ptx

6 ms·

61.
by ptx 3mo ago
The "VM-isolated sandbox" is apparently not referring to the JavaScript VM but to a hypervisor, according to the text a bit further down on the page. I wouldn't expect that to be particularly fast or efficient, especially not
62.
by ptx 3mo ago
And what are the tradesoffs? How is it so much smaller than V8 while also apparently including a package manager, a web server, a TypeScript compiler and a hypervisor?
63.
by ptx 3mo ago
With each new Java release the previous one becomes instantly unsupported (meaning that it receives no security updates), unless you pay Oracle (or another vendor). So you are forced to update if you want security updates (or run only LTS r
64.
by ptx 3mo ago
Your blog isn't loading at the moment, so I'm not entirely sure what you mean here, but... > capsicum is after the fact After the fact in what sense? The program enters capability mode before touching any arguments or doing I
65.
Every JavaScript bundler handles inline <script> tags wrong(carter.sande.duodecima.technology)
3 points by ptx 3mo ago|0 comments
66.
by ptx 3mo ago
> 78% of those blocks are a single line — a pointer that came from C++, or one call into a C library Don't those blocks need some additional lines for error checking to prevent the unsafety from spreading to the safe code?
67.
by ptx 3mo ago
Just as another point of comparison, FreeBSD's version seems somewhere in-between. It also enables a Capsicum sandbox before processing any data, akin to what the OpenBSD version does with pledge. [1] https://github.com&#x2F
68.
by ptx 3mo ago
Is this functionality accessible from sandboxed processes? That would make a remote hole much more dangerous when one is found, anyway. The CVE seems to concern SysV semaphores and the pledge(2) man page doesn't seem to mention those.
69.
by ptx 3mo ago
How do you run Scheme directly in the browser?
70.
by ptx 3mo ago
https://en.wikipedia.org/wiki/First_International "The International Workingmen's Association (IWA), commonly known as the First International [...] was founded in 1864 [...] The preparatory Address of Englis
71.
by ptx 3mo ago
How is unionization gatekeeping? I honestly don't understand what you mean. I can't see any disadvantage for the employees in joining a union.
72.
by ptx 3mo ago
Isn't this just quantization with extra steps? Can converting the text to an image really be a better way to lossily compress it? (Not that I have any idea what I'm talking about on this topic.)
73.
by ptx 3mo ago
FreeBSD forums, using XenForo which doesn't seem to be open source: https://forums.freebsd.org/ Arch Linux forums, using FluxBB: https://bbs.archlinux.org/ Free Pascal forums, using Simple Machines For
74.
by ptx 3mo ago
Alright, let's say the author is right and low-level radiation exposure is not harmful. Then... what? If a little radiation is not harmful, then we should be more relaxed about radiation, deregulate it and allow companies to contaminat
75.
by ptx 3mo ago
WebView2 installs its own copy of Edge, as far as I can tell. Multiple copies even.
76.
by ptx 3mo ago
Well, not just anyone can buy a license for it. You need some sort of enterprise volume license agreement, as far as I can tell.
77.
by ptx 4mo ago
Those are some pretty flimsy safeguards. I don't keep my secrets in system directories and using HTTPS doesn't mean the site isn't malicious.
78.
by ptx 4mo ago
So websites can now nag users to allow access to the root of their local disk and then read all their files and settings, all their SSH keys and other passwords? From what I gather from the docs [1], this API gives you a FileSystemDirector
79.
by ptx 4mo ago
What happens when the data contains the record or field separator characters? I suppose you could document that it's unsupported, and just drop or reject such values, but then the system couldn't be used to handle test data for su
80.
by ptx 4mo ago
So does Java provide an API for continuations or just the virtual threads hidden behind the threading API? You can't use threads to wait for something on the UI thread (which is why e.g. SwingWorker exists), but you can with await.
81.
by ptx 4mo ago
What's wrong with what .NET did with threads? Having async tasks sharing the GUI thread seems like a nice feature. Will we be able to use virtual threads and structured concurrency with Swing, e.g. to wait for a background task in an e
82.
by ptx 4mo ago
The problem the article is describing seems to have little to do with open source. There were GitHub repositories that had links added in their READMEs to a zip file containing compiled binaries. GitHub is not a curated software repository.
83.
by ptx 4mo ago
The vendors are never going to give you control over your computer no matter what vision they try to sell you on. The whole point, from their perspective, is to use their control of your computer to gain more control over you, which they ho
84.
by ptx 4mo ago
> Security: I run every Pi session in a Docker container and give it permissions only to bash so that it can’t run Python code or do web browsing How does that work? The script in the post references the file "docker-compose.sandb
85.
by ptx 4mo ago
> During voice agent startup, the slowest part are [...] in dlopen-ing large shared libraries (ONNX Runtime in particular) and in hundreds of small random reads off the SD card as Python walks the import graph. Could this maybe be fixe
86.
by ptx 4mo ago
Didn't they create Windows Installer (i.e. MSI) originally to meet the needs of Microsoft Office? And now they have MSIX to replace it, both of them built into Windows, but they still need a third installer system for Office, which i
87.
by ptx 4mo ago
> I like powershell and the dotnet platform and [...] Windows terminal [...] There's no Microsoft creep anywhere inside my daily flow [...] I just hope they don't notice me... Did you make sure to disable telemetry in .NET, a
88.
by ptx 4mo ago
The KDE start menu has always annoyed me (well, since whenever they switched from the Windows 95 inspired one to the XP or Vista inspired one) for this reason. When you switch views, the view switches immediately (which is good) but the ind
89.
by ptx 4mo ago
Is the use of the term "automatic programming" a deliberate parallel to the development of COBOL [1]? If so, if this is meant to imply that LLMs are just another step towards higher-level abstractions, the analogy doesn't qui
90.
by ptx 4mo ago
> For every single update, for all your AUR packages, all the time. Yes, that's what I used to do when I ran Arch. It's usually easy. The PKGBUILD is usually small to begin with and the difference for a new version should nor

More ›