lima

79 ms·

901.
by lima 7y ago
Logins can occur without user interaction by a logged-in device, so it's not as meaningful as user activity.
902.
by lima 7y ago
Or an edge case they didn't consider, and will likely fix.
903.
by lima 7y ago
The old .doc format was basically serialized C structs, and it's still supported, you're encouraged to upgrade it for security reasons.
904.
by lima 7y ago
It's not just the formal API - features like UAC and high DPI scaling require emulation layers. And there's more to the OS than just Win32.
905.
by lima 7y ago
See comment above about the Equation Editor binary patch - they apparently lost the source code and it became too much of a security risk to keep (since it's missing all of the mitigations that a modern compiler generates). https:&#x2
906.
by lima 7y ago
The antitrust case helped, but it's only thanks to massive reverse engineer efforts by open source developers that this kind of compatibility exists. Even when you have the specs, it's a massive effort to re-implement. > Being
907.
by lima 7y ago
Yandex' open source ClickHouse analytics database also had significant engineering effort applied to enable selective and permanent deletion of data in what used to be an append-only database that could only drop whole partitions. Regu
908.
by lima 7y ago
In Germany, reverse engineering for compatibility reasons is explicity allowed.
909.
by lima 7y ago
Has its downsides, though - one of the reasons Active Directory has been (and still is) so insecure out of the box is backwards compatibility with an ecosystem of shitty third party vendor solutions. Sometimes, change is good, even if it&#x
910.
by lima 7y ago
The level of backwards compatibility in Microsoft products is very impressive. Microsoft Office 2019 can open .doc files created in Microsoft Office 97 and upgrade them to a modern format, with zero loss (except for things like OLE objects,
911.
by lima 7y ago
That upgrades to SSL for me
912.
by lima 7y ago
Can't do any useful caching for a purposefully cache-busting website
913.
by lima 7y ago
In Rust code I audit, I typically have to jump through multiple layers of abstraction and cleverness, while Go code is straight forward and boring.
914.
by lima 7y ago
On the other hand, Go code is a lot easier to audit. The kind of logic bug that the Rust compiler prevents due to stronger typing is typically a crash in Go, not a security issue.
915.
by lima 7y ago
What's questionable about it? It seems that they use modern AEAD ciphers in a reasonable way. I'm more concerned about the repository format and config file (i.e. attack surface, since the repo is potentially untrusted). Performan
916.
by lima 7y ago
But you can still do reproducible builds with Java. GP refers to wanting to avoid Java for no good reason, not reproducible builds themselves.
917.
by lima 7y ago
Still makes it harder to refactor, use code analysis/indexing tools and so on.
918.
by lima 7y ago
The blob is just the JDK + Bazel + a wrapper binary. Just use their regular build artifacts instead if you want to bring your own JDK.
919.
by lima 7y ago
Bazel is worth looking into as soon as you have dependency graphs that your language's native build system can't deal with efficiently, or you have multiple languages that have dependencies on each other's artifacts. A pure G
920.
by lima 7y ago
FreeBSD has official Bazel support. ARM and PPC are not platforms, and they run OpenJDK and Bazel just fine. OpenBSD and NetBSD have OpenJDK ports, but will probably require some patches. The Haiku OS and Minix Firefox ports appear to be un
921.
by lima 7y ago
> Like the article notes, you can reuse intermediate build artifacts between developers (because it's not possible for those artifacts to accidentally depend on developer-specific state) Note that Bazel builds still depend on the
922.
by lima 7y ago
Agreed about Maven Central. It's scary. In my experience, large, complicated Python packages with C dependencies can be a huge nightmare just like large Java applications, and simple cases are simple in either case. With many dependenc
923.
by lima 7y ago
Is it, really? The Java ecosystem had painless build artifacts figured out way before Python did (ship this directory of .jar files vs... a requirements.txt?).
924.
by lima 7y ago
What's wrong with the Java dependency? There's even a single-binary Bazel executable[1] that brings its own embedded OpenJDK. My company is using Bazel and the Java dependency has never been an issue. Even if you write custom rule
925.
by lima 7y ago
On Linux Desktop funding: companies like Red Hat and Canonical fund much of the development on things like GNOME. The real budget is likely much higher than the article suggest, especially now that Ubuntu fully switched to Gnome.
926.
by lima 7y ago
> Are there any HN readers here that use MINIX or possibly another OS that does not have the Linux kernel? Like... Windows?
927.
by lima 7y ago
You can enforce squash commits and it can track commits. What it can't do is automatically rebase dependent revisions.
928.
by lima 7y ago
What you want to do is to submit one revision per commit, and link them together via dependencies (the experimental branch of arcanist does this automatically). Having individual revisions is one of the main advantages of this workflow. You
929.
by lima 7y ago
Phabricator is very similar to Gerrit or the LMKL workflow, which - in my opinion - works a lot better for large-scale software development. The first-class CLI (arcanist) is also super helpful - I can easily generate stacked revisions righ
930.
by lima 7y ago
You're not missing anything, sufficiently bright natural sunlight would have the same effect.

More ›