalid and refuse to perform the execve syscall with something like EINVAL. Instead we now have this additional quirk that's going to be part of the Linux lore forever and peop
99.
by kpcyrd 4y ago
Arch Linux is heavily invested into it: - https://reproducible.archlinux.org/ - Attempts to reproduce the distributed binary packages from source using reproducible builds tooling. This already works for a big chunk of pack
100.
by kpcyrd 4y ago
Kernel relinking needs to happen on the user's system anyway because the prebuilt builds are not unknown (they are public for anybody to download). It's like ASLR at runtime vs ASLR at build time. Since these binaries are known an
101.
by kpcyrd 5y ago
The answer for "what's the source of this version of this crate?" is always "what was published to crates.io?", the content of the git repository should be irrelevant. All serious code review efforts should always o
102.
by kpcyrd 5y ago
Actual numbers for bullseye currently look like this: https://debian.notset.fr/rebuild/results/bullseye_full.amd64...
103.
by kpcyrd 5y ago
I'm also slightly disappointed because I thought they either drop support or introduce a strict mode that can be used to disable support for esoteric formats.
104.
Experimental source code dump of pluggable transports for signal-desktop in rust(github.com)
3 points by kpcyrd 6y ago|1 comments
105.
by kpcyrd 6y ago
It would be nice if we could deprecate some of them instead of embracing those "cute" standards.
106.
by kpcyrd 6y ago
I have mixed feelings about wsl because support requests from wsl users are usually due to issues in wsl itself. I guess that's how windows developers feel about linux.
107.
Acme-redirect: easy to use acmev2 daemon in rust
2 points by kpcyrd 6y ago|1 comments
108.
Running an independent Arch Linux rebuilder(lists.reproducible-builds.org)
127 points by kpcyrd 6y ago|26 comments
109.
by kpcyrd 7y ago
escapeshellarg is an ugly hack, php is passing everything through `sh -c` for no reason. The pcntl_exec function is the only one that has a reasonable interface, but is way too low level. php should simply accept this as a valid function ca
110.
by kpcyrd 7y ago
The problem is that php expects a string that is then passed to sh -c, which is then parsed by a shell. Instead php should have an interface that accepts: exec(["sudo", "pihole", "-a", "addstaticdhcp
111.
How do I prevent my parents from sending me unencrypted messages in Telegram(reddit.com)
1 points by kpcyrd 7y ago|0 comments
112.
by kpcyrd 7y ago
Almost nobody has access to that though.
113.
Building the great cannon of session flooding(vulns.sexy)
1 points by kpcyrd 7y ago|0 comments
114.
by kpcyrd 7y ago
Is there an about:config setting to force this, for example for i3 users?
115.
by kpcyrd 7y ago
ssh-keygen -t ed25519
116.
by kpcyrd 7y ago
async/await is async io, this is something js is known for since it doesn't actually require parallelism. Getting concurrency _with_ parallelism right is a lot easier in rust than it is in go. You need to write thread safe code in
117.
by kpcyrd 7y ago
If you're referring to the python2->python3 change, this was a pretty important one. Having a string type that isn't required to have valid encoding is an awful idea.
118.
High performance nudity detection in rust(github.com)
3 points by kpcyrd 8y ago|0 comments
119.
by kpcyrd 8y ago
Germany passed an anti-terror law a few years ago, getting a phone number requires the same level of verification as opening a bank account. Even before that prepaid phones have been a strawman argument, actually maintaining a 2nd number in
120.
by kpcyrd 8y ago
GDPR regulates companies processing personal identifiable information, if your startup can't comply with that it shouldn't exist for the same reasons that a food startup that can't comply with food safety regulations shouldn&

More ›