raggi

34 ms·

481.
by raggi 4y ago
We do look at them to check on how we're doing, and I want to dig into this area more over time. In particular we don't do classful prioritization right now, which if you look at the typical tests for this they're often focus
482.
by raggi 4y ago
magicsock definitely does a bunch more work, and we do look at both profiles. The magicsock profile is harder to read as a consequence of being a more complex path, adding packet filters, the indirection for DERP and other NAT busting detai
483.
by raggi 4y ago
You need both at depth. strace and dtruss translate binary information to a textual representation but they’re only as good as their coverage. When you get closer to the edges of common use they fall down. On macOS / iOS using dtruss f
484.
by raggi 4y ago
disclaimer: I threw the name suggestion out in the slack thread, though I'm sure I wasn't the only one to think of it. The problem is when you have a thing that's overlapping the sets ( click-bait ( title ) fun ), what do you
485.
by raggi 4y ago
I know, it’s amazing how Debian still uses isc dhcpc, what a massive blunder of open source software. A little tongue in cheek, and I know off mainline maintenance exists, but it’s still the same ordeal - oft presented with a different tone
486.
by raggi 4y ago
Stopping at the block later sadly doesn’t answer much these days. Is it hitting a software ftl? Firmware? Is there caching? Is the ftl journaled/logged/whatever? Ideally we need a barrier command that goes all the way down. What I
487.
The Murder of Sonic the Hedgehog(store.steampowered.com)
2 points by raggi 4y ago|0 comments
488.
by raggi 4y ago
class project, 200 students, 1500 LoC each. Time for grading. there are contexts in which this may be well practiced.
489.
by raggi 4y ago
Hi! Tailscaler here, one of the folks who worked on the recent throughput improvements. One of the machines I was testing with during our work on segment offloading was a Haswell. I absolutely understand your concern if we're using 40%
490.
by raggi 4y ago
> If you ever push anything to a public Github repository it is immediately mirrored by a host of bots. I'd love to get a copy of the key, so I can setup a demo to encourage education. > That said, if I'm honest I think almo
491.
by raggi 4y ago
Still using gitosis, and still happy with it.
492.
by raggi 4y ago
It could be worse, the user has the old rsa host key present alongside newer ed / ecdsa keys, they may never rotate out the rsa one. A future mitm simply only advertises the rsa key, and mitm passes. Users will need to actively remove
493.
by raggi 4y ago
Are they confident that the private key was not seen by anyone, or did it actually leak? If it leaked, this may be more of an issue than how it appears to be presented.
494.
by raggi 4y ago
All of your links breaking is the good case. Parse all the URIs out of your log, capture static copies, and then serve them alongside the new implementation before dropping to 404.
495.
by raggi 4y ago
Thank you!
496.
by raggi 4y ago
What was the motivation for introducing C2SP and CCTV as concepts? Are there immediate plans to introduce more than Age?
497.
by raggi 4y ago
No collaboration process will remove people from the system. You should never expect it to, if you have problems with social power, that's a culture issue which isn't something you can control directly. You can discuss culture iss
498.
by raggi 4y ago
Now consider the "Tivo" target, which is that the scripts and tools required to deploy the code are things they absolutely want to cover. You didn't answer my question directly though (and nor does the linked article), what i
499.
by raggi 4y ago
The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control thos
500.
by raggi 4y ago
If we're close to splitting hairs though, users includes everyone who ever hits any of its endpoints. It doesn't matter who has credentials - the license does not discuss "customers" and "non-customers". It say
501.
by raggi 4y ago
They use tons and tons of third party trackers and advertising brokers for populating parts of the page. They have broken sha512 subresource integrity links on the page. The site produces no less than 11 samesite cookie misuse warnings. 5.7
502.
by raggi 4y ago
This is a border router, not a wireless router, but this was my build https://res.rag.pub/2020-11-1-an-home-router.html I've been running this configuration for 3 years. There's no fancy UI, but there's also
503.
by raggi 4y ago
In the UK that has had a functional transaction system for half a century, not that much. In the US it would be revolutionary to stop mailing checks between banks.
504.
by raggi 4y ago
Most of the software that is in the Debian release from this December was released in 2020. Examples include: go 1.15, gcc 10.2, postgresql 13, systemd 247. Ubuntu 20.04.1 has go 1.18.1 and gcc 9.4. It's all a mixed bag and somewhat di
505.
by raggi 4y ago
Drivers vary. The intel driver that Fuchsia has was written early on entirely by the team. (This was when I left the only OSS Vulkan driver in the system)
506.
by raggi 4y ago
Fuchsia was (when I left) strictly Vulkan in the core OS interfaces for the rendering stack. Picking one technology rather than pulling over several reduces the overall cost of solving for sandboxing that technology. There is still plenty t
507.
by raggi 4y ago
Where did this 16% number come from?
508.
by raggi 4y ago
The Nest team definitely won't agree with your value judgement of these devices, nor do many of the users who paid for them. To this end, even if there are different motivations for different teams and other tactical considerations, it
509.
by raggi 4y ago
Fuchsia has a significantly better security stance, in both implementation and in architecture.
510.
by raggi 4y ago
Fuchsia shipped on Google Home Hubs, upgrading them in the field (replacing everything from firmware up). We did so without breaking them all.

More ›