nurple

14 ms·

121.
by nurple 3y ago
I'd just like to take a moment to thank you for releasing it as AGPL.
122.
by nurple 3y ago
Mongo didn't move away from the AGPL to keep SaaS providers from capturing value from the project, they did it so that they could capture more for themselves.
123.
by nurple 3y ago
For some people, yes. But for the majority, I'd say no. In my mind a lot of the outrage is just generated through FUD that the big corps create when their ability to place themselves in a position to create false scarcity (and hence &q
124.
by nurple 3y ago
Big fan of couch, wish it was more popular. Its http interface basically removes the whole http translation layer of code most projects put in front of the db. For such a small need, you might also look at PouchDB. Inspired by couch but sim
125.
by nurple 3y ago
tyvm!
126.
by nurple 3y ago
Welcome to Node.js v21.6.2. Type ".help" for more information. > window.dispatchEvent(new Event('counterChange')) Uncaught ReferenceError: window is not defined
127.
by nurple 3y ago
Reminds me of a video[0] that describes Diffie-Hellman key exchange in terms of mixing color values (as globs of oil paint). I guess in this game you're guessing the mix of primary colors, so maybe it doesn't hold the same propert
128.
by nurple 3y ago
I think one interesting corollary here is how the Ken Thompson attack was discovered at PWB[0] because it had a memory performance bug[1]. [0] https://en.wikipedia.org/wiki/PWB/UNIX [1] https://news.
129.
by nurple 3y ago
Oh boy, do I have the packaging system for you!
130.
by nurple 3y ago
Interesting that validating the failure reason of an autotools compile check could be a security mitigation...
131.
by nurple 3y ago
An exceptional video recently landed deep diving into how structual formations like this were used to miniaturize RF notch filters[0], really incredible engineering. The acronym naming the input and output terminals, IDT, means interdigitat
132.
by nurple 3y ago
I mean, it's not that tinfoil hat as the DRBG debacle showed. But I'm not talking conspiracy here, I just feel like providing a 5 volume tech manual on how to do pervasive monitoring under TLS1.3, no matter their stated justificat
133.
by nurple 3y ago
I'm disappointed that FOSS discussions like this always devolve into profit-focused arguments. It's no wonder our "freedoms" in the software world have slowly but steadily been shifting to look exactly like our "fre
134.
by nurple 3y ago
Sure, I can see the harm minimization angle, I guess I just view it like a lot of other gov-promoted weakening of security under a purported harm minimization. Reading through the RFC you referenced ends with this interesting conclusion:
135.
by nurple 3y ago
Appreciate this overview and absolutely adore the mentality of "rough consensus and running code", BAMFs. It's a shame that NIST, who is supposed to use their data to establish security best practices is expending resources t
136.
by nurple 3y ago
Excellently said. I would love to see a regulatory world where experimentation outside of the high-end is more prolific. Even the constraints that were put on UAVs by the FAA have stifled that spirit in a real way. Where is the hacker cultu
137.
by nurple 3y ago
I agree. I am disappointed that NASA abdigated its role in driving forward not only space but aviation to commercial interests. It made, and still makes, many people very rich, but profit motives lead to the masses to feeling, and being han
138.
by nurple 3y ago
Never really thought about how being far from the centerline would change how much/quickly you move in a roll, I can definitely see that feeling being unnerving, expecially the inevetable(though rare?) negative G moments.
139.
by nurple 3y ago
I think one of the things that scares me most about API-accessed LLMs is how powerful they are as data collection tools in their own right. OpenAI, for example, recently updated their terms of use to be more vague about how they work with t
140.
by nurple 3y ago
Yes, all the legal arguments presented before the FISA court by the lawyers working on behalf of those targeted have been really interesting reads!
141.
by nurple 3y ago
The terrorist ends wherever a threat to the state's power exists, it's been shown quite well that they don't care if you're domestic or not. This, IMO, is why "self-radicalized" and "domestic terrorist&quo
142.
by nurple 3y ago
Excellent info! I started head-deving a project similar to nix-snapshotter[0] and I was thinking "ok, I can probably just build CRI impl that builds a rootfs dir with nix and just shell out to bubblewrap to make a "container"
143.
by nurple 3y ago
This is exactly how nix works, except instead of symlinks it actually modifies the binaries at buld-time to point its dynamic library paths to absolute paths in the store which includes a source-derived hash in place of a version.
144.
by nurple 3y ago
This^ This is one of the biggest issues with containers IMO. This and the layering system, which I think is poorly designed both to configure and to actually do the tasks it's meant to(build and delivery caching). The solutions to this
145.
by nurple 3y ago
Containers are a solution to dependency management for sure. In the world of the FHS, the dynamic linker is meant to solve a number of problems, like space saving and security updates, at the OS level by discovering dynamic deps installed i
146.
by nurple 3y ago
This is a really interesting way to think about the progression. As a timeline I like to plot the ratio of users to isolated compute. We've moved along points like users per building, users per room, user per computer, computers per us
147.
by nurple 3y ago
Wolfgang's optimization is very nice, I also found interesting his signal of a non-async function that returns a promise as an "atomic". I don't particularly like typed JS, so it would be less visible to me. Absolutely a
148.
by nurple 3y ago
Don't forget to fung futures that are fungible for the same key. ETA: I appreciate the time you took to make the example, also I changed the extension to `mjs` so the async IIFE isn't needed. const CACHE_EXPIRY = 1000; /&
149.
by nurple 3y ago
But coroutines _are_ an option for parallelism, and an especially effective one in the I/O-bound world. The parallelism comes from the OS handling I/O scheduling for the coroutines instead of the application code. The important di
150.
by nurple 3y ago
Yes, this is a big problem in my mind and something I mentioned in another comment. Not that multi-threaded async/await is wrong, but the conflation of two methods of concurrency causes a lot of problems you don't see in single-th

More ›