ongy

11 ms·

121.
by ongy 3y ago
No. And GP explictly said they don't tend to make it useful, but only do it when it's easy. Making the return value of e.g. a database handle always "useful" is a ridiculously dangerous idea that can lead to application
122.
by ongy 3y ago
In the Haskell world there's a bit of a cheap differentiation for this kind of leak. Memory leak: classical C style, fully lost in memgrind (runtime bug) Space leak: Some memory structure requires significantly more memory than it shou
123.
by ongy 3y ago
I want a tea pet that's a lucky cat with a samurai plate armor instead of those spikes.
124.
by ongy 3y ago
Secure boot also doesn't rely on Microsoft... It's always amusing how much people don't understand either of secure or trusted boot and start rambling about it.
125.
by ongy 3y ago
Please don't just rant about it, but explain, or link to an explanation, the difference so others can see if there's actually a substantial difference.
126.
by ongy 3y ago
I Haven't used java in ages. Though from a quick search, it's still just scalar/unary values. Rhough one of the better implementations of those. But the big advantage of the more sum type Style enums rust provides is the abi
127.
by ongy 3y ago
Because many people start learning in one of the industry incumbent, not necessarily good by design languages. Java, C, C++, python, Javascript, go... As a second language is a quite different selector than after education in language desig
128.
by ongy 3y ago
The blog post is by the open source office in Google, not specifically the android team And so far entirely about AOSP and getting that running. GApps (the non-free part) isn't mentioned at all. And like someone else said, there'
129.
by ongy 3y ago
Serious question Are you supposed to not see the gorilla? I assumed it's the trap and there's some slightly less obvious catch in there.
130.
by ongy 3y ago
Gotcha. Yes There's also this project https://www.cs1.tf.fau.de/research/system-security-group/tre... which reserves some CPU registers (iirc. A hardware aes accelerator on one core) to prevent key leakage.
131.
by ongy 3y ago
Yes and no. Mostly no IMO The memory encryption features are a solution to very specific problems. If the CPU is able to access the memory, then any exploit that gains the execution context of the legitimate user can also access the memory.
132.
by ongy 3y ago
For the claim of GGP (stealing out of memory) it's worse, as that's still possible, and there's a bus the key travels over. The PCRs attest system state to the OS, yes. Though the verified boot (PSB/Secure Guard + Sec
133.
by ongy 3y ago
For large symmetric operations like disk encryption, the MVK is still in memory. TPMs are slow and have rather restricted memory. They are fine for PCRs and some asymmetric operations. But here they only unseal a key that is then used in s
134.
by ongy 3y ago
FIPS certification doesn't make something more secure. Just more certified. It's incredibly slow to adapt to new technology. fTPM has a different attack surface, and protects against this specific attack. It's most likely be
135.
by ongy 3y ago
It is.
136.
by ongy 3y ago
that's what GP said. They are semantically simple string operations whose computational complexity scales with string length. Near unbound string lengths would exhaust the time (somewhat aproximated by instruction) budget of eBPF appli
137.
by ongy 4y ago
I'd say that's a feature, and sadly declining. Though I do agree that the early split is questionable at best. The enormous inflation in degree requirements just makes things harder on everyone. Most jobs don't require coll
138.
by ongy 4y ago
They are. But outside some specific ones, a (good) univeristy education is still better. Judging from the comment further down, I also assume that they are talking more about social class of students reflecting in the student bodies. Which
139.
by ongy 4y ago
Not sure about the memory requirements. My container currenty uses 128MB RES memory. But I also only have a couple thousand images. Not sure how strictly in memory some DB/structures are. I assume importing an existing library takes a
140.
by ongy 4y ago
Have a look at https://photoprism.app/ then. I think their actual multi-user story is somewhat lacking, but if you want a shared picture dump with some features that help sorting through a bunch of random images it should w
141.
by ongy 4y ago
You are saying that as if the part of the X11 protocol that's reasonable to run over the network was the better API that application developers are simply too lazy to use. While the reality is, that toolkits (and applications) used to
142.
by ongy 4y ago
Less of a question, more a note: In the configure page to pre-order for the 12th-Gen variant, there's a link to the 12th-Gen variant. Feels a bit weird and confusing to be pointed towards the shiny new variant, while shopping for the s
143.
by ongy 5y ago
I've been out of the scene for a couple years now (essentially since I switched from student to full time), but it's mostly the goals. wlroots is the de-facto standard library used by almost everything but the big 3 DEs. But it&#x
144.
by ongy 5y ago
Hey, I'm the (mostly negligent) original author of waymonad. Minor GC stalls are not an issue for reasonable framerates right now. Major stalls are in the order of a single frame. Which I considered acceptable, but YMMV. I fully agree