ryao

45 ms·

691.
by ryao 2y ago
I meant it is difficult relative to fingerprinting TLS and HTTP. The information is not exported by the berkeley socket API unless you use raw sockets and implement your own userland TCP stack.
692.
by ryao 2y ago
Then random internet routers could break internet traffic by setting it really low and the user could not do a thing about it. They technically still can by discarding all traffic whose value is less than some value, but they don’t. The ide
693.
by ryao 2y ago
If your doctor says you have only 128 days to live, you count down, not up. TTL is time to live, which is the same thing.
694.
by ryao 2y ago
Windows 9x used a TTL of 32. I vaguely recall hearing that it caused problems in extremely exotic cases, but that could have been misinformation. I imagine that >99.999% of the time, 32 is enough. This makes fingerprinting via TTL to dis
695.
by ryao 2y ago
The guy started saying it in the 80s or 90s when that issue had been fixed. Ge is the Minix guy if I recall correctly.
696.
by ryao 2y ago
This reminds me of the guy who said he wanted computers to be as reliable as TVs. Then smart TVs were made and TV quality dropped to satisfy his goal.
697.
by ryao 2y ago
Did they also set IP_TTL to set the TTL value to match the platform being impersonated? If not, then fingerprinting could still be done to some extent at the IP layer. If the TTL value in the IP layer is below 64, it is obvious this is eith
698.
by ryao 2y ago
> Baroque art stands in direct defiance of the chromophobic worldview. It doesn’t strip down experience in the name of order, but rather builds it up — embracing sensation and structure together. All I can say is that if it is not baroqu
699.
by ryao 2y ago
I am not sure how you avoided collisions (network namespaces?) on the localhost port space, but for things like this, you would be better off forwarding to/from UNIX domain sockets. It is more efficient as local tcp sockets have severa
700.
by ryao 2y ago
Cloudflare makes that free through their zero trust stuff and cloudflared daemon.
701.
by ryao 2y ago
You could use GitHub pages + cloudflare for free hosting. My neighbor uses that.
702.
by ryao 2y ago
> GLIBC is an example of a "system library" that cannot be bundled with your application because it includes the dynamic linker itself. This linker is responsible for loading other libraries, some of which may also depend on GL
703.
by ryao 2y ago
Thanks for the response. I had misread the article’s description of gVisor and mistook it as something meant to protect the rest of the system rather than something that handled the filesystem part of the sandbox. It is an interesting tool.
704.
by ryao 2y ago
What about DVD-Rs and DVD+Rs?
705.
by ryao 2y ago
stunnel is not a library and linking to C libraries is easy.
706.
by ryao 2y ago
It is possible to write portable make files that work with both.
707.
by ryao 2y ago
There are static site generators. There are even plugins that turn Wordpress and Drupal into static site generators, such that you do not need to edit the files one at a time to make changes.
708.
by ryao 2y ago
Use stunnel for TLS. A benefit is that if you properly sandbox the daemon behind it, a compromise in the daemon behind TLS does not result in the server key being compromised. A GUI could be done in SDL+Nuklear, GTK+ or others. Database acc
709.
by ryao 2y ago
I put CodeQL in use in OpenZFS PRs. This is not an issue for OpenZFS. None of our code is secret. :)
710.
by ryao 2y ago
Too much calcium is a bad thing. I had enormous amounts of milk as a child, a multivitamin containing calcium and a calcium supplement. I probably had 2 to 3 people’s recommended daily amount of calcium per day. Now as an adult, the calcium
711.
by ryao 2y ago
This is not a one a day pill then. If ingesting it is regulated, that would be consistent with it not being something regular people should ingest regularly.
712.
by ryao 2y ago
My initial searches suggest that these are by prescription only. Do you have any information to the contrary? I did find toothpaste tablets, but those are meant to be used as toothpaste from what I can tell.
713.
by ryao 2y ago
There is a such thing as baby teeth. Presumably most children learn to brush properly while they still have them. If they do something wrong, they get a second chance when their adult teeth replace them. Why does this even need to be explai
714.
by ryao 2y ago
Very low concentrations of medicine are usually ineffective at its stated purpose outside of pseudo scientific theories, so even if it is safe to ingest, it is not clear it is able to do anything for people’s teeth. That is why I do not und
715.
by ryao 2y ago
Fluoride in Toothpaste: Do not ingest. Flouride in Water: Ingest away. I do not understand how these two can co-exist.
716.
by ryao 2y ago
You need to preallocate space on LVM2 for storing changes and if it fills, bad things happen. You have write amplification of 4MB per write by default on LVM2, while ZFS just writes what is needed, since LVM2 isn't aware of the filesys
717.
by ryao 2y ago
If you are making sandboxes, you need to put the files in place each time. With ZFS clones, you can keep referencing the same files repeatedly, so the amount of changes to memory needed to create an environment are minimized. Let’s say the
718.
by ryao 2y ago
I imagine you need to make and destroy sandboxed environments quite often. How fast does your code create a sandboxed environment? Do you make the environments on demand or do you make them preemptively so that one is ready to go the moment
719.
by ryao 2y ago
Not quite. Apple could have removed the port entirely as a form of malicious compliance. They would have been in compliance with EU regulations without putting USB-C on their phones. A second option would have been to make lightning a data
720.
by ryao 2y ago
They had usb 3.0 speeds over lightning on some models (e.g. the iPad Pro), but they kept introducing models that were usb 2.0 speed only for no apparent reason other than cost savings on the rest.

More ›