ongy

10 ms·

91.
by ongy 2y ago
Since you attended how much did people actually follow the mandate? I looked through the pictures, and it seems to be ~not at all for picture/social situation, and maye 50% for general?
92.
by ongy 2y ago
@zachmu can you upload the code you ran to a public repo? I'd like to play with it a bit, to compare patterns I've done before and am too lazy to copy+paste ;)
93.
by ongy 2y ago
Ok, it doesn't integrate with the system at all. This provides a library to access the device. I.e. it can only be used by a single consumer, that consumer doesn't get nice things like ther kernel's file systems or device map
94.
by ongy 2y ago
It's not protected by the copy-left properties of the kernel D: For the more technical points: The kernel needs to have it available in a somewhat complex way to be able to mount the drive. I.e. init becomes a lot more involved with an
95.
by ongy 2y ago
The cropped or re-focused image isn't the same as the original, at best a derivative. And yes, in general a photo of a larger gathering is fine, singling out any person is not. So the original would be fine, the derivative not.
96.
by ongy 2y ago
It's largely selectively enforced because the executive doesn't enforce it unprompted. I.e. in practice it gives everyone the right to have their right to their own likeness enforced. Which most of the time isn't taken too s
97.
by ongy 2y ago
Oh https://www.lmu.de/de/workspace-fuer-studierende/1x1-des-stu... . LMU down to 85 for Munich While that doesn't include a full Semesterticket, it's cheaper than Dortmund without
98.
by ongy 2y ago
Where do you get those numbers from? When I studied (2014-2018) I paid 100-150€/semester Slight trend upwards, might be 200€ now And that was in Munich, which tends to be expensive.
99.
by ongy 2y ago
Without looking at the he specific implementation There should be a service running as uid=0 that exposes an unprivileged API. This service then takes the RPC and does authorization with polkit. I.e. the unprivileged part doesn't talk
100.
by ongy 2y ago
The specific way sshd was infected would not have happened with libxz as dlopen library. Debian's sshd only uses libsystemd for the notify api. I.e. it doesn't need any feature that uses libxz. If it's dlopen()ed, it does not
101.
by ongy 2y ago
dynloading libraries can have some side effects. Which the recent xz attack used to mess with `sshd`, even if it never actually used functions from the library. dlopen loading only loads the library *when it's actually used*, and doesn
102.
by ongy 3y ago
But then it defaults to the users username on device Which isn't always in sync with their GitHub username. Which might even be "root".
103.
by ongy 3y ago
I just saw, judging by Nick you are probably the author :) Do you have the protocol defined somewhere? Wstunnel is one of our options, and we'll likely add a golang library for the solution we chose. Would be easier if I don't ha
104.
by ongy 3y ago
We recently ran into issues with http2. Specifically the lack of support in zscaler. We are still looking into something like wstunnel and websockets, though I'm preparing myself for the day when we have to add "normal" http1
105.
by ongy 3y ago
IP is weird. TTL is still in seconds, but every hop has to decrease it by at least one. I'm not sure if there is any implementation out there that cares, but if e.g. wifi retries or a massive buffer queue lead to a packet spending more
106.
by ongy 3y ago
I know the differences between them conceptionally. The thing that people usually complain about is systemd forcibly setting its process manager at pid=1. I.e. the thing "discussed" in https://github.com/systemd&#x
107.
by ongy 3y ago
How is the service manager different from PID1/init?
108.
by ongy 3y ago
NAT traversal is the first point on the feature list of the linked repo. So in context, it's important to point out. While in theory it doesn't it reduces the possible connections quite a bit. Though STUN servers are plenty on the
109.
by ongy 3y ago
This must be the weirdest call to authority I've ever seen. Consens algorithms are important in both safety and distributed (High Availibility) scenarios. There's no necessary link from research into that, and blockchain in genera
110.
by ongy 3y ago
Yes. I was thinking of that for a moment as well. But it requires some understanding and is annoying in various ways. I should look into how to provision users at some point. but OTOH GKE takes care of it for our prod, and other clusters ca
111.
by ongy 3y ago
Which LB doesn't support non-http flows?
112.
by ongy 3y ago
It's really not that hard if you got proper users. But doing proper users on k8s is hard. I suspect they just run with admin credentials and no real way to generate users.
113.
by ongy 3y ago
That's really the kicker for me. When the company is set up well on k8s, then choose k8s. If the company is set up well on VPS, then choose VPS. If it got neither, I'm unsure what's the better way to go on a greenfield. k8s h
114.
by ongy 3y ago
If you haven't heard yet, now's the time to mourn bash.org :(
115.
by ongy 3y ago
> foreign bad Sort off. The `.gov` tld is explicitly for US gov tasks. Whether the service is trustworthy or not is a different question. Whether it makes sense to use an external service for identification is another. But if it's u
116.
by ongy 3y ago
The "Fetch from follower" button is slightly broken on my Pixel6 The breakdown one looks good, but the follower seems like the background got reduced width, but the active button is moving full width
117.
by ongy 3y ago
1. I agree with the sibling comment, that's usually not the depth I need for application level info. So the entire skill and infrastructure cost for metrics still exists. But it's nice to have as basic data for triage. 2. I always
118.
by ongy 3y ago
There's plenty other applications. Network routing can be implemented in (e)bpf. It's even the original use case. But there's also the LSM based on ebpf, there's a user space scheduler (Google iirc), seccomp and some cgr
119.
by ongy 3y ago
On top of the issue with nil not being a useful value for most types Nil requires pointer values. I.e. it's impossible to know whether something is a pointer to allow for nil, or because a copy would be prohibitively expensive and ther
120.
by ongy 3y ago
Because nil panics on member accessors... It's the opposite of what you claim to be the standard in go. Thanks for demonstrating that you forget how to write software around erros.

More ›