ori_b

19 ms·

421.
by ori_b 2y ago
I don't reach for calculators so often. When numbers are small or mental approximations will do, it's simply faster to do it in my head. And I'm not even good at mental math.
422.
by ori_b 2y ago
Only if you're using busy polling. Very little software uses it, because it's only a good fit if you think pegging a CPU to reduce latency responding to packets is a good trade.
423.
by ori_b 2y ago
Why is leaving almost 15% of bad certificates in play ok? If it was shortened to 48 hours, then it would make 99.5% of them unusable, and I suspect the real world impact would still be approximately zero.
424.
by ori_b 2y ago
> You also have to prove more frequently that you have control of the domain or IP in the certificate. That doesn't particularly matter; if someone takes over the domain but doesn't have a leaked key, they can't sign req
425.
by ori_b 2y ago
Can someone point me to specific exploits that this key rotation schedule would have stopped? It seems to me like compromised keys are rare. It also seems like 47 days is low enough to be inconvenient, but not low enough to prevent signific
426.
by ori_b 2y ago
Why should I trust a CA that has no control over the certificate chains?
427.
by ori_b 2y ago
What do you think VCs are vetting for? (Hint, it's potential for profit, not ethics.)
428.
by ori_b 2y ago
Since the only way a program like that would be interacting with the environment via a side channel, it'd be equivalent to not running the code at all. As a result, you can disable all syscalls for your program with one simple request:
429.
by ori_b 2y ago
> Yup! The idea behind Pledge/Unveil was first in Landlock also. Landlock was released in Linux 5.13, in 2021. Pledge was released in OpenBSD 5.9, in 2016. As far as I'm aware, Pledge is the first of its kind.
430.
by ori_b 2y ago
It's rather hard to do anything useful if you disable i/o.
431.
by ori_b 2y ago
That advice has been good in stable times. The last 75 years have been remarkably stable for the world. The last 150 have been remarkably stable for North America. At the moment, it's an open question how stable things will be going fo
432.
by ori_b 2y ago
If the AI is really that good, it could also replace the people using all the existing commercial software. And the people managing them.
433.
by ori_b 2y ago
One could call that a 'tax', and to keep the process streamlined, instead of itemizing the benefits that corporations get from government services, one could simply charge a percentage of profits.
434.
by ori_b 2y ago
> Most of his popular works were published in the early 60's A significant portion of his writing postdates 1995. Very little predates 1965.
435.
by ori_b 2y ago
Milton Friedman died in 2006. He was two years old when the WWI started.
436.
by ori_b 2y ago
Yes, but competing with that -- imagine how much easier it would be to phish an agent into buying a product on the user's behalf.
437.
by ori_b 2y ago
You know what killed the dinosaurs, right? Impact.
438.
by ori_b 2y ago
Similar arguments for all texts, both technical and nontechnical?
439.
by ori_b 2y ago
This isn't about privacy; it's about who gets to promote what ideas to Americans. Do you think that a post about Tienanmen Square, about Uyghur persecution, or about Taiwanese independence, will get nearly as far on a Chinese cont
440.
by ori_b 2y ago
Yeah. Other than the trackpoint, there are a number of vendors that used to sell pretty solid machines with easy to replace batteries. The trackpoint was the only thing you had a tough time getting anywhere else.
441.
by ori_b 2y ago
You're someone. Start typing.
442.
by ori_b 2y ago
I recently bought a new laptop because I could only resume to work on OpenBSD, but not Linux. Suspend worked great under Linux, but without resume, the experience was sub-par. It's unfortunate that I needed Linux to get some of my work
443.
by ori_b 2y ago
That depends. Why do think make does this poorly?
444.
by ori_b 2y ago
Engineering is deciding that everything in your source tree will be designed to be similar, so you can have a small makefile.
445.
by ori_b 2y ago
Yes, sometimes things are unfixably broken, and it's impossible to build anything good. For everything else, there's MasterCard.
446.
by ori_b 2y ago
It's not so much the proprietary blobs, as the complete lack of documentation and debuggability for the peripherals. The PC platform, and several other SBCs, are either well documented, or at least give you the possibility of obtaining
447.
by ori_b 2y ago
As a maintainer of one of these OSes that runs on the pi (though not the person that did the port): no, it's a pretty big issue.
448.
by ori_b 2y ago
> From looking at the man page, it look like epoll does not return the file descriptor of the event; it returns a union containing user-defined data, although one of the union's fields is called "fd" because it is presuma
449.
by ori_b 2y ago
Counterpoint -- epoll is fundamentally broken: https://idea.popcount.org/2017-02-20-epoll-is-fundamentally-... You can end up with events on file descriptors that you don't even have open -- they leak across process bo
450.
Epoll Is Fundamentally Broken (2017)(idea.popcount.org)
9 points by ori_b 2y ago|4 comments

More ›