ploxiln

42 ms·

391.
by ploxiln 7y ago
contained.af uses seccomp to block a bunch of syscalls that you would not block for a real service, for example socket()
392.
by ploxiln 7y ago
Surely this is the nail in the user-agent-sniffing coffin
393.
by ploxiln 7y ago
That analogy might work with the original formulation of this idea: if someone opens a "big" pull request on a project you weary of, hand it over. That PR, even without substantial review, can show effort and familiarity, and you
394.
by ploxiln 7y ago
Great point. I happen to use row-format mixed (default on RDS), so that can make it OK. Also, often I have some other related stuff to cleanup, so the pattern is more like: SELECT id, stuff FROM table WHERE expired LIMIT 1000; do cleanup; i
395.
by ploxiln 7y ago
Deleting lots of rows is perhaps the biggest weakness you are running into. What I do for some cases is "LIMIT 4000", sleep for 1 second, and repeat until no rows affected (tweak the numbers for your situation obviously) (usually
396.
by ploxiln 7y ago
it's "install known-good software from mozilla" vs "whenever mozilla has crazy marketing or security ideas in the future, let them immediately and randomly install whatever, which maybe seems like a good idea for the myt
397.
by ploxiln 8y ago
Failing to clear padding in structs is _really_ not often a problem. It's pretty much only a problem when copying un-packed structs from kernel-space to user-space. So if you're not working on an OS kernel somewhere in the syscall
398.
by ploxiln 8y ago
This happens occasionally for new versions of 7-zip and more often for niche open source tools which offer installers or executables for windows. You should have a bad taste for antivirus. It's never really worked.
399.
by ploxiln 8y ago
go minor releases make a surprising difference - you'll see a big difference if compiling the same project with go-1.10.z vs go-1.12.z https://github.com/golang/go/issues/27266 a very recent cause of pcl
400.
by ploxiln 8y ago
I think the primary motivation is more efficient SMB and NFS serving to systems which prefer case-insensitivity - macOS and Windows. Samba doing this in userspace is less efficient (and maybe racy) since it has to list the whole directory t
401.
by ploxiln 8y ago
I think the closest thing is https://github.com/kevinlawler/kona
402.
by ploxiln 8y ago
just have to avoid HN italic syntax thing, but yes: d = {**d1, **d2}
403.
by ploxiln 8y ago
> Is this a primary use case? When it's not practical to make the changes at the origin server? One major use-case, yes. "We'll pay big bucks for you to fix the website. But also, we can't make any changes to the webs
404.
by ploxiln 8y ago
correct me if I'm wrong: mingw-w64 has nothing to do with musl libc, which is exclusively for Linux
405.
by ploxiln 8y ago
> someone with control over example.github.io might have been able to get a certificate for any github.io domain I think that, realistically, that's a lot less likely. I think the "weirdness" of the in-addr.arpa hierarchy
406.
by ploxiln 8y ago
You can do something similar in C - make struct wl_list the first member of struct data, and just cast the wl_list node pointer to a data pointer (offsetof is zero). I think the most common reason for this generic-location offset-of style i
407.
by ploxiln 8y ago
I don't consider Slack and Spotify to be good at making applications (despite their popularity). These are the least efficient chat app and least efficient music app ever, in a multi-decade history of chat and music apps, which didn&#x
408.
by ploxiln 8y ago
Stable linux distros have a long history of backporting security patches themselves - RHEL does this the most/longest, Debian and Ubuntu somewhat less but still a lot. They've given up on web browsers, but for most other stuff, de
409.
by ploxiln 8y ago
Yeah, I'm sympathetic to the Ubuntu maintainers - at this point there are teams/companies which have built some server application/service on Ubuntu 18.04, and expect no backwards-incompatible changes for 5 years (the classic
410.
by ploxiln 8y ago
... or just plain impossible if you don't have a recent beefy desktop-class cpu.
411.
by ploxiln 8y ago
In fact, git stores a full snapshot of your entire repo with every commit. It does not store diffs from the previous commit. When you do "git show <COMMIT_SHA>" it generates a diff from the parent commit on the fly. There&#x
412.
by ploxiln 8y ago
Prior to Amazon buying out FreeRTOS (along with its creator and maintainer) and relicensing it to MIT, it was "GPL with exceptions". Clause 1 would be OK if it left it at "through the FreeRTOS API interface", that's
413.
by ploxiln 8y ago
I've had shutdown (for reboot) hang a few times after a systemd update, forcing me to cut the power. It's made me a bit paranoid, so I block the systemd package from having updates automatically installed, and every 6 months or so
414.
by ploxiln 8y ago
djb's old daemontools suite had an interesting solution to the "how to log failure when you can't write to a log" problem: a persistent child process with some space reserved in its argv, where it can stash some error me
415.
by ploxiln 8y ago
You're right, that makes sense. But still glossy displays seem to have plenty to reflect right into your eyes.
416.
by ploxiln 8y ago
... or if there's a bug, or if the bridge from the extension to the page content has a mistake that lets javascript on the page control it. That's actually happened to all the major vendors like LastPass and OnePass, and to some o
417.
by ploxiln 8y ago
It's healthy to not use autofill, and to not have your password manager integrate with your browser, and to use an ad blocker that blocks analytics stuff including intercom, segment, etc.
418.
by ploxiln 8y ago
> Even when reflections show up on glass displays, it's easy to see past them because they're full optical reflections with correct depth in stereo vision, meaning that you can correctly focus on the screen without focusing on
419.
by ploxiln 8y ago
I still use USB Overdrive to make a physical scroll wheel work without crazy acceleration. Without it, macOS seems to scroll just a pixel on the first click of the wheel, maybe two pixes on the second click, but if I scroll a bunch, it jump
420.
by ploxiln 8y ago
The reasoning given is: if you're aware it's a bad idea, great! Don't do it. If you don't yet know it's a bad idea, and do it, you'll see how many places it has already been leaked, and hopefully start using di

More ›