rkeene2

29 ms·

301.
by rkeene2 6y ago
This was a real thing before 2007 and is the reason the "seccomp" syscall came into being with CPUShare/CPU coins (2005). https://web.archive.org/web/20060118044349/http://www.cpusha...
302.
by rkeene2 6y ago
I've been passively writing this (to be clear, an x86 and DOS emulator, not this project) for a while so it's awesome to see someone already write it. My goal was to have a mechanism for bootstrapping a compiler, similar to the St
303.
by rkeene2 6y ago
Similarly, I wrote "hunter2" [0] to manage my passwords, for places where I'm still forced to use passwords. Although I didn't know of "pass" when I wrote it, it accomplishes the same goals. One difference is
304.
by rkeene2 6y ago
You are right, I wrote it backwards -- WireGuard supports only IP packets, not Ethernet frames while tinc supports both. The example that I gave why Ethernet frames is more useful is correct, just the factual part is reversed.
305.
by rkeene2 6y ago
How does this compare to TclQuadCode (a more well-known Tcl->Machine Code AOT compiler) ?
306.
by rkeene2 6y ago
It's possible that a future version of tinc could use WireGuard as the data plane, but comes with a few drawbacks. See comment on this very thing: [0] [0] https://news.ycombinator.com/item?id=19304624
307.
by rkeene2 6y ago
Tinc is even more awesome than that -- if you are using it on the same LAN as other nodes on the VPN it will try to make sure traffic between those nodes stays on the same LAN (it has a special broadcast beacon it sends out to find these).
308.
by rkeene2 6y ago
I wrote filed [0], another single file HTTP server. It's very fast ! I wrote it because I was hosting containers (using LXC) on a laptop which only had mass storage available via a USB 1.1 (12mbps) connected drive. I was serving vide
309.
by rkeene2 6y ago
I was on the local MBone segment at the NASA base (though a Navy installation) I worked at in the late 90s. It pretty much worked like you would expect, some interesting things that happened: - Multicast frames caused our FDDI switches to
310.
by rkeene2 6y ago
My 486DX2/50MHz came with 4MiB of RAM -- I used it all the way up until I gave it away in the early 2000s (though I did upgrade the RAM at some point, I couldn't run Netscape and compile my kernel with only 4MiB of RAM).
311.
by rkeene2 6y ago
At the time, it was pretty clear to me from the guidance given that: 1. The efficacy of masks for protecting against SARS-CoV-2 was unknown; 2. People in high risk professions will need to wear them as a precaution even if they might not be
312.
by rkeene2 6y ago
Yes, threads from the Thread extension are real OS threads, which have a Tcl interp in them. Since they are separate interpreters then there's no impact from any kind of "per-interpreter lock". Passing messages between Threa
313.
by rkeene2 6y ago
This is basically how the Threads extension [0] works for Tcl. Tcl has long supported creating many interpreters per thread. The Thread extension exposes some threading commands to the interpreter, which lets you create a new thread+interp
314.
by rkeene2 6y ago
Example of this at [0]. [0] https://rkeene.org/viewer/tmp/ssh-ip-tunnel.txt.htm
315.
by rkeene2 6y ago
To be clear, eBPF programs can have loops -- they're just jumps that have negative offsets (which are signed 16-bit numbers), but for security reasons many verifiers do not allow them so they can ensure that the program halts.
316.
by rkeene2 6y ago
I added some ways to donate to my profile on here
317.
by rkeene2 6y ago
Fossil preserves the journal of activities forever, and across clones.
318.
by rkeene2 6y ago
I started Fossil CI [0] for this, but I have not finished it up. [0] https://chiselapp.com/user/rkeene/repository/fossil-ci/index
319.
by rkeene2 6y ago
I run it because I use Fossil a lot and want a low-friction way to create new repos. It doesn't cost me anything to run since I already had extra CPU, RAM, and Disk capacity on my personal server.
320.
by rkeene2 6y ago
I think this is great. I will upgrade ChiselApp.com to use Fossil 2.15 as soon as it's released. A bit off-topic, but the thing I miss most when I use Fossil (versus GitHub.com) is the ability to do code reviews and leave in-line comm
321.
by rkeene2 6y ago
There has pretty much always been a way to amend commits -- the difference is in Fossil this amendment is done by writing a new journal entry (artifact) noting which commit is being amended and how, rather than modifying the commit directly
322.
by rkeene2 6y ago
I use Fossil and run a Fossil hosting service called ChiselApp [0]. I've used Fossil for all kinds of projects big (commercial Linux distributions, with installer ISO as the result of the CI/CD pipeline stored as Fossil Unversione
323.
by rkeene2 6y ago
There are Forums within Fossil for this kind of thing, though.
324.
by rkeene2 6y ago
If my project, AppFS [0], more widely adopted then packaging would be trivial for all distributions. And updates would be automatic or not depending on user preference. [0] https://appfs.rkeene.org/
325.
by rkeene2 6y ago
If you like that concept, then AppFS [0] is even more interesting since it removes the "install" step. CernVMFS [1] is very similar to AppFS, though AppFS has more features. [0] https://appfs.rkeene.org/ [1] htt
326.
by rkeene2 6y ago
To be fair, SAML itself isn't that difficult -- Shibboleth is just not very good. I implemented a SAML IdP [0] in MUCH less time than it took to configure Shibboleth. The specification for SAML is pretty easy to comprehend. The implem
327.
by rkeene2 6y ago
This uses NFQUEUE to get real-time userspace access to the ability to decide which connections to allow. NFQUEUE users must return a verdict on the packet (skb? I don't recall) before the packet continues to flow through the system.
328.
by rkeene2 6y ago
You can also do this without Docker. I do this as part of my build system (which is just a bash script) for a Linux distribution. Each package has a download phase, which permits network access. After that phase completes, network access
329.
by rkeene2 6y ago
It doesn't account for networks which simply lack DNS (not every network peers with the public Internet).
330.
by rkeene2 6y ago
If Tcl can be compiled (to a large degree, and without type annotations) to machine code (AOT) using TclQuadCode there's every hope for Python !

More ›