reginaldo

10 ms·

31.
by reginaldo 5y ago
For cattle, yes, but how far do you go? Imagine trying to tag Milton Friedman's pencil: https://www.youtube.com/watch?v=67tHtpac5ws
32.
by reginaldo 5y ago
"What I cannot create, I do not understand", as Feynman said. I for one defend people's right to do unusual things. You do not need to write your programming language, but when you do that, you end up with something that chan
33.
by reginaldo 5y ago
I reported the "loadstring accepts arbitrary bytecode" issue back to Debian and Ubuntu. But, just to clarify, mikemike's advice is that everyone (i.e. including people running upstream redis) should disable scripting.
34.
by reginaldo 5y ago
I didn't go there at any point while writing the article, because, for a Linux distro (i.e. something that tries to be all things to all people), I think Debian does a great job, and the packaging policy is a net positive, by a wide ma
35.
by reginaldo 5y ago
Upstream Redis doesn't. At least in my builds from upstream, luaopen_package and luaopen_os aren't even available on the binary. Debian does things differently, though. They need package in order to require the "json" a
36.
by reginaldo 5y ago
Author here, so feel free to ask me anything. I had to shrink the title in order for it to fit, but, as the first paragraph says, this affects only Debian and Debian-based distros, so it's a Debian bug, not a Redis bug.
37.
An unexpected Redis sandbox escape affecting Debian-based distros(ubercomp.com)
154 points by reginaldo 5y ago|59 comments
38.
by reginaldo 5y ago
It depends on the level of attestation required. A simple client certificate should suffice for the majority of the non-DoD applications.
39.
by reginaldo 5y ago
Do you say that from experience? I have both a Dasung Paperwhite monitor and a fairly hacked reMarkable 1 that I use for that purpose. Both work well for typing, as long as you type in a way that full refreshes are the exception, not the no
40.
by reginaldo 5y ago
Actually, the surface of attack is larger. It is: the machine receives strings from a service that's been connected to the internet somehow and the machine itself server can connect to the internet. A non-obvious example would be logs&
41.
by reginaldo 5y ago
Yes. cog --help-all will be pretty self-explanatory :)
42.
by reginaldo 5y ago
Take a look at WPE Webkit ( https://webkit.org/wpe/ ).
43.
by reginaldo 5y ago
Depends on the type of large data, but since 2011 there's "Transferable" [1], where objects like ArrayBuffer, MessagePort, and ImageBitmap can be transferred with a low overhead [2]. Now, if you're passing large arbitrar
44.
by reginaldo 5y ago
Back in the days of FAT partitions, and when partitioning disks with data was somewhat risky, the first distribution I used was Phat Linux [1], which was installed in the same partition as Windows as well. The main side effect I remember wa
45.
by reginaldo 6y ago
The interesting thing about Linux is that, since it has focused so much on backwards compatibility, it's a great target for emulation. A few years ago there was a great paper and presentation[1] by Jon Howell et al from Microsoft resea
46.
by reginaldo 6y ago
The interesting thing about Linux is that, since it has focused so much on backwards compatibility, it's a great target for emulation. A few years ago there was a great paper and presentation by Jon Howell et al from Microsoft research
47.
by reginaldo 6y ago
How late? Late 20s? 30s, 40s, or 50s? I think that, having come to the realization, you're already probably far ahead of the curve. I've been very inspired by Mandelbrot's life, lately. Reading "The fractalist", his
48.
by reginaldo 6y ago
It did, and I'd been meaning to show my appreciation. I just bought it (finally).
49.
by reginaldo 6y ago
I bought a reMarkable 1 a few weeks ago, with plans to give it to a family member and buy the reMarkable 2 once it's generally available. The set with the marker and the polymer folio was USD 299. For the sake of comparison, just the 1
50.
by reginaldo 6y ago
Thanks for the software and documentation you've written for the reMarkable. I've taken a different approach for running Debian buster , but your guide [1] saved me a lot of time nonetheless. [1] http://www.davisr.me&#x
51.
by reginaldo 6y ago
I've gotten lots of insight from the other commenters. One of the few lightning moments in my life in terms of awareness came from watching an interview with the poet Ferreira Gullar. He said "the important thing is not to be righ
52.
by reginaldo 6y ago
I also stopped on the assertion about the successful scientist, but instead of outright disagreeing, I took it to mean that the definition of successful scientists for pg includes mostly the starters of new paradigms, regardless of the idea
53.
by reginaldo 6y ago
That, and the fact that we don't really revisit the modeling approaches when the constraints that led to them no longer apply. For instance, incremental evolution based on a branch where work was done "by hand" into animals,
54.
by reginaldo 6y ago
The three-field system has the problem of leaving the soil uncovered which leads to erosion, which aggravates the nutrient depletion problem.
55.
by reginaldo 6y ago
Ever since watching the video on syntropic agriculture which I bumped into by reading a comment here in HN [1], I've been doing some research on the matter. The practice seems promising. It seems to work at both small and large scales,
56.
by reginaldo 7y ago
Interesting premise, but be careful with the linear thinking here. As a counter example, Icelandic didn't change as much as English in the past 200 years. For English, one would probably need to look even further back in time than 200
57.
by reginaldo 7y ago
Here's how I finally memorized it: ln has a 1-file-argument invocation, so ln -s ../../a_fine_file will create a symbolic link to that file under the current directory and under the "a_fine_file" file name. The sing
58.
by reginaldo 7y ago
Back in the day, Google itself used spreadsheets as the backend of small pages (e.g. customer success stories). The reason I know that is because I found a few spreadsheets that were writable by anyone, and ultimately led to cross-site-scri
59.
by reginaldo 7y ago
Joe Armstrong said the following when he was interviewed by Simon Peyton Jones [1]: > JA: In the first incarnation of Erlang, it was just... little black boxes were communicating, copying their messages - it's a mailbox model, copyi
60.
by reginaldo 10y ago
This is Reginaldo from the Facebook Security team. We're really glad Orange reported this to us. On this case, the software we were using is third party. As we don't have full control of it, we ran it isolated from the systems tha

More ›