qhwudbebd

7 ms·

61.
by qhwudbebd 2y ago
Confirmation from Rich: https://fosstodon.org/@musl/112711796005712271
62.
by qhwudbebd 2y ago
Yes, true: if the alarm signal arrives right in the middle of another syslog() call, this should deadlock. (Safer that it not deadlocking and accessing the static state in the signal handler of course!)
63.
by qhwudbebd 2y ago
In practice when I tried it, I wasn't sold on signalfd's benefits over the 90s style self-pipe, which is reliably portable too. Either way, being able to handle signals in a poll loop is much nicer than trying to do any real work
64.
by qhwudbebd 2y ago
Once I'd finished upgrading my openssh instances (which are linked against musl not glibc) I thought it'd be interesting to have a poke at musl's syslog(3) and see if it allocates too and so is easily exploitable in the same
65.
by qhwudbebd 2y ago
I guess there are two problems it causes that you might want to solve: the annoyance of the extra ceremony and the risk of losing access because you lose the key. If you don't need more security on top of your existing (presumably high
66.
by qhwudbebd 3y ago
The page itself is typeset in the font: a nice way to see it in action. The only really jarring idiosyncrasy for me is the backwards slash on the zero, instead of a forward slash. I wonder if there's a specific legibility argument for
67.
by qhwudbebd 3y ago
Looks like it's cloud-scam only, rather than a product one can actually buy and own?
68.
by qhwudbebd 3y ago
Using said ssh key as one of the 2fa choices for standard login would be quite a nice feature too...
69.
by qhwudbebd 3y ago
I spent a little time trying to decide whether GitHub's 2fa was genuinely an extra factor whose compromise (with an uncompromised password) wouldn't weaken security vs a situation where it hadn't been set up at all. In that c
70.
by qhwudbebd 3y ago
I assumed they were intentional for editorial effect: deliberately designed to disrupt the flow of a reader attempting to follow the text, in the same way that he claims the compression artefacts disrupt the perception of a skilled photogra
71.
by qhwudbebd 3y ago
"BIND (aka named, the occasional remote sudo implementation)" made me chuckle! I wonder if Paul Vixie still holds the record for the largest number of CERT advisories due to a single author?
72.
by qhwudbebd 3y ago
I'm a user of neither neovim not vscode so wouldn't presume to advise; I'd just like to make an observation on "sometimes I watch long-term vim users writing code and I'm amazed at their efficiency". Nowadays I
73.
by qhwudbebd 3y ago
Unfortunately that's bash-specific I think: the POSIX shell spec still hasn't picked it up. (Though strictly speaking, my 'local' is out of spec too.)
74.
by qhwudbebd 3y ago
Random thought: given you already have the gcaa alias, perhaps you could include a check that .git/REBASE_HEAD doesn't exist in that? Probably easiest as a little shell function like gcca() { local GIT_DIR if ! G
75.
by qhwudbebd 3y ago
I was going to post to ask how it was likely to compare with the current crop of RK3588 boards that are marching towards decent mainline support, but this link already answers this to some extent. It looks like it's faster on some benc
76.
by qhwudbebd 3y ago
If you're importing the key into FreeOTP, you could just take a second copy of the key to store elsewhere too? TOTP keys are just short base32-encoded bitstrings.
77.
by qhwudbebd 3y ago
I read your requirements and threat model further down the thread, which is really helpful when thinking about possible solutions. Before being comfortable recommending anything, I have question about GitHub's 2fa implementation here,
78.
by qhwudbebd 3y ago
It does yes. I should have written 'no Linux kernel support' rather than 'no kernel support', sorry. The BSDs are better off than Linux here.
79.
by qhwudbebd 3y ago
> In the future you can probably go "IPv6-mostly" with a CLAT engine ...although there still isn't any kernel support for the necessary SIIT v4<->v6 translation, so to implement CLAT you end up using unmaintained (an
80.
by qhwudbebd 3y ago
...with the ironic consequence that linux amd64 w/ glibc is the only platform triple that's broken rather than - as so often - the other way around!
81.
by qhwudbebd 3y ago
Presumably classified as severity 'medium' in an attempt to look marginally less negligent when announcing that they can't be bothered to issue microcode updates for most CPU models until Nov or Dec.
82.
by qhwudbebd 3y ago
vendor/regex-syntax, vendor/regex-syntax-0.6.26, vendor/regex-syntax-0.6.28, vendor/regex-syntax-0.6.29 vendor/cargo_metadata, vendor/cargo_metadata-0.14.0, vendor/cargo_metadata-0.14.2, vendor/cargo_
83.
by qhwudbebd 3y ago
I think mainline kernel support for the RK3588 boards has been merged, although it's true there are a lot of other SoCs out there where up-to-date kernels are a pipe dream.
84.
by qhwudbebd 3y ago
Are there any gron-like tools for xml? I'm aware it's a harder problem (and an increasingly rare problem) but perhaps someone has tackled it nonetheless?
85.
by qhwudbebd 3y ago
Interesting! I tend to use gron to bring JSON into (and out of) the line-based bailiwick of sed and awk where I'm most comfortable, rather than a custom query language like jq that I'd use much more rarely. But I guess that's
86.
by qhwudbebd 3y ago
I'm probably describing what I want incorrectly with 'memory mapped IO'. All I'm after is GPIO, SPI and I2C directly attached to the real processor, as you get with a completely standard Raspberry Pi or Rockchip board, b
87.
by qhwudbebd 3y ago
I'd love a NUC-performance single board computer with proper GPIO+SPI+I2C to use for prototyping projects in place of slower ARM64 SBCs, and at first glance, this looks like that. But reading the description, the GPIO isn't memory
88.
by qhwudbebd 4y ago
Sometimes xargs -P is useful too, but it's much more limited than GNU parallel.
89.
by qhwudbebd 4y ago
6.2 kernels work fine with Firecracker, and you can compile out a lot compared to a normal x86-64 defconfig: PCI, USB, SCSI, ATA, md, non-virtio ethernet, etc. You probably still want CONFIG_SERIAL_8250 and CONFIG_SERIAL_8250_CONSOLE but ev
90.
by qhwudbebd 4y ago
Great write-up! One extra detail that might be worth including in the block device/storage section is that Firecracker doesn't yet pass through discard (trim) from guest to host (as fallocate(FALLOC_FL_PUNCH_HOLE) if file-backed)

More ›