tytso

10 ms·

31.
by tytso 5y ago
You can boot a system with a btrfs root file system without having the btrfs-progs installed. Good luck trying to use SELinux without having the policy installed; it's guaranteed to be non-functional. And given that the SELinux polic
32.
by tytso 5y ago
The last commit for the source code of ifconfig, route, et. al, for Linux was as of this writing, about six weeks ago: https://sourceforge.net/p/net-tools/code/ci/4030929bb6f3ee6f... It's still used
33.
by tytso 5y ago
>>SELinux is not built-in(though it is for certain distributions of Linux). > >Wrong. SELinux is 100% "built-in" to Linux. That's like saying btrfs or ???>Wireguard are not "built-in" to Linux because
34.
by tytso 5y ago
Um... Oracle (and other enterprise databases like DB2) don't use mmap. They use Direct I/O. Oracle does have anonymous (non-file-backed) memory which is mmap'ed and shared across various Oracle processes, called the Shared
35.
by tytso 5y ago
OTOH, if you care about that last 5 percent or so of performance there is the complexity that what the OS has optimized for might be different between different OS's (e.g., MacOS, Linux, FreeBSd, etc.) and indeed, might change between
36.
by tytso 5y ago
The problem is if you aren't a paying customer, and you are locked to the mobile app, it doesn't have the password CSV option. So if you can access the desktop web option, sure, it works. But that's not true for all users.
37.
LastPass appears to be holding users' passwords hostage(alternativeto.net)
383 points by tytso 5y ago|217 comments
38.
by tytso 5y ago
Source code availaility for academic papers is important for reproducibility, so other people can run additional experiments and demonstrate that the performance numbers in the paper weren't fudged. It's not necessarily going to b
39.
by tytso 5y ago
The iJournaling paper was published in 2017 (and like many papers, it took multiple rounds of paper submissions before it was finally accepted; the academic procress is rigorous, and many program committees are especially picky). The jJourn
40.
by tytso 5y ago
The goal of academic research is to explore ideas, which are judged by submitting papers to conferences for review, and to train the next generation of academics (i.e., graduate students) in coming up with ideas, proving them, and then writ
41.
by tytso 5y ago
Or commenters aren't bothering to do basic research before mouthing off on ycombinator? To quote from https://support.google.com/youtube/thread/134791097/update-t... "Developers: If you’re using th
42.
by tytso 5y ago
Full Scope refers to a type of polygraph examination which someone might be asked to undergo as part of the investigation process before getting a security clearance. At one point, you could either get a counter-intelligence polygraph exam
43.
by tytso 5y ago
Good code is maintainable code. And while you, as the original programmer, might be perfectly comfortable writing your code using Arabic variables and comments, what if the next person who has to maintain the code is from Korea? Or Russ
44.
by tytso 5y ago
Originally pam.conf was envisioned to be quite simple. Say, about the number of lines in /etc/inetd.conf. It was only later that people started doing these really complex things, and most of that was because Linux distributio
45.
by tytso 5y ago
OK, suddenly I feel old. When I knew people using YP, we all knew that it was the rightful name, and NIS was the name slapped on it later due to trademark concerns...
46.
by tytso 5y ago
If you want to play with PAM, the best thing to do is to create a test program which links to the PAM library and which uses a different PAM service name so you can play with a config file which is different from the ones which ssh, su, s
47.
by tytso 5y ago
So the fact that PAM was adopted by Linux is mostly my fault. I was the tech lead for Kerberos at MIT, and in 1995 I was visiting Sun to discuss how kerberos might be included in Solaris. One of the technical discussions that we had was
48.
by tytso 5y ago
If there is a drive towards more end to end private messaging, I'm OK with that. But I wouldn't call that "social networks"; in my mind there is a huge difference between an encrypted end-to-end message between two use
49.
by tytso 5y ago
It's not so simple as whether or not a platform allows content of a certain type from certain authors to be published on their platform. It's also about whether the platform is pushing that content to others, using automated to
50.
by tytso 5y ago
When I was at IBM 15 years ago, IBM was far from being a monopoly, since there were plenty of competitors in the hardware space (HP, Sun, Dell, etc) and in the software space (Oracle, SAP, etc.) and in the Services space (Accenture, PwC, KP
51.
by tytso 5y ago
What's unclear is how is the revenue percentage split across all of the various contributors of a particular "post open" package. Suppose there are 10 "Post Open" packages; do all of the packages deserve to get an
52.
by tytso 5y ago
The reason why I used the regex match is because the attacker might try to add one or spaces as a prefix and/or suffix, e.g " metadata.google.internal " which wouldn't match "metadata.google.internal" but the s
53.
by tytso 5y ago
There's a really simple (albeit hacky) workaround which can be deployed fairly quickly. In /etc/dhcp/dhclient-exit-hooks.d/google_set_hostname replace this line: if [ -n "$new_host_name" ] && [ -n
54.
by tytso 5y ago
I don't see what the big deal here. The serial killer really did exist, and has the same name as the author of the blog post. Searching for "Hristo Georgiev" using Bing and DuckDuckGo turns up the article about the serial
55.
by tytso 5y ago
First of all, apologist is not a dirty word. Per the Meriam-Webster dictionary the definition is "one who speaks or writes in defense of someone or something". Secondly, extensions are not the answer, because extensions are inher
56.
by tytso 5y ago
This is incorrect. 2-D workspaces used to be part of the GNOME core feature set. It was removed from the core feature set, and the excuse was, "oh, if you really want that, you can develop an extension". That's not an an
57.
by tytso 5y ago
This big difference between the Kernel Modules and GNOME Extensions is that we in the kernel community do not encourage out-of-tree modules. Indeed, they are strongly discouraged. So they out-of-tree modules are never considered an answe
58.
by tytso 5y ago
Or just switch to a DE that is willing to be receptive to the needs of its users. Again, GNOME used to support 2-d workspaces. This feature was removed, deliberately, by the GNOME developers. That's their prerogative, but don'
59.
by tytso 5y ago
I was using GNOME when 2-D workspaces was a supported feature, and when it was removed, people told me, "don't worry, use an extension; the feature isn't really gone". The problem is then the next time my distribution
60.
by tytso 5y ago
My only real complaint is advocates like you who try to claim that an extension is a valid solution to a feature request. Because it really isn't. People spend a lot of time customizing their environment to meet their needs. And the

More ›