Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
pilif
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
81 ms
·
841.
▲
by
pilif
11y ago
Back in the days when I was a child firmly living in DOS/Windows 3.1 land, I was always wondering whether that rumor that you can brick a mac by just dragging the system folder into the trash was true or not. Now I know that, yes, it w
842.
▲
by
pilif
11y ago
I've said it before when caddy was last mentioned, but this is how I want Let's Encrypt to work with all web servers. Yes. That includes the big ones like nginx, apache and even IIS. By default, all that's needed is to turn
843.
▲
by
pilif
11y ago
>not to mention some obsolete Faildows encodings like CP1251 still widely used here in lots of tech-slowpoke organizations. as we're talking encodings: The worst file I ever had to deal with combined, within one file, UTF-8, cp437
844.
▲
by
pilif
11y ago
>How would the two encodings be used? How would they be used in a message consisting of both monetary and datetime? Full month names would be encoded in encA. Currency symbols in encB. Is it a good idea? No. >Should the setting not
845.
▲
by
pilif
11y ago
>Rob probably sees things like LANG and LC_ALL as bugs. His fix was UTF-8 everywhere, always The problems solved by LANG or LC_ALL are not solved by UTF8 alone. Even if you use UTF8 for all your input and output, there is still the que
846.
▲
by
pilif
11y ago
Thank you - I was mistaken in some of the clauses of the CDDL.
847.
▲
by
pilif
11y ago
They are also the copyright holder of a huge chunk of ZFS' code. So they can also sue Canonical over their violation of the CDDL which oracle (as the copyright holder) has licensed ZFS under.
848.
▲
by
pilif
11y ago
> It appears that the hacker did not update the MD5 present in the automatic update mechanism. (Sparkle) Thus, when the automatic update mechanism downloaded the hacked version of Transmission, it reported it as a corrupted download yeah
849.
▲
by
pilif
11y ago
The fact that the binary was infected, I can somewhat understand. However, the way communication happened/is happening on this issue is very disconcerning and basically makes it impossible to know whether it's safe to currently do
850.
▲
by
pilif
11y ago
$200/month feels cheap to me considering how much effort and money it would take to get this defense if you are on your own. Just talking about the bandwidth cost, if it was even possible for me to get the 400gbit/s bandwidth requ
851.
▲
by
pilif
11y ago
>One of these historical warts is that the creation of raw sockets, which is how ping sends ICMP packets, requires root. It's a good thing raw sockets require root. Raw sockets are incredibly powerful tools that can be used for al
852.
▲
by
pilif
11y ago
> The best app stores are the ones beginning with apt-get, yum, slapt-get etc At least apt is as pissy about expired GPG keys as MacOS is about expired code signing certificates.
853.
▲
by
pilif
11y ago
Under windows, when I sign a binary, I also have the option (well - it's more like a strong recommendation) to time-stamp the signature. That way, windows can check whether the signature was made during a time when the certificate was
854.
▲
by
pilif
11y ago
Actually, I would argue that this is not true. Before installing, the device wants a ticket to be signed by apple that contains a hash of the firmware to be installed, the phone's identifier and a nonce it has just generated. See here:
855.
▲
by
pilif
11y ago
I think apple signs every single OS installation operation by using a mechanism Jailbreakers refer to as SHSH ( https://www.theiphonewiki.com/wiki/SHSH ), so it could be argued that, yes, Apple is in full control over wh
856.
▲
by
pilif
11y ago
There still are a lot of lines in a lot of files that were written by Sun employees which are now owned by Oracle. So the same way a kernel developer has a potential standing to sue canonical over their potential GPL violation, Oracle has t
857.
▲
by
pilif
11y ago
"ist" also is the third person singular conjugation of the german verb equivalent to the english "to be", allowing you to spell stuff like pilif.ist/doof
858.
▲
by
pilif
11y ago
> Who is injured exactly by integrating a kernel module with primarily CDDL code with the Linux kernel Oracle as the sole copyright holder of zfs might be because thy lose potential Solaris sales when zfs is distributed with Linux this
859.
▲
by
pilif
11y ago
For me, the current interface is perfect (though I wouldn't call our usage large-scale by a long shot), though it would be even better if acmetool would indicate using the exit code whether the web server needs restarting or not after
860.
▲
by
pilif
11y ago
nginx you can also reload gracefully using the same mechanism. Still. It would be cool if it wasn't needed. I mean - you don't normally restart web servers when a file in the document root changes - why would you still have to do
861.
▲
by
pilif
11y ago
this is how it should work. Very nice. I can't wait for other web servers to gain this ability too. Or at least allow us to load certificates from dynamic locations based on some request data. All other web servers I looked at (nginx
862.
▲
by
pilif
11y ago
The official let's encrypt client is very heavy-weight. In my case I've build a much simpler thing using acmetool ( https://github.com/hlandau/acme ) which is mcuh simpler to use and nicely runs without root ri
863.
▲
by
pilif
11y ago
> If the Git blobs were the source of the memory leak then this would, in fact, fix the memory leaks. no. Because they are still reading git blobs - just only for the smaller files. > GitLab no longer loads large Git blobs (e.g. bin
864.
▲
by
pilif
11y ago
Nitpick: > GitLab no longer loads large Git blobs (e.g. binary files) into memory when browsing a Git repository. This prevents timeouts and memory leaks. Nope. Not loading something doesn't prevent memory leaks. It might make exi
865.
▲
by
pilif
11y ago
>>The government says your objection appears to be based on concern for your business model and marketing strategy. Is that true? > Absolutely not. Nothing could be further from the truth. This is and always has been about our cus
866.
▲
by
pilif
11y ago
Most of the reasons why you have to type v4 addresses are irrelevant in a v6 network. In a small to medium network you just plug in the router and you're done. No picking a suitable private network, no configuring a DHCP server, no typ
867.
▲
by
pilif
11y ago
> Our conclusion is good for Ubuntu users, good for Linux, and good for all of free and open source software I would say that your conclusion is bad for linux and bad for all of free software. Because if linking your non-gpl-licensed bin
868.
▲
by
pilif
11y ago
I can understand how you disagree with Mathew (and I also would prefer for ZFS to be universally available under Linux), but that's not the point here. The GPL states in clear terms what's allowed and what isn't. It doesn
869.
▲
by
pilif
11y ago
That's what they say - others claim that even a dynamically loaded module is producing a derivative and thus you're not allowed to distribute a non-GPL-ed binary module. Matthew Garret (a kernel developer and thus a shared copyrig
870.
▲
by
pilif
11y ago
You assume I wanted to write an FTP server. I don't. I am using stock vsftp with a PAM module that allows authentication against our web application.
More ›