lyu07282

53 ms·

931.
by lyu07282 3y ago
What is seatest? Can you elaborate? That's the first time I heard that mentioned
932.
by lyu07282 3y ago
> Every website can access rotation and velocity data from Android data without asking for permission. What????!!! That's nuts
933.
by lyu07282 3y ago
I think the root problem that this article is talking about is the reasoning you had for responding like that. It's way too meta, it would require too much introspection for you to understand, but try to imagine that the point the pers
934.
by lyu07282 3y ago
> ECS in Rust has this tendency of turning from something that is considered a tool in other language to become almost a religious belief. I think bevy ui is the best example to give, it's like nobody ever did a ui framework with a
935.
by lyu07282 3y ago
I assume they use a bunch of dynamically typed functional programming languages which motivated them to write this somewhat incoherent article in their defense.
936.
by lyu07282 3y ago
also if you find yourself inventing a new complex syntax for yet another markup language... consider doing something else instead
937.
A Brief History of NTP Time: Confessions of an Internet Timekeeper [pdf](eecis.udel.edu)
2 points by lyu07282 3y ago|0 comments
938.
by lyu07282 3y ago
Almost exciting, if the software wasn't just this shitty hacked together proprietary android fork. It's just an app store and game launcher, there is nothing there that I would imagine a metaverse operating system to be, like inte
939.
by lyu07282 3y ago
You can tell .decode what to do with errors so it won't throw an exception, the default is 'strict'. I think python 3.6+ did a pretty good job with it overall. Don't get me wrong it's still painful and annoying and
940.
by lyu07282 3y ago
My guess is, it's application specific, php applications that use the iconv function in some specific way, in some specific context, will be vulnerable. https://www.php.net/manual/en/function.iconv.php
941.
by lyu07282 3y ago
There is also some Rng manipulation to make blocks always drop the maximum, explained here: https://youtu.be/ZcdN1wCJPqM?t=390
942.
by lyu07282 3y ago
> "with the radicalised, far left, activist CEO" > She also scored the rare personal triumverate of being member of the Council on Foreign Relations, a World Economic Forum young global leader, and a fellow at the Atlantic C
943.
by lyu07282 3y ago
Or perhaps declarative services are superior to shell scripting' init scripts for entirely different reasons you never thought about, and it never had anything to do with whether or not anybody can write bash scripts in the first place
944.
by lyu07282 3y ago
Lennart actually responded to that point: https://www.mail-archive.com/devel@lists.fedoraproject.org/m... And https://github.com/systemd/systemd/issues/32028#issuecomment... There are so
945.
by lyu07282 3y ago
interesting thanks, do you know if AWS offers something like that as well?
946.
by lyu07282 3y ago
just to add a detail: with lazy binding the function resolver might not even be called at all, the link tree is like sshd.elf -> systemd.so -> lzma.so. If systemd uses a ifunc symbol in lzma but sshd is not using that symbol: if lazy
947.
by lyu07282 3y ago
48 seems really low to me, I've never seen a k8s cloud cluster for less then 100-150 a month on the very low end, also doesn't take egress into account how do you even run a k8s cluster "on 2 cores 4 gigs", don't yo
948.
by lyu07282 3y ago
Invalid memory write apparently: https://www.mail-archive.com/valgrind-users@lists.sourceforg... The valgrind "fix" was to disable ifunc which disabled the backdoor so the errors went away. The slowness derived fr
949.
by lyu07282 3y ago
in this case it takes advantage of the fact that sshd is compiled with early binding not lazy. The ifunc resolver function is called early, right after the dynamic libraries are loaded. It's eager binding (that's what LD_BIND_NOW=
950.
by lyu07282 3y ago
The authors show a great deal of knowledge of glibc internals, the sort of things you really have to be neck deep in the source code for. Lots of novel techniques in there. The custom elf parser and disassembler are so complex that I can&#x
951.
by lyu07282 3y ago
> the hierarchy is stocked with true believers Yes, the belief in the empire, it was always about (neo)colonialism/imperialism, I think even neoliberalism and LIO is just justification rather than a true belief of the people that dr
952.
by lyu07282 3y ago
I'm not sure how much you can learn from history when you take claims of "democratic US empire enforcing prosperity and freedom on tyrannical despotic regimes" on face value. The justifications to project power changed greatl
953.
by lyu07282 3y ago
I suspect they might be worried it could reproduce copyrighted code in certain circumstances, so their solution was to condition the model to never produce large continuous chunks of code. It was a very noticeable change across the board.
954.
by lyu07282 3y ago
It reminds me a bit of when people worry about collisions in random uuids
955.
by lyu07282 3y ago
I don't think they are comparable anyway, plasma is a desktop environment not a window manager. I mean plasma5 has an incredible amount of features, and it's extensible by Qt/QML widgets that are very easy to write. Sure you
956.
by lyu07282 3y ago
I'm positively surprised someone is looking at all so deeply into potential desktop local privescs, I just assumed the extreme complexity of your average default plasma desktop vs. the relative few users, meant it is probably full of v
957.
by lyu07282 3y ago
Horrible piece of software, it uses a stateful(!) configuration. The daemon updates it's state at runtime and there is absolutely no guarantee it will properly restore that state when it restarts. It's extremely unreliable/fl
958.
by lyu07282 3y ago
Not really a question, but just wanted to say I appreciate your work it is a great piece of software thank you for open sourcing it!
959.
by lyu07282 3y ago
> TrueNAS/FreeNAS whatever it’s called these days - a real OS with real vendor and community support keeping the project alive and up to date is just necessary. and for routers there is OpenWRT. For example Turris is built on that a
960.
by lyu07282 3y ago
One measure might be that we never really found that many backdoors. Over time there is quite a large accumulation of hackers looking at the most mundane technical details. This may be confirmed by regular vulnerabilities that are found in

More ›