vitiral

17 ms·

1. 211.▲
   by vitiral 3y ago

   > screwing over long bongholders I think the _bongholders_ will probably come out pretty painless dude
2. 212.▲
   by vitiral 3y ago

   I have zero experience, but a few thoughts nonetheless that I'd like pushback on. I believe there are at least two major categories here 1. They are more of a business/school friend. You share knowledge and passion. You compliment
3. 213.▲
   by vitiral 3y ago

   Huh, I thought they were "radio" because they communicated with each other. Still not a bad mnemonic IMO
4. 214.▲
   by vitiral 3y ago

   The MacBook Wheel! https://youtu.be/9BnLbv6QYcA?feature=shared
5. 215.▲
   by vitiral 3y ago

   I'm designing a simple dev environment from scratch. My solution for this is a sandboxed lua for programatic configuration: https://github.com/civboot/civlua/tree/main/lib/luck I can't sta
6. 216.▲
   by vitiral 3y ago

   That makes sense. So instead you could just require that your crypto stuff takes an absurd amount of time, say 0.5 seconds / MiB? Then every operation will take that long and no information can be gleaned. I'm not saying this is a
7. 217.▲
   by vitiral 3y ago

   Ah, you can test the implementation but not the algorithm itself. Got it. I see now I said "roll your own crypto" and I should have said something like "reimplement a crypto" To prevent side channel, can't you do so
8. 218.▲
   by vitiral 3y ago

   Chrome, nothing special on it
9. 219.▲
   by vitiral 3y ago

   > Timing attacks can be remote for instance, and with RSA some operations are slow enough to be noticeable over networks. Huh, I'd be pretty curious about that. > Not really. Cryptography is inherently not very conducive to tests
10. 220.▲
    by vitiral 3y ago

    I went back just to see and it chose WHITE as the first option, making the text invisible lol
11. 221.▲
    by vitiral 3y ago

    I hear so much about "side channel attacks", and I get why they are important if you don't know what software is running on your computer. But are they important if you don't run any outside code (not on the cloud, not r
12. 222.▲
    by vitiral 3y ago

    Life is a gift. Death is a gift. Anger is a gift. Sadness is a gift. It all comes and it all goes. Let it come. Let it go.
13. 223.▲
    by vitiral 3y ago

    Sorry, not touch -- but touch isn't something I want on even my laptop
14. 224.▲
    by vitiral 3y ago

    Those advantages are the remaining 10% I was talking about :)
15. 225.▲
    by vitiral 3y ago

    Just a service announcement: you can get an external monitor that is charged and driven by a single USB-C for about $100 which weighs about a pound. Feels like it would get 90% of what I want out of a setup like this.
16. 226.▲
    by vitiral 3y ago

    Ya, I'll have a website eventually... What do you have against .org websites?
17. 227.▲
    by vitiral 3y ago

    let's start over. You might like civboot.org
18. 228.▲
    by vitiral 3y ago

    Did you consider it could have been faked?
19. 229.▲
    by vitiral 3y ago

    My project civboot.org was spun out of similar concerns. I don't have the political power to change any of the issues you raised, but I can rebuild a simpler yet usable tech stack that could be the basis of a new educational program.
20. 230.▲
    by vitiral 3y ago

    I'm pretty sure (hope?) the comment was said _in jest_ (though I'm not familiar with _this internet standard_)
21. 231.▲
    by vitiral 3y ago

    You can JMP to a "function" (which JMPs to a function... etc) where the last function RET. It all works like it's a single function body.
22. 232.▲
    by vitiral 3y ago

    I agree, but you underestimate the cost of software in "safety critical" applications. I've heard stories of cases where development orgs were given the option of changing a line of code or re designing the hardware. They of
23. 233.▲
    by vitiral 3y ago

    I think that was implied
24. 234.▲
    by vitiral 3y ago

    Even more fun is using jmp to chain functions together -- only works when you don't have locals and have complete knowledge of your registers!
25. 235.▲
    by vitiral 3y ago

    Also, there is cost to you to maintain docs and a cost to others if you don't. Some things are near universal and always useful. Documenting by creating a full working example with minimal dependencies will stand the test of time. I&#x
26. 236.▲
    by vitiral 3y ago

    The cutoff is more about "this is the number of bug requests for exceptions" rather than some kind of technical limit. When it's a staffing limit the question becomes less arbitrary.
27. 237.▲
    by vitiral 3y ago

    My suggestion was for N=recursive deps (dependency TREE), so yes it would affect the "everything" package, and likely many of its chunks And I agree about yank! I just think you could implement multiple reasonable solutions here
28. 238.▲
    by vitiral 3y ago

    I think you named at least one reasonable fix: an upper limit. And it's not really arbitrary. You can count the dependency tree of every package and get the P99, exclude joke packages and get the max of the rest. Set the limit around
29. 239.▲
    by vitiral 3y ago

    This pretty much describes Nix. I guess the real answer is because it's a lot of work to maintain packages and versioning and there is space for multiple solutions.
30. 240.▲
    by vitiral 3y ago

    Hey, this is effectively the same idea I'm going to implement! https://github.com/civboot/civboot/blob/main/blog/0012-dev-l... Mine will be slightly more than key/value. My index file will