m4r71n

8 ms·

31.
by m4r71n 3y ago
> "Consequently, we now have to gather the source code from multiple sources, including CentOS Stream, pristine upstream packages, and RHEL SRPMs." Oh no! How dare they make us do the work? It feels tiring to hear these argum
32.
by m4r71n 3y ago
So what's stopping Alma/Rocky from just "taking that same stuff other people wrote" and not bothering with RHEL at all?
33.
by m4r71n 3y ago
A note of caution: never scrape the web from your local/residential network. Few months back I wanted to verify a set of around 200k URLs from a large data set that included a set of URL references for each object, and naively wrote a
34.
by m4r71n 3y ago
Podman still uses QEMU on Mac: https://podman.io/docs/installation#macos
35.
Podman Desktop 1.0(developers.redhat.com)
212 points by m4r71n 3y ago|81 comments
36.
by m4r71n 4y ago
Mastering Regular Expressions by Jeffrey Friedl! I was fresh out of college where I literally memorized certain regular expression patterns for a Unix class exam just to pass. It was only when I started an actual job in development did I re
37.
by m4r71n 6y ago
Why are people assuming this is in any way IBM's doing? I know it's easy to say "IBM bad" but everything that has been said so far indicates this was a joint decision between Red Hat engineering and the CentOS project bo
38.
by m4r71n 6y ago
Django does: https://github.com/edelvalle/reactor
39.
by m4r71n 6y ago
Yes, but which open source project publishes CPEs for their vulnerability information? :-) Plus, an important part of every security advisory is specifying which versions are affected by a particular vulnerability versus which contain the f
40.
by m4r71n 6y ago
Side note: I wish there was an accepted industry-wide, machine-readable format for security advisories. It's kind of a pain that every project out there defines their own way, ranging from atrocious blog posts: https://chrom
41.
by m4r71n 6y ago
More like "Red Hat assigned a CVE to a security issue reported 17 months ago": https://bugzilla.redhat.com/show_bug.cgi?id=1708775 I don't see what the big news here is, it's merely identifying a vulnera
42.
Ask HN: Good Django codebases to read
1 points by m4r71n 8y ago|1 comments
43.
by m4r71n 8y ago
Glassdoor is a good starting point but it would be nice to know of a community-gathered data source. Any pointers to specific expat forums?
44.
by m4r71n 8y ago
Does anyone know of similar data but for EU countries? As was already mentioned in this thread, salaries differ from the US quite a bit, but it would still be nice to know what the norm is. I'm considering moving to Germany and have no
45.
by m4r71n 8y ago
Another option is the one created by the Fedora project: https://pagure.io/pagure . It's a Git hosting solution where all the additional bits related to a repo (issues, docs, etc.) are also their own Git repos that can
46.
by m4r71n 8y ago
One thing that for-else is very useful for is implementing an elegant and easy-to-understand retry mechanism: for _ in range(3): success = do_something() if success: break else: raise FailedToDoSomething
47.
by m4r71n 9y ago
Here is another write-up that builds the same thing (and reads a bit nicer): https://medium.com/@Stephanbv/elixir-phoenix-build-a-simple-...
48.
OpenSSL Security Advisory [26 Sep 2016](mta.openssl.org)
5 points by m4r71n 10y ago|1 comments
49.
by m4r71n 10y ago
You can go even further back to 2001 when this was first noticed: http://www.nntp.perl.org/group/perl.libwww/2001/03/msg2249.h...
50.
by m4r71n 10y ago
A great read on this topic: http://www.kitchensoap.com/2012/10/25/on-being-a-senior-engi...
51.
by m4r71n 10y ago
I think it's about what tools you use day to day. If, for example, you have SSH installed on your machine but don't have sshd enabled, then you could care less how outdated it is. Nobody is exploiting you through it if it's n
52.
by m4r71n 10y ago
I did not mean to belittle the efforts of package maintainers, most of which are people who don't get paid for it and do it out of their own volition (which I applaud!). They definitely put hours upon hours into improving the software
53.
by m4r71n 10y ago
Exactly! So why would you ever consider this to be a safe application, with or without the vulnerabilities? Wireshark should be used in a closed environment (VM) as should all tools that handle potentially malicious data.
54.
by m4r71n 10y ago
Or GitLab? I really don't understand why anyone would misuse Dropbox as a Git server...
55.
by m4r71n 10y ago
I don't quite understand why people are upset with this. This is common in every, single Linux distro. Some vulnerabilities are simply not worth patching. Debian also has quite a few unpatched issues: https://security-tracke
56.
by m4r71n 11y ago
Why would you have sshd running on your workstation in the first place?
57.
by m4r71n 11y ago
I'm in the middle of reading "Countdown to Zero Day", the book about Stuxnet. It contains a very good summary of how Iran started enriching Uranium, where they acquired the technology to build the centrifuges, and how most co
58.
by m4r71n 11y ago
Derek Muller of Veritasium has done this test over a year ago on people in one of his videos: https://www.youtube.com/watch?v=vKA4w2O61Xo I've given the test to various people since then and never once came across some
59.
CVE assigned to a vulnerability in Boosted electricity-assisted skateboard(web.nvd.nist.gov)
1 points by m4r71n 12y ago|0 comments
60.
Obtaining local IP addresses via WebRTC STUN requests(diafygi.github.io)
18 points by m4r71n 12y ago|7 comments

More ›