skydhash

23 ms·

721.
by skydhash 5mo ago
Why does it needs to be shared? You either have a local copy of the infrastructure and set your own values. Or parts of the infrastructure is shared by the team so anyone can just get their own values. If it's something that's cri
722.
by skydhash 5mo ago
When laws and contract don’t work well, it’s all about reputation. After a while, everything becomes a network of friends and businesses with reputation to lose.
723.
by skydhash 5mo ago
People that like AI are always happy to point out that their code was written fast and passes tests. For me thats just the bare requirement to have more than a “wip” commit on my local codebase. To create a PR, I need to test it manually. B
724.
by skydhash 5mo ago
My belief is that anything that requires more than that are hiding the fact that what they truly need is a DSL. Instead they force you to write AST (ansible, github actions, docker compose,…)
725.
by skydhash 5mo ago
I still prefer ini files for configuration. Easier to grep and sed.
726.
by skydhash 5mo ago
Unix has a dedicated console concept which is the system output. This is more likely to be the hardware console (and maybe synonyms). I think there’s a lot of steps to get to a log viewer named console, though.
727.
by skydhash 5mo ago
Don’t forget that Linux is Unix inspired. And unix were meant to be used on servers and mainframe where root were used by a trained sysadmin. Users were not meant to install applications, and their actions has little impact on the system in
728.
by skydhash 5mo ago
> - PM2 was buggy on FreeBSD, which I used to manage my processes For supervision? > - An alternative, using `rc.d` to run daemons was just so hard to get logs working. The unix way is to use logger(1) If you only want some simple mes
729.
by skydhash 5mo ago
I have a collection of flacs which contains the albums that matters deeply to me. I don’t mind not having access to unlimited music (I do have a spotify account but I rarely use it). I much prefer to do mindful listening, spending an hour o
730.
by skydhash 5mo ago
I won’t disagree with that, but my daily driver is OpenBSD. Emacs is what I got ;)
731.
by skydhash 5mo ago
That’s the power of vim, emacs, nano, and I think Kate too. Piping the current text and/or collecting the output of a given comment. Another nice thing is the ability to collect paths, line and column numbers from the output for naviga
732.
by skydhash 5mo ago
> Ah, so you agree NFS is not fit for purpose (network file sharing), and I should use something else to share files over the network NFS stands for Network File System, not Network File Sharing. If you gave a disk to someone, the permis
733.
by skydhash 5mo ago
> Now, how about this common scenario: I want to run a file-sharing server on my network. I want a random "friend" to come over and grab a copy of a file, but I don't want them to see any other files on the NFS server. How
734.
by skydhash 5mo ago
> The fact that NFSv4 has no concept of true "Authentication" and just blindly accepts whatever the client sends is the craziest network application design ever Doesn’t the secure option require ports only a root user can bind
735.
by skydhash 5mo ago
> I can assure you that numerous new users would simply look through MELPA and pick up packages that sound useful, and quickly end up picking up malware But the issue is not new users picking up unconfirmed packages. It’s about active em
736.
by skydhash 5mo ago
> 2. Wait for people to pick up this new extension, while it's still benign Good luck on that. Check the most popular packages and they all belong to fairly well known people in the community. If it’s something small, people usually
737.
by skydhash 5mo ago
> Even veteran developers are angry that the talents they’ve been building for years have become a little less unique almost overnight. I believe there is still a lot of value to experienced human developers, but there’s no denying that
738.
by skydhash 5mo ago
It’s not. The developer never build a package and then upload on melpa. Melpa will fetch the needed files and build the package. It’s not truly secure, but an attacker would need to publish a new commit and wait for quite some time for peop
739.
by skydhash 5mo ago
A viable strategy is something like qubeos for isolating activities from each other. You can have a media vm, a dev vm, a bank vm, and a password/manager vm. Or you use different computers. I think one issues has been having code hosti
740.
by skydhash 5mo ago
You can’t attack them that easily because of the different publication method. Emacs, Vim, and Sublime have a pull model (like linux distros), not a push model. Meaning you add your repos to the package hub, you do not upload an archive to
741.
by skydhash 5mo ago
To hijack a vim plugin/emacs package, you would have to take over the repo. Or take over elpa/melpa (for emacs) or vim awesome (to redirect users to your malicious repo). Both are way tricker than the exploitation tactics used on
742.
by skydhash 5mo ago
No one using vim will install the kind of extensions I found on the usual VS Code setup. And most don't even autoupdates.
743.
by skydhash 5mo ago
> Any extensible, customizable display editor can be coerced into behaving badly by installing external code. But I think only VS Code (And Jetbrain's ones) is so pushy about installing extensions. With Emacs, you actually have to
744.
by skydhash 5mo ago
I really like openbsd's pledge. It's nice when you look at the code and see the program restrict itself to a smaller set of operations. Not everything in ports has adopted it, and the point is moot for closed source. But for the l
745.
by skydhash 5mo ago
> I for one would never contribute to a project that requires one of the above. They’re not exactly begging for your contribution, are they? It’s very much voluntary. They’re just stating how to communicate with them.
746.
by skydhash 5mo ago
That looks like a whole load of work. The thing thay is not defined is why I should do it. Also forge are already fragmented. I use OpenBSD and the software in ports comes from all over the web. You got the forges, web links,… As far as col
747.
by skydhash 5mo ago
Soooo… Pay attention to updates changelog?
748.
by skydhash 5mo ago
So what’s most important is knowing those parameters and the ranges of values, not having the final result. A human, after producing a specs, can the provide the mental model of how he created the specs. Where the inflection points are and
749.
by skydhash 5mo ago
> But also, what you describe would be incorrect, since two <MAX values can add to a value that is >MAX, and overflow I was maybe unclear. I meant, if you know a sum can introduce overflow (because you have a check right after), wh
750.
by skydhash 5mo ago
Wouldn’t be better to check both inputs before against the max value of that type instead of actually doing the overflow?

More ›