nulld3v

11 ms·

91.
by nulld3v 2y ago
LOL as much as I disagree with Elon's current stint in government, this is probably among the most tame projects in DARPA's portfolio.
92.
by nulld3v 2y ago
> "bureaucrat" is a pejorative > "bureaucrat" doesn't mean anything These two sentences appear to be contradictory.
93.
by nulld3v 2y ago
I don't think czkawa supports deduplication via reflink so it's not exactly the same thing. fclones as linked by another user is more similar: https://news.ycombinator.com/item?id=43173713
94.
by nulld3v 2y ago
It is impossible to download XCode without an Apple ID. This by itself is really stupid, but then due to this bug: https://www.reddit.com/r/applehelp/comments/17zawel/continue... I was unable to create a
95.
by nulld3v 2y ago
> If the Client, Attester, and Origin are all a single party (Kagi), then it follows from that threat model that Kagi does not provide Kagi-Client unlinkability, no? Kagi does not provide Kagi-Client unlinkability as the Client's pa
96.
by nulld3v 2y ago
> The RFC is explicit that, when all of the roles are held by the same entity, the attestation should not rely on unique identifiers. But that's exactly what a session cookie is. Very true, but again, the RFC describes a completely
97.
by nulld3v 2y ago
This would definitely seem like a big concern if you were just looking at the RFC, but the key here is that Kagi's system has a different set of security/privacy/functional requirements and therefore the issues mentioned in t
98.
by nulld3v 2y ago
Another similar project (alpha stage): https://github.com/DioxusLabs/blitz And another (mature but proprietary): https://sciter.com/
99.
by nulld3v 2y ago
If your editor supports TOML schemas you can add the following to the config file to get autocomplete and in-editor documentation: "$schema" = "https://jj-vcs.github.io/jj/prerelease/config-sche
100.
by nulld3v 2y ago
I believe you indeed can do this, but you need to recompile GrapheneOS. Which brings me to another one of the turn-offs of GrapheneOS: you also need to recompile GrapheneOS if you want to have root access. I understand that it's for se
101.
by nulld3v 2y ago
Technically there is nothing stopping you from running your own compiled kernel since you can just unlock the bootloader and run whatever you want. I'm still with nunpad0 though since if you unlock bootloader on a Pixel you lose a ton
102.
by nulld3v 2y ago
Nice work on the tests, TIL of alpine-virt, did not know that you could speed up boot that much by just disabling unused kernel modules/drivers. And apparantly you can just ignore half the CPU, use only the BIG cores and suffer little
103.
by nulld3v 2y ago
I was very excited for Android's new virtualization features until I discovered that Android will only allow GOOGLE/OEM SIGNED VM IMAGES!?!? You won't be able to use your own kernel in the VM. https://source.androi
104.
by nulld3v 2y ago
> That aside, considering once it was discovered how the drive wiper that OP (aaza) claims to have made works, it basically just became a drive wiper that any bad actor could drop into a target system and run, “I intentionally distribute
105.
by nulld3v 2y ago
Hashicorp Vault (had to use my own API key as the repo is fairly large): https://gitdiagram.com/hashicorp/vault Diagram could maybe have a bit more detail but what is there looks accurate! Really cool stuff OP!
106.
by nulld3v 2y ago
The problem with this is that it contributes more to internet censorship in that country compared to handling and fighting against each individual censorship request.
107.
by nulld3v 2y ago
AFAIK there is no polished standalone frontend for jj yet. https://github.com/gulbanana/gg comes closest but I ran into some quirks when using it on git compatible/colocated repos. Someone has made a VSCode plugin
108.
by nulld3v 2y ago
The person who last pushed. jj force pushes by default, but unlike git, the force push defaults to the "safe" variant (similar to git's --force-with-lease). So you won't accidently overwrite someone else's changes w
109.
by nulld3v 2y ago
Nothing. No obfuscation either really. Heavy obfuscation could hurt performance, and light obfuscation can break reflection that might be used by plugins. There isn't much value in trying to protect their source code. IDEs are evolving
110.
by nulld3v 2y ago
Are you aware of Immich? I believe it does mostly everything you were trying to do: https://immich.app/docs/features/smart-search It's open source, and is fairly polished too. I think the main part that'
111.
by nulld3v 2y ago
What in the world? The security advisory was published to their repo 4 months ago? EDIT: Oh... Apparantly they reintroduced the vuln again about a month later... https://github.com/ultralytics/actions/commit/5
112.
by nulld3v 2y ago
Oof, I saw "CoralQueue" on the product list on your website and I just immediately assumed it was a paid product. But I didn't even think of looking at the LICENSE files, my bad! Regarding the docs, I was only looking at Cora
113.
by nulld3v 2y ago
That is a really intriguing idea! Not sure if Go has exactly the sort of tool you are talking about, `go fmt` still allows for some minor differences, and I believe the same applies to `gofumpt` as well. But it still sounds totally doable!
114.
by nulld3v 2y ago
I have this same dream wayyy too often (uunfortunately). - A language that transpiles down to human readable, idiomatic Go. - Automatic folding of normal Go code into more concise/functional-style syntax. - Proper preservation of where
115.
by nulld3v 2y ago
Yeah this format looks really fun! Although I wonder if someone could come up with a better way for rate limiting without the whole "exponentially increasing price" thing.
116.
by nulld3v 2y ago
> It's very hard for parent to resist the insistent demands of their children to get a smartphone when their classmates all have one, and not having one means being or feeling excluded. This is the kind of coordination problem bette
117.
by nulld3v 2y ago
Python venvs are not intended to provide isolation from the host system and therefore do not provide any isolation from the host system. So yes, the app can certainly harm the OS, and the venv would not provide any protection against this.
118.
by nulld3v 2y ago
They are complaining about the binary files, not the batch files.
119.
by nulld3v 2y ago
It looks like these are more lower level libraries so clients are supposed to block, but they are responsible for doing the blocking themselves. And given these are designed for "ultra-low-latency" systems, I don't think that
120.
by nulld3v 2y ago
I mean it's a great idea, and I fully agree that I do not want to worry about memory allocation. So then why is `make` a thing? And why is `new` a thing? And why can't I take an address to a primitive/literal? And yet I can s

More ›