mirashii

8 ms·

91.
by mirashii 8mo ago
There's two paths for verification, and the discussion on them is muddying things. There's k-id, which is the local-only age verification, and then there's a secondary process for places where k-id is indeterminate or their s
92.
by mirashii 8mo ago
Even more, there are regularly security vulnerabilities patched in releases that don't get CVEs and don't get any mention in patch notes, there are no incremental commits between releases, just giant code dumps. There's no ch
93.
by mirashii 9mo ago
AWS had an outage that blocked all EC2 operations just a few months ago: https://aws.amazon.com/message/101925/
94.
by mirashii 9mo ago
Equally tiring is the “it works for me so stop complaining” replies, which do nothing to stop the complaints but do increase the probability of arguments. Want the complaint posts to stop? Suggesting that they’re in some way invalid is not
95.
by mirashii 9mo ago
> If a literal interpretation of what you wrote allows for something, even though it's clear that you hadn't intended to do so, then it is going to be allowed. This isn’t necessarily true, there are a variety of legal doctrines
96.
by mirashii 9mo ago
A neat idea, but projecting all of these services onto localhost is a bit of a security nightmare. Have you considered looking at what something like Twingate does? Using the CGNAT IP space for the projection allows you to give every indivi
97.
by mirashii 9mo ago
Certainly Oxide computer company has some use of illumos still, which is strongly related to SmartOS
98.
by mirashii 9mo ago
> but it doesn't appear there's a "default" From the page you linked: Nvim creates a default RPC socket at startup, given by v:servername. You can follow the links on v:servername to read more about the startup proces
99.
by mirashii 9mo ago
Neovim’s server defaults to named pipes or domain sockets, which do not have this issue. The documentation states that the TCP option is insecure. VS Code’s ssh daemon is authenticated.
100.
by mirashii 9mo ago
Like some others, I built my own too: https://rdeaton.space/posts/screenless-digital-jukebox/
101.
by mirashii 10mo ago
> which is very important for the kind of thing eBPF is(1) The question is, going into 2026, what kind of thing is eBPF? It seems like all hope of it being a security boundary has been thwarted by micro-architectural vulnerabilities to t
102.
by mirashii 10mo ago
> why compare it to eBPF vs just making a mechanism to load kernel modules written in Rust. Because it's not just a mechanism to load kernel modules in Rust, it's specifically a mechanism to load them in the same places that eb
103.
by mirashii 10mo ago
I see the white line on mobile, but not on desktop, though my OS versions are wildly different too, so hard to narrow down exactly what it might be there.
104.
by mirashii 10mo ago
Another good test page for the browser: https://www.color.org/version4html.xalter
105.
by mirashii 10mo ago
> authenticated access to the cluster No it doesn’t. > they'd use snappy or zstd What is being used more doesn’t matter, what’s compiled in and enabled matters.
106.
by mirashii 10mo ago
I’d be curious about sentiment analysis applied to these. I expect two of the listed to have very positive sentiment, and one generally negative in 2025.
107.
by mirashii 10mo ago
Unless the CD comes with a root kit that interferes with that copying. https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...
108.
by mirashii 10mo ago
> Do library authors have to test against every type checker to ensure maximum compatibility? Yes, but in practice, the ecosystem mostly tests against mypy. pyright has been making some inroads, mostly because it backs the diagnostics of
109.
by mirashii 10mo ago
This is a network carrier setting, the issue is that T-Mobile (and maybe others) pushes a profile that does this as part of their network configuration.
110.
by mirashii 10mo ago
> Odds are, you’re not going to get any contributions even if you do want them. So they could just upload regardless. This is not my personal experience nor the experience of a number of folks that I know personally. I think it's pr
111.
by mirashii 10mo ago
Unfortunately, and I think to great overall harm, GitHub does not let you disable many of the collaboration features. I was just having a discussion today with someone who would be fine open sourcing their code, but is uninterested in any c
112.
by mirashii 10mo ago
You don't need to MITM docker for this, you can just configure your containerd or equivalent backend properly.
113.
by mirashii 10mo ago
In practice you don't actually need kernel code on a bunch of platforms for this, e.g. NETransparentProxyManager on MacOS. This is not necessarily an endorsement, just worth not mixing in unrelated issues.
114.
by mirashii 11mo ago
> -fno-strict-aliasing doesn't suddenly make pointer aliasing defined behavior. No, it just protects you from a valid but unexpected optimization to your incorrect code. It's even spelled out clearly in the docs: https:/&
115.
by mirashii 11mo ago
> All addition operations over ints are potentially invoking UB. Potentially invoking and invoking are not the same.
116.
by mirashii 11mo ago
> If Microsoft makes a guarantee in their documentation about some behavior of UB C code But do they? Where? More likely, you mean that a particular compiler may say "while the standard says this is UB, it is not UB in this compiler
117.
by mirashii 11mo ago
> But from my own experience, UB just means "consult your compiler to see what it does here because this question is beyond our pay grade." People are taught it’s very bad because otherwise they do exactly this, which is the pr
118.
by mirashii 11mo ago
I’m not sure there’s anything clever that resolved the issues, they just settled on slow execution times by accepting a dynamic dispatch on generics.
119.
by mirashii 11mo ago
This comment from a dupe thread is worth considering: https://news.ycombinator.com/item?id=46137352
120.
by mirashii 11mo ago
I agree, and I personally wouldn't call golang memory safe for that reason. Thomas's semi-definition includes the word "vulnerability", which narrows the scope so much that golang fits under the bar, since the common dat

More ›