vbernat

35 ms·

391.
by vbernat 10y ago
You can use "--show-component-extension-options" flag to display hidden extensions.
392.
by vbernat 10y ago
It happens to me all the time. If you have been logged out of the account you want to use. You need to login through another mean (eg via Gmail), then come back to Hangout.
393.
by vbernat 10y ago
Title says "virtfs permits guest to access entire host filesystem". First answer says "Yet another example where SELinux could have mitigated this effect". You say "That's not true". "Entire host file
394.
by vbernat 10y ago
I am talking on SELinux in the host which would totally prevent this exploit as SELinux would not allow you to browse the host. You seem to say that nobody does that. libvirt uses SELinux out of the box to do exactly that.
395.
by vbernat 10y ago
In this case, the bug is a logic error, not a resource-related error. I have hard time to see how Rust would have helped.
396.
by vbernat 10y ago
I think you are mistaken. Anything syscall-related is seen by SELinux which may accept or deny the request. Checking file access is one of the major use of SELinux. libvirt comes with the appropriate integration with SELinux (and Apparmor)
397.
by vbernat 10y ago
In Chrome, there is no such thing as a permanent exception. In Firefox, the permanent exception includes unexpected certificate change.
398.
by vbernat 10y ago
Putting keys from popular websites would increase centralization: content will be moved to Facebook and the likes to avoid the warning. This TOFU thing could be useful with self-signed certificates (like those shipped in servers' BMC).
399.
by vbernat 10y ago
On the other hand, publishing publicly will force you to fix every little detail. For example, the most popular article on my blog is about the TCP "time wait" state on Linux. I knew for years how it worked and wanted for people t
400.
by vbernat 10y ago
It's not an array. It's inside a large buffer allocated by nginx.
401.
by vbernat 10y ago
Some providers, notably Amazon, are tuning some sysctl in a way that usually help benchmarks (that's not the primary purpose of those modifications). For example, increasing default and maximum socket memory usage may help with network
402.
by vbernat 10y ago
If the environment is super easy to read when you have gained access to the container, so is a filesystem... The use of secrets is more to transmit secrets to the container without giving it to people.
403.
by vbernat 10y ago
I don't think external contributors are interested by a redistribution. If you make a proprietary license for work, people won't use it at work. If they won't use it at work, they won't contribute. I contribute to many o
404.
Integration of a Go service with systemd(vincent.bernat.im)
1 points by vbernat 10y ago|0 comments
405.
by vbernat 10y ago
> GPL for non-profit projects, proprietary for enterprises. You are likely to have a hard time to get external contributions with that kind of licensing.
406.
by vbernat 10y ago
People may just not want to have their source code into a special hierarchy where their own source code is mangled with the source code of the dependencies. I also use a Makefile to setup an ad hoc GOPATH to workaround this.
407.
by vbernat 10y ago
Netfilter can delegate the fate of a packet to userland. It can be done for all packets or only the first packet of each connection (thanks to conntrack). Userland can there easily match the packet with a local connection or a local applica
408.
by vbernat 10y ago
Happy to see that being able to not use GOPATH is at last considered seriously! During years, Go people wanted to force people to work their way. We can still this state of mind in the associated bug report: https://github.com&#x
409.
by vbernat 10y ago
There is nothing definitive yet. While httpredir is unmaintained, when it works, its reliability and performance are unmatched by deb.debian.org. Using deb.debian.org, I can get sometimes 100kb/s on a 1G connection. And it's not u
410.
by vbernat 10y ago
You need to be in the context that will allow the change of password. For example, if this is an agent, you need to be able to execute code in the agent. If this is from a DHCP hook in early boot, you need to execute in that hook. That&#x27
411.
by vbernat 10y ago
> (Re-)starting and stopping a daemon isn't rocket science; it's like 10 lines of shell code. That's why half of the SysV-style scripts to restart call sleep. No such unreliable hacks with systemd...
412.
by vbernat 10y ago
Also, upstream may have different concerns. For example, they want to be built on various versions of the distribution while Debian will usually only target unstable. I am upstream for some of my packages and I don't provide the same d
413.
by vbernat 10y ago
It uses a pool of memory. If the pool is full because too many clients become active at the same time, only a part of the clients will be served in a timely manner. The other clients will have to wait for their reads to be processed. For a
414.
by vbernat 10y ago
I have a pet-project for this purpose: https://github.com/vincentbernat/dashkiosk/ . While it should work with any browser, my preferred way is to use an Android HDMI stick. Same price as a Pi, far more powerful (2
415.
by vbernat 10y ago
Many languages get support for monotonic clocks in their standard lib with support on various OS. - In C, clock_gettime() (POSIX.1-2001) - In C++11, chrono::steady_clock() - In Python, time.monotonic() - In Ruby, Process.clock_gettime() - I
416.
by vbernat 10y ago
IP is stateless. Paths are changing. First packet has to be able to reach its final destination. Overall, the solution seems to quickly become complicated and routers need to modify headers and recompute checksums, something that was remove
417.
by vbernat 10y ago
A path may not be symmetric.
418.
by vbernat 10y ago
It's native because it is not over USB. The "dongle" is only a cable to go from the "mini" RJ45 to the regular one.
419.
by vbernat 10y ago
I can't say anything about this specific Qualcomm, but I have used Qualcomm Gobi 2000 and Sierra EM7345 in previous generations of Thinkpad. They both work fine with Linux but their firmwares were buggy as hell. You have to upgrade the
420.
by vbernat 10y ago
It's totally possible to use parts of Gnome with Awesome. Pulling Network Manager is easy because they try to not make it too dependent on Gnome (to be able to make it usable on servers). Other parts may require gnome-session but if yo

More ›