teilo

79 ms·

811.
by teilo 9y ago
God save us from modern literary criticism and their literary theories. They add nothing, accomplish nothing. They deconstruct, but never build.
812.
by teilo 9y ago
If stock Ubuntu was good enough for St. Paul, it is good enough for me.
813.
by teilo 9y ago
RawTherapee is terrible with DNG files. I have a lot of Olympus E-M1 images that I had Lightroom convert to DNG. DarkTable handles these files just fine. They are unusable in RawTherapee. The issue is that RawTherapee can only handle Linear
814.
by teilo 9y ago
> And no mic input? Why? That's just silly. It cost them more to leave that out. Do you mean separate mic input? Because it has the same combo headphone jack as all existing Macs. So it has mic input. As a pro audio user, a built-in
815.
by teilo 9y ago
Yes. He has these capsules in his books in various places, separate from the story, where he calls out "facts" that are anything but.
816.
by teilo 9y ago
> but you don't really know what is accepted knowledge or not This is his primary problem. When he presents his "facts" he is often not presenting obscure but well established facts, but wide-eyed conspiracy theories that
817.
by teilo 9y ago
No. The licensing terms changed from per socket to per core. Other than that, the rules are the same. If you virtualize Windows Server, you must pay for core licenses for every physical core of the bare metal, regardless of which hypervisor
818.
by teilo 9y ago
This is the same tired argument: "But communism would work if people did it right." This is neither an historical nor a scientific argument. It is pure wide-eyed ideology that ignores the devastation that communism has caused ev
819.
by teilo 9y ago
Yes, absolutely, because of Microsoft's licensing model for HyperV. Windows Datacenter Edition is not cost effective for us, and that means we only run two Windows instances per host. By moving MSSQL to Linux, we can free up a Windows
820.
by teilo 9y ago
Works for me on HS.
821.
by teilo 9y ago
Granted. In any case it is not relevant in the context of this discussion. Access to the local keychain does not require an entitlement. Even the "keychain-access-groups" entitlement only applies to the iCloud keychain.
822.
by teilo 9y ago
Completely wrong. Entitlements are for sandboxed apps, and grant a sandboxed application access to other parts of the system. Unsigned apps are by definition, not sandboxed, and have no such restrictions. They are granted access, not by a s
823.
by teilo 9y ago
Possibly related to this?: https://news.ycombinator.com/item?id=15329527#15330589
824.
by teilo 9y ago
This makes me wonder if the vector for this exploit is a kernel extension that subverts the keychain service. Except that the kernel loading exploit appears to require root privileges.
825.
by teilo 9y ago
Patrick Wardle (the source of this video) is on a roll today: https://www.synack.com/2017/09/08/high-sierras-secure-kernel...
826.
High Sierra’s ‘Secure Kernel Extension Loading’ Is Broken(synack.com)
128 points by teilo 9y ago|15 comments
827.
by teilo 9y ago
The "unsigned" part is irrelevant. All apps run with the same default permissions once you tell them to run. "Unsigned" just means you have to allow it to run the first time, depending on how you configured Gatekeeper, b
828.
by teilo 9y ago
No. Application access to the keychain is restricted via an API with a (supposedly) robust security model behind it, for precisely this reason. Applications must explicitly be granted access to the keychain. There should have been a prompt
829.
by teilo 9y ago
There is no difference between a signed and unsigned app once it has been allowed to launch the first time. The permission model is the same for both. Normally you would have expected to see a system dialog asking if you would like to grant
830.
by teilo 9y ago
Let's set aside questions of what a particular person's labor is worth for a moment. One may have all sorts of opinions as to whether someone deserves the wage they earn, and such arguments are beside the point. Let us also set as
831.
by teilo 9y ago
Certainly they do. That is why societies make laws. I am not a Randian.
832.
by teilo 9y ago
Now include the failure rate of electron tubes, and the literal bugs that would gum up the works, and this theoretical machine becomes impossible even ignoring the power consumption.
833.
by teilo 9y ago
I know. It sucks terribly, and Google just doesn't care. It's total bullsh*t.
834.
by teilo 9y ago
Yes, but keys can also be revoked, providing a way to mitigate this.
835.
by teilo 9y ago
I was thinking more than the ratings would handle this, rather than having to sign keys. Ratings by well-respected and vetted members would have more weight.
836.
by teilo 9y ago
Google does not use RBLs from other sources. They have their own reputation algorithms, and there is nothing you can do to request that your domain be removed. However, the algorithms are self-correcting. If the bad behavior has been correc
837.
by teilo 9y ago
I think we need a system to prevent this instead of the wild-west that PyPi has become. For example: Developer signatures that are checked against a community rating. If someone does `pip install` pip would look up the developer signature o
838.
by teilo 9y ago
So... The Salmon of Doubt?
839.
by teilo 9y ago
Filemaker has many issues: It's not an RDB, it's SQL support is limited to poor, and it's scripting is not nearly as versatile as Access.
840.
by teilo 9y ago
LibreOffice suffers from it's terrible scripting language. Compared to VBA it is wordy, non-obvious, and in general a royal PITA to work with.

More ›