Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ori_b
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
21 ms
·
451.
▲
by
ori_b
2y ago
> I guess this could be a facet of whether you see economic advantage as a legal conceit or a difference in productivity/capability. Does a billionaire stop being wealthy if they hire a money manager and spend the rest of their li
452.
▲
by
ori_b
2y ago
Opening accounts, moving money, hiring, and firing is labor. You're confusing capital with money management; the wealthy already pay people to do the work of growing their wealth.
453.
▲
by
ori_b
2y ago
AGI can't legally own anything at the moment.
454.
▲
by
ori_b
2y ago
How so? This is about how errors are defined, not how they're propagated through the application. Feels like you didn't actually read what was being done by the OP.
455.
▲
by
ori_b
2y ago
This isn't an article. It's a classified ad asking for timber donations.
456.
▲
by
ori_b
2y ago
You just described X11's DRI (direct rendering infrastructure). https://en.m.wikipedia.org/wiki/Direct_Rendering_Infrastruct...
457.
▲
by
ori_b
2y ago
Written so that it's easy to maintain, well tested, correct in its handling of edge cases, easy to debug, and easy to iterate on.
458.
▲
by
ori_b
2y ago
It's a BSD licensed binary blob. There's no code provided.
459.
▲
by
ori_b
2y ago
How can you tell?
460.
▲
by
ori_b
2y ago
It's worse than that. LLMs have been tuned carefully to mostly produce output that will be inoffensive in a corporate environment. This isn't an unbiased sampling.
461.
▲
by
ori_b
2y ago
> Raymond Chen has written in the past about this problem That would be a citation. Do you have a link?
462.
▲
by
ori_b
2y ago
The server side efficiency problem is running advertising.
463.
▲
by
ori_b
2y ago
> Imagine a worst case scenario for an RCE in a torrent program, and then what is your best case scenario for pledge and unveil being able to confine an attacker? Preventing exfiltration of any data outside of the downloads dir. Preven
464.
▲
by
ori_b
2y ago
> How? The torrent program needs read and write access to create whatever files it needs to, which can't be predicted ahead of time. The same way it was handled in Firefox, for example; unveil the output dir. At least my torrent pro
465.
▲
by
ori_b
2y ago
> Pledge can't really help with the torrent program since it needs to make new network connections and write and read arbitrary files constantly. Unless as you say, you substantially modify the code. Unveil helps with the "arbi
466.
▲
by
ori_b
2y ago
> Say, running an instance of Oracle, or a torrent program that by it's nature constantly needs to make network connections and write/read different files? Yes, those seem relatively simple to pledge (source availability aside)
467.
▲
by
ori_b
2y ago
> I think this is true for simple programs, and less true the more complex a program is. Chrome and Firefox have both been successfully pledged and unveiled. What programs more complex than them are you considering?
468.
▲
by
ori_b
2y ago
> No, I suppose not, but then, is there really an advantage to doing so? A massive one; not reading the config is just a consequence of dropping all file system access once you're done with the initial program setup. You can also se
469.
▲
by
ori_b
2y ago
Most programs require a setup phase, where they want a great deal of access to the environment to set up the resources they use, and a steady state phase, where they need very little access beyond pre-opened file descriptors. An externally
470.
▲
by
ori_b
2y ago
With small projects, websites tend to be updated infrequently. On the other hand, there seem to have been 11 commits to the main project repo today: https://groups.google.com/a/hardenedbsd.org/g/src-commits-al
471.
▲
by
ori_b
2y ago
I took a look at the code, and the file based code is basically the worst case for the file system, accessing about as many files as it can. Additionally, it's doing a lot of unnecessary work. It's using buffered I/O to do a
472.
▲
by
ori_b
2y ago
In some ways, it seems surprising that avoiding open/read/write syscalls and caching in user space is only 35% faster.
473.
▲
by
ori_b
2y ago
Git does both. When you create a commit, it stores a full (zipped) copy of the object, without any deltas. Periodically (I believe it used to be every thousand commits, though I'm not sure what the heuristic is today), git will take th
474.
▲
by
ori_b
2y ago
With large numbers of parameters, it's almost always more readable to use a config struct. Especially since often, you want to collect configuration from multiple sources, and incrementally initializing a struct that way is helpful.
475.
▲
by
ori_b
2y ago
> You could argue this is excessively clever, but when you need it, you really need it I've probably written millions of lines of C so far, and I don't think I have ever needed it.
476.
▲
by
ori_b
2y ago
I've written both kernel code and embedded systems. It's easier to maintain the code when the preprocessor is avoided.
477.
▲
by
ori_b
2y ago
Note: this breaks if you want to pass struct literals: plot((myfoo){x,y}) Macros will take the struct literals as multiple parameters: plot( .arg0=(myfoo){x, .arg1=y} ) C macros are best left unused when pos
478.
▲
by
ori_b
2y ago
That's not entirely true -- Google has wanted you to generate an application-specific password for a long time.
479.
▲
by
ori_b
2y ago
The compiler can't drop as needed, because the drop prevents things from being tail calls. A single drop in a function prevents any calls from being tail calls, and therefore, they can't be eliminated. In idiomatic rust, this mean
480.
▲
by
ori_b
2y ago
The problem with doing it in rust is that most calls aren't tail calls, even if they look like tail calls. You need to invoke the destructors for any code path that can drop.
More ›