orf

25 ms·

481.
by orf 2y ago
But you’re conflating a few different things here. The regulations don’t say “you must use a fragile kernel module that runs the risk of boot-locking” do they? The underlying fault in this drama is Microsoft - third party code shouldn’t be
482.
by orf 2y ago
But now you run into the tragedy of the commons. The fact is that this does help organisations. Definitely not all of the orgs that buy Crowdstrike, but rapid defence against evolving threats is a valuable thing for companies. So, individ
483.
by orf 2y ago
It’s quite unclear about what your point/agenda is here. Are you truly this unfamiliar with the topic? If so, why comment, and if not, then why comment? It takes about 1 search and 2 clicks to find an article posted less than 24 hours
484.
by orf 2y ago
This entire thread is stupid. Computer security as a whole has improved, whilst the complexity of interconnected systems has exponentially increased. This has made the barrier to entry for malware higher, and so means we no longer have the
485.
by orf 2y ago
FYI, both the following statements can be true: 1. Crowdstrike didn’t test adequately 2. Viruses can move pretty fast once a foothold is gained
486.
by orf 2y ago
Microsoft puts the count at 8.5 million computers. So, percentage wise, the MyDoom virus in 2004 infected a far greater % of computers in a month: which in the context of internet penetration, availability and speeds (40kb/s average, 4
487.
by orf 2y ago
> Viruses don't move that fast Yes they do? And it’s more akin to a shared immune system than a single organism. In this case, it’s not like viruses move fast relative to the total population of machines, but within the population o
488.
by orf 2y ago
In London it’s really common
489.
by orf 2y ago
True, however on the other hand something truly basic like “not spending time re-compressing and re-uploading a cache after a cache hit”, “use zstd with caches”, or even “add fucking timestamps to CI logs” doesn’t even have any equivalent i
490.
by orf 2y ago
How is it light years ahead? I feel exactly the opposite way
491.
by orf 2y ago
Sure, why not
492.
by orf 2y ago
If you're small enough to be able to migrate away from Gitlab in a single day then you're not contributing to anyone's bottom line.
493.
by orf 2y ago
> introduced in the 2023 draft The article is from 2022 > There is aligned_alloc, evidently since C11. The article mentions this > The article should be called: ANSI C89 memory allocation sucks, and I'm forever upset. And your
494.
by orf 2y ago
While components look great (and I wasn’t aware!), it’s still just the same old “template-metaprogramming-with-yaml” that includes are: > Avoid using global keywords in a component. Using these keywords in a component affects all jobs in
495.
by orf 2y ago
> How do you find, for instance, GitHub Actions more advanced? Being able to easily tap into an ecosystem of existing re-usable functionality (actions) is a great and pretty advanced feature that requires a very different (and more advan
496.
by orf 2y ago
In the case of a docker registry, isn’t the “final bit” just uploading the final manifest that actually references the layers you’re uploading? At this point you’d validate that the layers exist and have been uploaded, otherwise you’d just
497.
by orf 2y ago
The compressed size is 20pb, so it’s about 500k per month in S3 fees
498.
by orf 2y ago
Meanwhile, in reality, the offshore development firm being paid per line of code from Linksys farmed the work out to juniors who haven’t graduated and couldn’t care less if something is encrypted or not.
499.
by orf 2y ago
> the way ublock etc work is arbitrary code exec and arbitrary access to the urls and pages. In other words, the problem is poor sandboxing of extensions.
500.
by orf 2y ago
Yes, this is what I said above: “Surely the problem isn’t making changes to a page, but instead having access to the full page content and being able to send it somewhere else.” “Send it somewhere else” being the important part. The interfa
501.
by orf 2y ago
This is simply bad advice. There are very, very few cases where you shouldn’t use a bigserial/bigint as a primary key. Perhaps the only case is where it is impossible for the rows to grow beyond a specific bound: an “AWS region” tabl
502.
by orf 2y ago
Surely the problem isn’t making changes to a page, but instead having access to the full page content and being able to send it somewhere else . For example, iOS runs content filters in a special isolated process with no persistence or acc
503.
by orf 2y ago
So the issue is poor sandboxing of extensions. Wouldn’t something like WASM help with this? As in, a content filter extension (or anything that interacts with a content filter) is run in a WASM sandbox without any access to the network or u
504.
by orf 2y ago
In the first paragraph of the article that you’re commenting about: > These custom "distroless" Linux images are set to come with 12 years of security support for Linux, and any included open-source application or dependency
505.
by orf 2y ago
This isn’t a very useful comment. It’s about as useful as an empty container image by itself sure, it’s “distroless” and also has the fantastic property of having 0 security updates required forever, but surely you can see that the moment y
506.
by orf 2y ago
indeed, new functions include “ffsll”, “ffsl” and “posix_spawn_file_actions_addchdir“
507.
DevOps: The Funeral (2023)(logical.li)
37 points by orf 2y ago|20 comments
508.
by orf 2y ago
Could be instead YAML or TOML. The point wasn’t specifically and only a JSON dependency, it was a dependency in general to do something useful and standardised
509.
by orf 2y ago
Ok. Do you want to now add anything relevant to the comment you’re replying to?
510.
by orf 2y ago
Cool, thats why this is a hypothetical question

More ›