wahern

13 ms·

181.
by wahern 4mo ago
That capability should be added to acme.sh, etc so that it automatically runs with minimal privileges for the invoked task. But people seem to assume privilege management is the sole responsibility of the packager or caller, despite the too
182.
by wahern 4mo ago
Morally, maybe? It's what people tend to implicitly assume when a large chain displaces local mom & pops. You can argue it's for the greater good in the long-term, but that doesn't settle the question of the immediate inj
183.
by wahern 4mo ago
Assuming that's token cost upstream, and given the multiplication factor in tokens processed per query, that seems like maybe a few thousand requests per second at most? It's impressive but for a 50 person startup team expending m
184.
by wahern 4mo ago
The Justinian Plague was as bad or worse, but rather than result in flourishing it ushered in the beginning of the end of the Roman Empire and the start of the so-called Dark Ages. So maybe the Black Plague was an important element, but if
185.
by wahern 4mo ago
Third is by accident, including by buggy code, and the permissiveness means it's easier for bugs to go unnoticed. See, e.g., https://news.ycombinator.com/item?id=48327115
186.
by wahern 4mo ago
This reminded me of ISO 7816-4 BER-TLV encodings, which uses the format defined in ISO/IEC 8825-1 (ASN.1 related spec). Length integer values of 0-127 are encoded in 1 byte. If the high bit is set, then the first 7 bits tell you the n
187.
by wahern 4mo ago
Crushing only because their cadence is so slow compared to SpaceX. Their process seems much closer to the highly risk averse methodology of traditional incumbents than to SpaceX's style. Failure becomes a self-fulfilling prophecy. Rock
188.
by wahern 4mo ago
Or just make it more difficult to squat obvious namespaces, and add an identity management system (like PGP Web of Trust, but simpler) so you can limit yourself to trusted packages, e.g. packages vouched by your preferred set of root signer
189.
by wahern 4mo ago
"Writing is nature's way of letting you know how sloppy your thinking is." -- Richard Guindon, Michigan So Far, 1991. The comic has been quoted online many times, but I had to buy an old copy of Michigan So Far on eBay to act
190.
by wahern 4mo ago
What's colloquially called the Latin Mass is the Tridentine Mass, which among other things uses a different calendar, including different biblical readings each week (a smaller selection of biblical passages than the Novus Ordo uses).
191.
by wahern 5mo ago
What's called "Roman law" in Europe derives from the Justinian Code, which was nominally a codification of but in many respects a radical reinterpretation of late roman law. Prior to the Justinian Code, and especially Schola
192.
by wahern 5mo ago
The modern mass can be done ad orientem. The switch of orientation was only permitted, not required, in the Novus Ordo. Most of the changes people associate with the Novus Ordo were completely optional and often not even expected to have be
193.
by wahern 5mo ago
No. You only get EINTR when a signal handler fires and you didn't use the SA_RESTART flag with sigaction. If you don't install any signal handlers, or you use SA_RESTART on all handlers, or you've blocked/masked all sign
194.
by wahern 5mo ago
> [US] tax law drafting style follows default logic, a non-monotonic logic that is hard to encode in languages with first-order logic (FOL). https://arxiv.org/pdf/2011.07966.pdf Most law generally is non-monotonic.
195.
by wahern 5mo ago
> Now, is it exploitable that `find` also reads the uninitialized auto variable `status` (UB) from a `waitpid(&status)` before checking if `waitpid()` returned error? (not reported) I can't imagine an architecture or compiler wh
196.
by wahern 5mo ago
Sure, just like many other animals exhibit analytical intelligence and complex communication. The seeds are there. The distinction is by degree, but the gap is pretty wide in all three cases. No other species has been shown to systematical
197.
by wahern 5mo ago
unveil was designed and intended to effectively sandbox root when combined with sufficiently strict pledge permissions. I don't think this exploit would have effected any existing OpenBSD services, but sometimes services need to keep a
198.
by wahern 5mo ago
All OpenBSD services, including HTTP (httpd), SMTP (smtpd), and DNS (nsd, unbound, unwind), use privilege separation and sandbox themselves with pledge and either unveil or chroot. There's no extra configuration. And the developers dog
199.
by wahern 5mo ago
Mencken's cynicism and mockery were arguably the type of thing Kierkegaard lamented, and perhaps in a sense were more a cause of social breakdown more than a consequence.
200.
by wahern 5mo ago
Russia also does this, with both drones and missiles. It also sends cheap decoys mixed in with the Shaheds, because it turns out they're not as cheap and plentiful as people think, especially when you're trying to hit hard targets
201.
by wahern 5mo ago
The concept of fundamental human rights is certainly new, but our notion of intrinsic human value (and intrinsic value of other life and things) arises from our empathy, which at least in its degree is perhaps our most important defining tr
202.
by wahern 5mo ago
Lasers obey the inverse square law as perfect collimation isn't possible. But I guess as a practical matter it does make it easier to achieve a particular energy level at a target. You still apparently need megawatt scale lasers just
203.
by wahern 5mo ago
Those type attributes are also used for the x86 intrinsics API, and they override default C behaviors like promotions and presumptions around aliasing (ironically they make type punning easier, though maybe it was just the few use cases I e
204.
by wahern 5mo ago
There are more shows, too, including two 3 hour shows with Chris on KBHR Cicely (i.e. Northern Exposure): https://www.awphooey.com/kbhr https://www.awphooey.com/retrofit/autumn Full list at https:&#x2
205.
by wahern 5mo ago
AFAICT[1] the latest generation of SpaceX Starlink satellites use AMD Versal XQR SoCs, which are built on a 7nm process with components like the main processor (dual-core ARM Cortex A-72) and memory (DDR4) clocked in the gigahertz, not mega
206.
by wahern 5mo ago
It's not about lawyers cutting a good deal for themselves. Liability issues get complicated along multiple dimensions when they involve licensed professionals, even when they're day-to-day working relationship is indistinguishable
207.
by wahern 5mo ago
It's more that Unix systems were timesharing systems, any user could run a daemon, but you didn't want users to have the ability to grab a port used by system services, not just because they could impersonate a system service on t
208.
by wahern 5mo ago
Yep, and today the situation is completely reversed. Through acquisition and business development Singapore is the country which owns the brands and invests in other countries. Poland just needs to stick to the formula. It's citizens a
209.
by wahern 5mo ago
1) IFUNC is hardly the only way to run code before main. 2) The alternative they present is arguably less secure because the function pointer will remain writable for the life of the process, whereas with IFUNC the GOT will eventually be
210.
by wahern 5mo ago
The term "Latin mass" confuses two distinct aspects. Colloquially it refers to celebrating the Tridentine Mass in Latin. But the Tridentine Mass was already celebrated in the vernacular years before Vatican II, though it was optio

More ›