ratorx

16 ms·

181.
by ratorx 3y ago
Arguably, pointing to t/2 (in the second case) is the correct behaviour, because (if concepts are being used), then it is the function (double_it) that is mis-specifying it’s requirements. Even better would be to point at the function
182.
by ratorx 4y ago
Building the app is not the problem, Nix adds minimal overhead for that. Deploying the app is annoying because changing a systemd service requires a nixos-rebuild, which is pretty slow on a Raspberry Pi. There’s no good way to have an auto-
183.
by ratorx 4y ago
> In normal development That’s the problem. This is an unexpected situation and the JS philosophy is to silently do something that tries to make the best of it, rather than e.g. throw an error or warning. I think it’s perfectly reasonabl
184.
by ratorx 4y ago
I used NixOS for a while, but switched back to Debian. My pain point was that unless you also use Docker etc, deploying applications and deploying the system is inseparable. I don’t want to rebuild my system to update an app. This is especi
185.
by ratorx 4y ago
People are already a blackbox algorithm (to some degree). I think if there was personal accountability and an appeals process (which there needs to be to deal with human shittiness anyway), then it makes no difference right? The key thing i
186.
by ratorx 4y ago
> It might not be for sale at any price Sure, the domain could be unavailable because someone else wanted it. However with front running, the registrar does not want the domain in isolation. They want to domain purely because you are lik
187.
by ratorx 4y ago
This is definitely unscrupulous. It would be illegal if domains were a regulated market. This seems basically like the definition of frontrunning: > purchasing a security based on advance non-public information regarding an expected larg
188.
by ratorx 4y ago
This should be handled in the URI scheme. Files have file:// and web has http:// or https:// There’s also a UI difference. I don’t use Slack, but files tend to be shared using a file picker/ drag &
189.
by ratorx 4y ago
It depends (and not any more than applications that need sneaky config). Simple systems can have quite simple options. At the very least you can take a working copy and figure out exactly which configuration is necessary. Hard to do that wi
190.
by ratorx 4y ago
This is one of the things NixOS is good for. There can be a special version of Linux that is only updated once some regression test on ZFS passes: `config.boot.zfs.package.latestCompatibleLinuxPackages` That way the main maintainer can stil
191.
by ratorx 4y ago
Zig has tagged unions. Functions can return things other than integers. I don’t see what’s so hidden about allowing unions to be returned as errors. It is all in the functions return type. An error is an abstraction Zig has chosen to provid
192.
by ratorx 4y ago
There’s no real good mechanism for what fzf is trying to do. profile.d might work, but I think that is more intended for environment variables, rather than interactive shell changing scripts. There’s no standardised way to extend interactiv
193.
by ratorx 4y ago
These are valid differences, but none of them seem particularly challenging to an AI, assuming some equivalence between image and text recognition. To a human, sure because it is more difficult to formally specify. Arguably an AI could bene
194.
by ratorx 4y ago
If you are able, could you explain this in more detail? I find the description unparseable. Reading the words I do understand, the raw socket aspect seems to be irrelevant right? The vulnerable code would be the the parser that incorrectly
195.
by ratorx 4y ago
Yes just rsync should work if you are stopping everything on the first system. The second system should be completely switched off. If you can just mount the drive, that’s the way to go.
196.
by ratorx 4y ago
rsnapshot is not what I meant by snapshots. I meant filesystem level snapshots that are atomic. It is an alternative to rsync/Borg, but it does not handle consistency properly (similar to rsync/Borg). It does not solve the snapsho
197.
by ratorx 4y ago
I’d strongly recommend taking frequent (automated) full backups if not using config management. With config management, you can maybe get away with only backing up application data. The best way to do it is to use something like rsync/
198.
by ratorx 4y ago
I don’t think Ansible is a good solution. It’s kinda a meh middle ground between reproducible system (which is hard to actually do well with Ansible) and simply using backups/snapshots. Ansible introduces a lot of overhead, but does no
199.
by ratorx 4y ago
I’m not sure, but I’d be surprised if the secret key leaves the SK. If you remove it, SSH doesn’t work. `-K` configures a pointer so SSH knows where to look to find the private key (on the SK). It is the same as non-resident keys, but store
200.
by ratorx 4y ago
IMO, GPG has a pretty terrible CLI. GPG agent config is complicated and is more of a pain to get working with forwarding etc. I don’t like the fact that GPG requires config at all. I also have no use for it, that I can’t solve with somethin
201.
by ratorx 4y ago
You don’t need a file on the client for resident keys. You have to run a command to load them into the SSH agent, but you don’t need any information for that. https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.ht
202.
by ratorx 4y ago
GPG keys are one option, but only recommended if you need compatibility. Having to deal with GPG + GPG agent is enough to make them a pain to use. The modern way is SSH resident keys. However, this requires a “modern” SSH version (8.2), but
203.
by ratorx 4y ago
Haven’t read all the code, but If it’s defense in depth, then it seems fine. If it’s the sole protection towards SQL injections, then it seems quite sketchy.
204.
by ratorx 4y ago
Do you have any links to Python Atomic RC? I don’t know much about it, but I’d heard that it was the global interpreter lock that prevented multi-threading. I’d be surprised if the overhead of Atomic RC was that much, since it is a common p
205.
by ratorx 4y ago
It seems like the kind of defaults that should depend on the visibility of the meeting. Public -> No webcams and muted by default, normal -> webcams and mics.
206.
by ratorx 4y ago
Really? I see a lot of competition in the space. I think they’d have to become significantly more successful than their competitors (some of which are massive AI powerhouses themselves) to achieve the market dominance necessary.
207.
by ratorx 4y ago
For me, it’s because I liked systems stuff at university. Scaling to and beyond the level of FAANG is pretty interesting and I’m not sure where else I would have been able to work at that level. It’s also quite nice to be able to really div
208.
by ratorx 4y ago
It doesn’t seem equivalent. It’s hard to figure out that this app is doing anything fishy without a thorough code review/sniffing external communication. In the extension example, all the permissions are laid out.
209.
by ratorx 4y ago
That seems short-sighted. Just because a customer hasn’t complained about it doesn’t mean it isn’t a bug. I’m not disagreeing that customer complaints are important for prioritisation, but the problem isn’t quite as first-order as that. In
210.
by ratorx 4y ago
I use a YubiKey as well as iOS everywhere I use WebAuthn (currently only for 2FA). The only sites I don’t are the ones which don’t support more than 1 key. I haven’t come across any websites that restrict it to just iOS. I’m not even sure i

More ›