ploxiln

46 ms·

451.
by ploxiln 8y ago
This is a principle borne of experience. There have been a number of cases where a new fatal-error check killed a bunch of systems that apparently were working for a long time before. Usually it is preferred to WARN_ONCE() but not BUG_ON().
452.
by ploxiln 8y ago
The problem is when all tickets sell out in a couple minutes (at the unrealistic list price), limited only by the IT infrastructure handling the orders. In this case only "professional scalpers" can win the race to be "first&
453.
by ploxiln 8y ago
It's a sub-component. graph("web app") - graph("fifa web app") = expected smooth trend
454.
by ploxiln 8y ago
to check the outputs are roughly the same?
455.
by ploxiln 8y ago
It is true that some features can be maintenance burdens for software projects. But bookmark descriptions? Really? That's ridiculous. WebGL, or WebVR, or Pocket, maybe, those could be a burden. But BOOKMARK DESCRIPTIONS? Maybe the exis
456.
by ploxiln 8y ago
don't just trust the drive's SMART attributes - try to independently confirm when and how the drive is failing techreport did a long-term experiment on this (but with limited samples): https://techreport.com/review
457.
by ploxiln 8y ago
No need to stop there - it's just historical, very old advice, the rest is pretty good. It underestimates how aggressively inefficient today's trends and frameworks are. It actually advocates for focusing first on simplicity. And
458.
by ploxiln 8y ago
"as much as possible" would be to put it in a virtual machine, or actually separate physical hardware, maybe in a multi-million-dollar bank vault to prevent physical tampering. Then there's a reasonable amount of isolation, w
459.
by ploxiln 8y ago
With systemd, any really tricky low-level bug is systemd's fault, because systemd tries to do everything, in the most "advanced" way. And due gnome3 dependencies it's been adopted by all major distros. Before systemd, a
460.
by ploxiln 8y ago
If you want easier concurrency with higher overhead, that's exactly what OS threads do. The OS kernel is the "event loop" in this case, and they're highly optimized for this, though there is some overhead which is hard t
461.
by ploxiln 8y ago
Headline in alternate universe: "With the powerful computers available in the mid-late 2010s, it is now practical to browse an international web of documents, from your own home!" Seriously - just this increase is 2x the total m
462.
by ploxiln 8y ago
Minor correction: the plain text version is 708 KiB, the ePub version which is 280 KiB uses compression (it's a zip file). Another nifty datapoint: the plain text of War and Peace is 3.2 MiB
463.
by ploxiln 8y ago
Packages are vetted, in the repos, just not in AUR. They also keep tools that would easily/automatically build and install packages from AUR out of the main repos, to encourage manual handling and individual consideration of AUR packag
464.
by ploxiln 8y ago
So I guess the alternative would be to tunnel TLS inside TLS. So they can set up fake CAs to intercept the outer TLS, but not the inner TLS, satisfying both bank regulators and actual security. Until regulators catch on and we have to go ar
465.
by ploxiln 8y ago
Sure, good idea: https://arxiv.org/pdf/1708.09537.pdf
466.
by ploxiln 8y ago
Software engineers are right to be scared of these voice assistants. The problem is that typical sloppy, glitchy software (and hardware) is poised to record your voice and send it somewhere at any time, and that somewhere will play or recor
467.
by ploxiln 8y ago
When I moved between apartments in NYC, Time Warner Cable internal systems got very confused somehow. I had working internet at the new address, and was only being billed for the new address, but the old address was still under my name some
468.
by ploxiln 8y ago
Each line, individually, is total nonsense. It never makes sense to use strlen() for an argument to strncpy(). Only the size of the destination buffer makes sense for strncpy() (usually sizeof(dst)). For other cases you would probably use m
469.
by ploxiln 8y ago
Ah such classic outsourced third-world contractor output. They are told what to do (by some PM who has no idea) and they do it. If they ever say "uh this doesn't make sense" they are cheaply replaced. I've seen some of t
470.
by ploxiln 8y ago
Another great example is CSD (client-side decorations). Classic X window managers do not handle them well, and many users do not want them, but they were added in GTK+ 3.10 with no reasonable way for the window manager to disable them. Basi
471.
by ploxiln 8y ago
It really depends on the websites. Firefox has long been significantly faster than it was in the Firefox-1.x days, when it was the fastest browser. It's always been perfectly snappy and efficient for hackernews, craigslist, 10,000-line
472.
by ploxiln 8y ago
Even that isn't quite it - this is not a case of people accidentally downloading and running malicious containers. People are leaving kubernetes/docker/whatever open to the world, and attackers are instructing their servers t
473.
by ploxiln 8y ago
Yup, good clarifications. As you say, "fallback retries" are bad. But that is what browsers did, some years ago, when tls1.2 was less common ... and they added the TLS_FALLBACK_SCSV "not-a-cipher-suite" to try to detect
474.
by ploxiln 8y ago
This isn't really the situation. The old code does not have to handle any new elements. It just has to compare (1,3) to (1,2) and send (1,2) the same as before. It has to look in an explicit list of optional items, and skip over all th
475.
by ploxiln 8y ago
All cars from all manufacturers are running 10s or 100s of times more code than they did 10 or 20 years ago. https://skeptics.stackexchange.com/questions/39559/does-the-... This really affects the nature of the si
476.
by ploxiln 8y ago
Stephen Elop, from Microsoft, became CEO of Nokia in 2010. Nokia was struggling to adapt before that, in 2008/2009, but Elop formed partnerships with Microsoft, put all bets on Windows Phone, and cancelled work on Android devices and t
477.
by ploxiln 8y ago
I wonder if we'll ever get back to "go ahead and browse random script-free websites, but only run trusted code". I guess it's way too late for that. We'll be patching side-channels forever.
478.
by ploxiln 8y ago
This is exactly what linux distributions do. Big ones with lots of contributors package around 10k libraries themselves. Small one-man shows package at least a few hundred common c / c++ libraries. This is also why I'm not terribl
479.
by ploxiln 8y ago
I guess you could have an "internal network" browser config with _only_ the DoD CA root.
480.
by ploxiln 8y ago
Back in the day, there were a few more women in CS :) I still agree that CS being "less social" is a huge factor. But have to admit it seems like there's some other factors too, and I think the "less social" and &qu

More ›