rhencke

14 ms·

31.
by rhencke 6y ago
I have a book I'd like to recommend, that has helped me, in growing up around aggressive and manipulative people, learn to both identify these behaviors in others as well as learn tools for calmly and clearly enforcing personal boundar
32.
by rhencke 6y ago
XML has been a source of countless vulnerabilities, yet we continue to use it as a standard.
33.
by rhencke 6y ago
This was all achingly true well before Docker, though. (That's why Docker got popular, after all!) Docker isn't the disease, its use in such manner is just a symptom.
34.
by rhencke 6y ago
Alas, this is not true: https://nakedsecurity.sophos.com/2020/01/20/facebook-and-ins...
35.
by rhencke 6y ago
Learning to learn is a critical skill to hone in and of itself, regardless of if what you're learning is 'wasted'.
36.
by rhencke 6y ago
$ help set ... -e Exit immediately if a command exits with a non-zero status. -E If set, the ERR trap is inherited by shell functions. -u Treat unset variables as an error when substituting.
37.
by rhencke 6y ago
If you like that, you'll love working with PowerShell's exit codes. [1] [2] [3] [1] https://weblogs.asp.net/soever/returning-an-exit-code-from-a... [2] https://octopus.com/blog/powershell
38.
by rhencke 6y ago
Try replacing 'www' with 'old' in the URL.
39.
by rhencke 6y ago
Yes, since the cron script automatically runs as root on a repeating schedule. If you want to see what it does: mkdir junk cd junk wget https://dl.google.com/linux/direct/google-chrome-stable_current_a
40.
What Is Gemini?(gemini.circumlunar.space)
2 points by rhencke 6y ago|1 comments
41.
by rhencke 6y ago
You are thinking of Rosetta.
42.
by rhencke 6y ago
Yes... except the Chrome package adds updating itself to your cron scripts without telling you. :/
43.
by rhencke 6y ago
Your last sentence nails it: > What’s the smallest, hardest to notice malicious change I can make in the supply chain of software development to enact the most disruptive change?
44.
by rhencke 6y ago
I would like to see a measure of criticality that takes the following into account: * Critical projects may have very little activity/maintenance. For example, Bash 4.0 to Bash 5.0 was only 123 commits over 8 years. But, Bash is a ab
45.
by rhencke 6y ago
I strongly recommend you use the packages maintained in Linux distributions as a means for discovery. They're well-organized and maintained and easily accessible programmatically - you can even parse the package dependencies programma
46.
by rhencke 6y ago
Please consider allowing scanning tarball/zip distributions of source directly as well. It is a SCM-agnostic method that is also well-supported by GitHub, Gitiles, hgweb, and many old but still-in-use projects that pre-date Git.
47.
by rhencke 6y ago
I never that the tools I used for tracing (chrome://tracing) and now debugging C/C++ code would be my web browser itself.
48.
by rhencke 6y ago
Being incredibly boring and old ends up being a beautifully stable foundation to build on. The idea is to pay the debt as an organization on a fixed schedule that allows for years of stability in between. For larger organizations, this ca
49.
by rhencke 6y ago
Yes. CentOS 8 EOL is now the end of 2021: https://centos.org/distro-faq/#q2-what-about-the-other-relea...
50.
by rhencke 6y ago
What about users who own Chromebooks?
51.
by rhencke 6y ago
What about web apps like https://sr.ht which are fully loaded and usable from a cold visit in under half a second with only 2 network requests?
52.
by rhencke 6y ago
I agree with you. I don't think any Chromium distributions are at risk of their keys being revoked - I don't believe Google will take any action here. But, I also don't see anyone ever talk about this, and I think it's
53.
by rhencke 6y ago
Can you elaborate on what you mean by "doesn't count"?
54.
by rhencke 6y ago
Let's say this is true. If I fork one of the aforementioned Chromium packages, is my fork covered under that agreement? Is my right to build and produce my own binaries from the original unmodified source still intact?
55.
by rhencke 6y ago
To elaborate, the following distributions of Chromium are violating the Google API terms of service [1] [2] by publishing the API secret key publicly in the build source code responsible for building Chromium: * Alpine Linux (community port
56.
by rhencke 6y ago
Chromium, as built in many open-source distributions, uses a per-distribution Google API key for service access. [1] [2] [3] If built without API keys, Chromium warns 'Google API keys are missing. Some functionality of Google Chrome wi
57.
by rhencke 6y ago
Yes [1] and yes [2]. [1] https://flutter.dev/docs/resources/faq#what-technology-is-fl... [2] https://flutter.dev/docs/resources/architectural-overview#la...
58.
by rhencke 6y ago
The Flutter engine API has no platform specific dependencies, has a stable ABI and is available in its entirety in a single C header file [1]. It's ideal for embedding. [1] https://github.com/flutter/engine/b
59.
by rhencke 6y ago
Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith. Dichotomous was chosen because it was the correct word, not for any other reason.
60.
by rhencke 6y ago
What is Flutter missing, in your opinion, for it to be a viable competitor?

More ›