posix_me_less

11 ms·

61.
by posix_me_less 5y ago
> the U.S. military has traditionally been deployed to promote and safeguard American commercial interests Any examples except maybe Kuwait? Korea and Vietnam were for geopolitical reasons, "to stop communists taking too much power&
62.
by posix_me_less 5y ago
This is true only on its surface. Most fusion energy production happens in Sun's core and that stuff is both more dense and produces much more energy per unit volume than a compost pile.
63.
by posix_me_less 5y ago
Very hard to read. White text on black background is headache inducing and a turnoff. Either use less dark background, or use light background and dark colored text. Writer needs to work on style, this reads like a expert article in some pr
64.
by posix_me_less 5y ago
You can set up recursive resolver to query directly the DNS root servers. https://www.iana.org/domains/root/servers
65.
by posix_me_less 5y ago
The paper: Vallejos, J., Zoni, R., Bangher, M. et al. Ivermectin to prevent hospitalizations in patients with COVID-19 (IVERCOR-COVID19) a randomized, double-blind, placebo-controlled trial. BMC Infect Dis 21, 635 (2021). https:/&#x
66.
by posix_me_less 5y ago
Which part is incorrect?
67.
by posix_me_less 5y ago
> unlikely that anybody, including the NSA, can collect, index, catalog and parse meaning out of hundreds of GB _per second No, it's actually very likely. I've noticed people often make this argument as if it is obvious that th
68.
by posix_me_less 5y ago
> the citizenry would be up in arms if there were indisputable proof that our government orchestrated Not so sure about that. Large portion of population does believe that and they are not up in arms.
69.
VMs were a fad fit for the Great Recession. Containers’ time has finally come(theregister.com)
1 points by posix_me_less 5y ago|0 comments
70.
by posix_me_less 5y ago
> politics/government, corporations, the military. +political factions +institutionalized science +media They all tell us what to think, "trust us we did and will do the hard thinking for you".
71.
by posix_me_less 5y ago
> Ideally everything would just be in a single process. Any real example where this makes sense on an internet-connected device?
72.
by posix_me_less 5y ago
I agree, there are lots of outrageous claims out there about "provably secure software" which seem very dubious. What are your thoughts on SEL4, is it really a breakthrough it is made to be in success of formal verification? Is th
73.
by posix_me_less 5y ago
The speed of development was very low, and how many people can check the proofs?
74.
by posix_me_less 5y ago
Wow.
75.
by posix_me_less 5y ago
I didn't mean academic consensus. More like industry / security-aware people in IT consensus - almost nobody in software does formal verification and it would be foolish for any user, whether person, business or government, to tak
76.
by posix_me_less 5y ago
@madsbuch I meant classical "Dijkstra-style" proofs. I know about automated proofs, they are great accomplishment, and software that they produce may be good. I wouldn't believe those automated proofs any more than I would b
77.
by posix_me_less 5y ago
It is less likely to crash after you complete the proof than if you couldn't complete the proof, but this does not mean this benefit will be worth much. In general, all things being equal, software less likely to crash in production is
78.
by posix_me_less 5y ago
Yes. Debugging tool reduces number of bugs in the product. Formal design specification and design verification can do that. And even with something lackluster like gdb, you may be forced to do some redesigning before writing more of new cod
79.
by posix_me_less 5y ago
It allows academics and other informed scientists to talk confidently about their design. Everybody else like Linux admins and VM users is still working with a black box software. Sure cloud vendors may get on board and start announcing ho
80.
by posix_me_less 5y ago
Yes but the spec is often unknown (C language, GCC compiler, Linux) or flawed (speculative execution processors, which we know since Spectre). The fact there is a formally verified piece of design and software is not bullshit. I said the ma
81.
by posix_me_less 5y ago
Yes, formal methods can be useful, they help uncover bugs. It's a debugging tool, albeit a very demanding one. For some software, it makes sense to use it. Real deployment of VMs has larger problems with security than not formally veri
82.
by posix_me_less 5y ago
C was not initially intended for such a thing, although later people tried to restrict it. Also, "secure C code" is too vague. It depends on the scope. Grep is quite secure in what it does. Linux, less so.
83.
by posix_me_less 5y ago
I didn't say formally verified software is bullshit. I said the marketing here is. FV software exists but its benefits are very limited (basically it's a debugging tool). Running VMs on x86 or ARM in cloud has much more serious pr
84.
by posix_me_less 5y ago
The marketing for FV is indeed rare in larger software industry, probably because of quite small susceptible market. The latter is small, because 1) the FV process is expensive 2) it gives only limited benefits. Most of the marketing that e
85.
by posix_me_less 5y ago
To people interested in software process. There is a consensus that formal verification and automatic checks in software (even hardware) are a debugging tool, not a comprehensive success/security policy like the linked article would su
86.
by posix_me_less 5y ago
I don't know whether to laugh or cringe. "Machine checked formally verified" is a long-known buzzword that screams bullshit marketing. It does not mean that your VM will be securely isolated, data-breach-proof in practice. If
87.
by posix_me_less 5y ago
> If they were good at computer security, they'd be working a legitimate job. Um, what? Did you do a survey of all people who are good at computer security? Furthermore, maybe the attackers _are_ working a legitimate job. Do we know
88.
by posix_me_less 5y ago
> its distribution has to be consistent with gravity acting on an initially almost-uniform distribution with small cosmological perturbations That may be a restriction that some may operate with, but it is non-obvious why only models obe
89.
by posix_me_less 5y ago
You don't need quotes in res="$(... whatever ...)" This is sufficient: res=$(... whatever ...)
90.
by posix_me_less 5y ago
Exim is full of bugs, but it is hard to switch to something else. I'd prefer some pragmatic mitigation instead. Anybody using some general mitigations for exim, like running in chroot or in containers? How to set up such thing on CentO

More ›