vbernat

44 ms·

451.
by vbernat 10y ago
I genuinely don't know about what toxicity and hostility you are speaking of. Any pointer?
452.
by vbernat 10y ago
Unfortunately, nobody has stepped for SELinux maintainance. If this is important for you, you should help to maintain those policies. All your remaining points are vague at best.
453.
by vbernat 10y ago
Vendetta does exactly the same thing: https://github.com/dpw/vendetta (but seems to have been developed after Manul).
454.
by vbernat 10y ago
Also, it is not possible to express constraints (eg. follow 2.x tags). A manifest file is handy for that. Personally, I like glide better since it takes a lot from Ruby bundle. I commit only glide.yaml and glide.lock in the repository. It i
455.
by vbernat 10y ago
It says that API requests using TLS are not vulnerable. However, many applications won't do the appropriate certificate checking. If HTTP_PROXY is set to a mitm proxy, it can succeed.
456.
by vbernat 10y ago
For Debian, the author says: "Official releases of Debian CDs come with signed checksum files; look for them alongside the images in the iso-cd, jigdo-dvd, iso-hybrid etc. directories." No directory or direct links are provided. V
457.
by vbernat 10y ago
Without a bug report, nobody can tell if your case is unique or general. You spend time to rant here but with a bit of additional time, you could have opened a bug report with the appropriate information and maybe help people running into t
458.
by vbernat 10y ago
The kernel TCP stack has two important constraints that alternatives usually don't have: 1. Ability to handle packets to/from multiple applications 2. Expose the BSD socket API
459.
by vbernat 10y ago
How is that an awful UI? What should it be? It's a flexible way to get what you want. You want to automatically start the daemon on next boot, but not on install? You can do it. You want to prevent daemon restart on upgrade, you can do
460.
by vbernat 10y ago
At the time, Ogg Vorbis was difficult to hardware decode and its impact on the battery life was noticeable. Other decoders have been introduced since but I don't know if hardware decoding is here or not.
461.
by vbernat 10y ago
The driven-by-score configuration keeps a AES256-CBC-SHA cipher but discards a AES128-GCM-SHA2 cipher which is more robust.
462.
by vbernat 10y ago
The read-only copy could be different from the running copy.
463.
by vbernat 10y ago
Debian only enforced the fact that if there is a /usr partition, it should be mounted by the initramfs. Moreover, the advanced partition scheme in debian-installer doesn't propose a separate /usr anymore. /usr can still
464.
by vbernat 11y ago
The whole idea of NSS is to be pluggable to let the local administrator chooses what they need.
465.
by vbernat 11y ago
gcc has no problem with static linking. glibc can be statically linked (with gcc or clang) except the pluggable parts, which is NSS. How would you reconcile static linking and plugins?
466.
by vbernat 11y ago
Security fixes are backported. http://metadata.ftp-master.debian.org/changelogs/main/g/git/... https://security-tracker.debian.org/tracker/source-package/g...
467.
by vbernat 11y ago
Many shells enable you to change the way word splitting is done. By default, zsh doesn't do word splitting at all for variables.
468.
by vbernat 11y ago
Use an OS with backports, like Debian. For example, if you took Debian Jessie, you could pull LibreOffice 5 from backports. VLC is already almost up-to-date (2.2.1).
469.
by vbernat 11y ago
That's hardly related to a package manager. You can for example run Debian unstable to get more up-to-date stuff or mix Debian Jessie with backports. Same package manager, different sources.
470.
by vbernat 11y ago
Bank transfer or certified checks. This is quite common in France when selling expensive goods.
471.
by vbernat 11y ago
It's possible to release a mod under GPL when the original license is just MIT.
472.
by vbernat 11y ago
It's not a substitute to distribution-maintained packages. With no security support, you'll have to track and upgrade to the latest version. In contrast with other software, you'll have to upgrade your ES cluster (and potenti
473.
by vbernat 11y ago
Elasticsearch 1.0.0 was released less than 2 years ago. A project with more than 100 M$ of funding may be able to maintain stable branches for users who cannot cope with the non-trivial upgrades to more recent versions.
474.
by vbernat 11y ago
Better use: #define min(X, Y) \ ({ typeof (X) x_ = (X); \ typeof (Y) y_ = (Y); \ (x_ < y_) ? x_ : y_; })
475.
by vbernat 11y ago
A new version has been released this year. unison works remarkably well, it's understandable there is not much to add.
476.
by vbernat 11y ago
They say that but this is not always the case. See for example Roundcube. They just shipped minified JS as shipped by upstream. In Debian, pre-minification JS files are shipped and minified during the build process. http://pkgs.f
477.
Live patching QEMU for VENOM mitigation(vincent.bernat.im)
1 points by vbernat 11y ago|0 comments
478.
by vbernat 11y ago
OpenResty is an evented model too. Coroutines are used to avoid using callbacks.
479.
by vbernat 11y ago
When an HTTP API is just an additional feature of a larger project, it may make sense to keep using C: a toolchain available everywhere and well known (including cross-compilation and full bootstrap), a small memory footprint, easy use of a
480.
by vbernat 12y ago
SELinux is not a release goal. It's possible to advocate for new release goals (for example, it is likely that reproducible build will be a release goal for the next release) but this means that some people have to volunteer to do the

More ›