ori_b

31 ms·

631.
by ori_b 3y ago
> Dependent on the user to install new versions Yes please! Is there a way to prevent tools I use from changing under me without my consent?
632.
by ori_b 3y ago
Then, by definition, most use of color in the command line is not semantic, because it increases visual noise for me. You may like color, that's fine. But for me, the effect of colored text as it is used today is akin to prose with eve
633.
by ori_b 3y ago
> Why? What specific benefit does that convey to my users? Readability, reduced visual noise, and compatibility with any terminal color scheme. > When I decided to color the output, I did so for a reason, otherwise I wouldn't hav
634.
by ori_b 3y ago
Meanwhile: https://www.aljazeera.com/economy/2023/5/2/twitter-fulfillin... > The social media giant fully or partially complied with 98.8 percent of takedown requests it received from October 27, the
635.
by ori_b 3y ago
Stack maturity problem?
636.
by ori_b 3y ago
As long as you are willing to accept the latency and/or busy looping that the kernel needs in order to poll.
637.
by ori_b 3y ago
I am on the committee. As you can probably tell by my posts, this was not unanimous. I'd categorize nullptr as 'mostly harmless'
638.
by ori_b 3y ago
Give me a legitimate use for void* that isn't a conversion.
639.
by ori_b 3y ago
That's a fine general sentiment. However, in this context it's a problem if you want to assign NULL to a pointer without a cast, which is why C++ added the magically convertible nullptr in addition to the magically convertible `0`
640.
by ori_b 3y ago
> If you ever see the macro NULL in code, be afraid. There are two valid ways of defining the macro Not on a Posix system, where the only valid definition of it is `(void*)0`. C could have adopted this definition. Nullptr is needed in
641.
by ori_b 3y ago
> Why do you need to do the things like it's 1976? It was solved decades ago: in 1976. I don't understand why you feel like it wasn't.
642.
by ori_b 3y ago
Why is using the composable OS feature reinventing the wheel?
643.
by ori_b 3y ago
I don't think plan 9 ever shipped with something like that. At least, my plan 9 systems don't have it: cpu% 9menu /fd/0:18: 9menu: './9menu' directory entry not found cpu% menu /fd&#
644.
by ori_b 3y ago
No.
645.
by ori_b 3y ago
Yes, so why copy paste C++ into C?
646.
Gefs: A good enough file system [pdf](orib.dev)
3 points by ori_b 4y ago|0 comments
647.
2023 International Workshop on Plan 9: Proceedings [pdf](iwp9.org)
2 points by ori_b 4y ago|0 comments
648.
by ori_b 4y ago
Mosh is closer to tmux than to ssh.
649.
by ori_b 4y ago
> Also, it's just been introduced and might not go anywhere. The way to prevent it from going somewhere is by raising the alarm loudly. Possibly also by lobbying for legislation that enshrines existing rights.
650.
by ori_b 4y ago
Or wrote its own plugins as needed.
651.
by ori_b 4y ago
I'm not sure why -- the one shipped with 9front is less than a thousand lines of C, and supports both DNS and HTTP challenges: https://git.9front.org/plan9front/plan9front/HEAD/sys/src/cm... h
652.
by ori_b 4y ago
I've used it. I know what it does. For a while, I've even run a linux with a slightly patched version of it for some quirky needs of my own. seccomp-bpf is a more fragile version of pledge; you need to keep changing your sandbox w
653.
by ori_b 4y ago
> We were talking about complex third party programs that are hard to lock down. A short code example using pledge is, now make sure you read these next few words and try to absorb them, entirely fucking irrelevant. That short code examp
654.
by ori_b 4y ago
> With something like pledge, you can't limit anywhere near as much as what you can limit with a MAC framework. Go ahead, tell me a specific thing that I can't limit with pledge and unveil. Note that everything you mentioned wh
655.
by ori_b 4y ago
> And if it needs access to an awful lot of data across the file system or raw devices (which is not uncommon for complex proprietary commercial software), what then? The same thing as any other framework. You either grant it access, or
656.
by ori_b 4y ago
You exec oracle with an unveil that prevents a compromised oracle from touching any data that you didn't intend, and an exec pledge that removes the ability to open any raw devices other than the ones you handed to it directly. The pro
657.
by ori_b 4y ago
Again, can you give an example of an jailbreak you're thinking of? So far, I don't even think you've given a clear explanation of your threat model. Once we have that, we can have a discussion about Oracle fits into it -- but
658.
by ori_b 4y ago
Did you realize your link points to a more fragile version of pledge? Linux has added a direct pledge+unveil clone to improve the situation: https://raw.githubusercontent.com/torvalds/linux/master/Docu...
659.
by ori_b 4y ago
You keep insisting that if you can run pledged and unveiled code as root, you can break out. Let's get that part of the discussion out of the way first, and then I'll happily switch tracks to pledging oracle. Though I'm not s
660.
by ori_b 4y ago
> Pledge is a goddamn toy and it's hilarious you think otherwise. Pledge isn't going to do ANYTHING to protect, say, a complex database server or any number of third party programs that need all kinds of access, and require bei

More ›