vbernat

20 ms·

241.
by vbernat 8y ago
> So no, it is not trivial to take a Debian release and make it run SysVinit or OpenRC. It is: "apt install sysvinit-core". For some reason, we still carry the burden of maintaining compatibility with many init systems while th
242.
by vbernat 8y ago
insmod and modprobe are still synchronous. Once you have loaded a network driver, you can be assured the corresponding devices have been created. What's new (around 2006) is the kernel will probe buses in parallel and invoke modprobe i
243.
by vbernat 8y ago
> The rough edges I’ve hit can all be attributed to systemd brain damage (like the fact that the linux kernel no longer has a working, synchronous, “probe the network cards and create a logical interface for each one” primitive). Multith
244.
by vbernat 8y ago
> Systemd was initially sold as providing faster boot times. Systemd was not about speed. Speed is a side-effect of correctly handling ordering. See http://0pointer.de/blog/projects/the-biggest-myths .
245.
by vbernat 8y ago
RPKI doesn't really solve the problem as it is a proof of origin. You can still inject routes, just ensure you add the original AS as origin of these routes. BGPsec would solve this issue, but is currently not deployed at all (and won&
246.
by vbernat 8y ago
I believe this is the CSP. You can confirm that in the Javascript console. Extensions should be able to work around that. Bookmarklet are bound by the CSP and the major browsers don't want to fix that ( https://bugzilla.mozil
247.
by vbernat 8y ago
One reason I prefer to use DDG is also to promote them. I started using DDG when I saw other people using it. The other reason is I also try to limit the number of services that I have to maintain.
248.
by vbernat 8y ago
I often use the search engine myself too, but I believe nobody else does. When I was using Google Custom Search, I think I had hardly a few hits by year.
249.
A more privacy-friendly blog(vincent.bernat.im)
146 points by vbernat 8y ago|50 comments
250.
by vbernat 9y ago
It's a bit odd to set CSP headers but not TLS.
251.
Integration of a Go service with systemd: socket activation(vincent.bernat.im)
1 points by vbernat 9y ago|0 comments
252.
Test drive of AppSwitch, the “network stack from the future”(jpetazzo.github.io)
2 points by vbernat 9y ago|0 comments
253.
by vbernat 9y ago
Many services don't log to syslog. For example, on Debian derivatives, /etc/init.d/networking was logging to the console only. Good luck to get the output once the system has booted. With systemd/journald, you get t
254.
by vbernat 9y ago
I don't know the story behind the separate venv package (and can't imagine why this is a separate package). pip relies on bundled libraries and tries hard to fight any unbundling (by using slightly patched versions of the dependen
255.
Progressive Locks: fast, upgradable read/write locks(wtarreau.blogspot.com)
121 points by vbernat 9y ago|3 comments
256.
by vbernat 9y ago
As a compromise, Debian also comes with a secure-by-default configuration. In the case of memcached, the service is configured to listen on 127.0.0.1.
257.
OPL2LPT: an AdLib sound card for the parallel port(vincent.bernat.im)
4 points by vbernat 9y ago|0 comments
258.
by vbernat 9y ago
As you can see, your update is outdated (from the 20171117 bundle, pre-Spectre).
259.
by vbernat 9y ago
Not the updated ones. The ones on the site are from November.
260.
by vbernat 9y ago
Intel ships, but only to vendors, while they could ship those damn microcodes directly on their website. We now have to wait for vendors to put those microcodes in their BIOS and release them...
261.
by vbernat 9y ago
The iptables-extensions(8) manual page is fairly recent. AFAIK, previously, there was no manual page, but maybe it was scattered over various pages.
262.
by vbernat 9y ago
Gmail IMAP is slow as hell. A self-hosted IMAP server is quite fast.
263.
by vbernat 9y ago
Most people here seems to miss the point. If you tell people to wear an helmet to cycle, they won't cycle.
264.
by vbernat 9y ago
There are two man pages: iptables(8) and iptables-extensions(8). What other man pages are you referring to?
265.
by vbernat 9y ago
Outside firewalling, Linux already has support for offloading switching and routing to hardware if possible (through switchdev). This works with Mellanox network cards for example.
266.
by vbernat 9y ago
Radix trees are often used in routing tables. On Linux, for IPv4, there is an additional level of compression to avoid the cost of many intermediate nodes. I've described the algorithm used on Linux here: https://vincent.ber
267.
by vbernat 9y ago
For a more "own" CDN, here is another write-up: https://www.linkedin.com/pulse/build-your-own-anycast-networ...
268.
by vbernat 9y ago
You are right. In my head, Mobi files were always downloaded from Amazon (and here, they always come with a DRM, right?).
269.
by vbernat 9y ago
Here is an example of an O'Reilly book in ePub format, as bought on Google Playstore: https://imgur.com/a/wPK7G . Clearly, nobody took a glimpse at this version before publishing. The second image is from an old Ju
270.
by vbernat 9y ago
Buying Mobi files is sending a signal that DRM are OK.

More ›