lima

14 ms·

1. 211.▲
   by lima 3y ago

   Not only is it not generous (relatively speaking), but actually getting paid can be extremely annoying. Used to be even worse.
2. 212.▲
   by lima 3y ago

   > which act like imperative commands setting the current state of the color or whatnot No further insights on the design rationale, but yeah, that's exactly what's going on.
3. 213.▲
   by lima 3y ago

   > Also pretty comical that Google's Project Zero policy is to release details when a public exploit is known to exist, yet the details are kept under wraps when their own software is vulnerable. Project Zero treats Google like any o
4. 214.▲
   by lima 3y ago

   That's fine, though. AWS Route53 uses a number of third-party registrars like Gandi.
5. 215.▲
   by lima 3y ago

   500000 km^2 is a little less than the entire area of France, for anyone wondering.
6. 216.▲
   by lima 3y ago

   > Google is moving away from gvisor as well. I've been wondering about this - are they really?
7. 217.▲
   by lima 3y ago

   Lots of enterprise grade cloud vendors trust the Linux kernel boundary WAY too much...
8. 218.▲
   by lima 3y ago

   I'm using rmView for its red-dot-on-hover feature: https://github.com/bordaigorl/rmview
9. 219.▲
   by lima 3y ago

   This is incorrect, this can happen with any permissive license (BSD, Apache 2...) regardless of copyright assignments.
10. 220.▲
    by lima 3y ago

    I'm a tech-savvy person and I consider Manifest v3 an improvement (improves security + performance), and Firefox implements it as well as things like declarativeNetRequest[1]. [1]: https://developer.mozilla.org/en-US&#x
11. 221.▲
    by lima 3y ago

    It's a Google-specific legacy mistake. IIRC, they even do (used to do?) two-space indentation for Python.
12. 222.▲
    by lima 3y ago

    The product is (deceptively) simple but the sheer scale makes it a very complex system.
13. 223.▲
    by lima 3y ago

    Yep. Zigbee is the way to go - it is a whole ecosystem of "local by design" devices.
14. 224.▲
    by lima 3y ago

    As a security researcher, I have to disagree - there's many things to criticize Google for, but "cavalier attitude to security" isn't one of them. Their security teams are industry-leading and they have done a lot of imp
15. 225.▲
    by lima 3y ago

    > Germany has retired the official bluetooth contact tracing app earlier this year. I wouldn't be surprised if Google retires theirs this year or the next. Google does not have their own app. Exposure Notifications is the cross-ve
16. 226.▲
    by lima 3y ago

    My biggest issue with Nix flakes right now is the way it integrates with Git. It insists on copying the entire repository into the Nix store (which makes all of its content world-readable!). Even if your flake.nix is in a subdirectory of
17. 227.▲
    by lima 3y ago

    Still hoping for something other than Firejail to come along: The way profiles are designed is brittle and an order-dependent override hell, and it's common to use denylists vs. allowlists. Firejail is a setuid binary with tons of atta
18. 228.▲
    by lima 3y ago

    A modern desktop has all kinds of sandboxes and other privilege boundaries including the browser, system services restricted using seccomp, various application level sandboxes like Flatpak/Firejail/...
19. 229.▲
    by lima 3y ago

    Very annoyingly so - it's a nightmare for anyone with flexible hours.
20. 230.▲
    by lima 3y ago

    What I really want in Linux is good defaults that treat users as infants playing with scisssors Sounds like you want Chromium OS :-) Fully open source, Linux-based, and it's hardened to the point where neither the user, nor an attack
21. 231.▲
    by lima 3y ago

    There have been a number of third party audits and lots of academic research: https://community.signalusers.org/t/overview-of-third-party-...
22. 232.▲
    by lima 3y ago

    Clients and server are open source: https://github.com/signalapp The protocol does not trust the server. Android has reproducible builds, iOS doesn't.
23. 233.▲
    by lima 3y ago

    The whole point of Signal is not having to trust them because the protocol is open source and peer-reviewed.
24. 234.▲
    by lima 3y ago

    Check out chrome://sync-internals, it shows you every little detail.
25. 235.▲
    by lima 3y ago

    Yes. They don't want you to be able to poke around but the real security boundary is the VM, not the database server.
26. 236.▲
    by lima 3y ago

    Last time I checked, their hosted databases run in dedicated VMs, which is where the real security boundary is. Getting access to the host OS won't give you much other than some internal binaries and config.
27. 237.▲
    by lima 3y ago

    But then it's trivial to sneak a backdoor past code review.
28. 238.▲
    by lima 3y ago

    How to start a new Go project: go mod init mymodule Go's default toolchain is fine, everything else is optional. Some questionable advice in the article: - Vendoring dependencies using "go mod vendor" is not a good def
29. 239.▲
    by lima 3y ago

    There's two major production-ready Go-based operating system(-ish) projects: - Google's gVisor[1] (a re-implementation of a significant subset of the Linux syscall ABI for isolation, also mentioned in the article). - USBArmory&#x2
30. 240.▲
    by lima 3y ago

    Webpage is flaky, here's a backup: https://web.archive.org/web/20230517105311/https://blog.jetb...