xani_

26 ms·

301.
by xani_ 4y ago
* If you save secrets with application A, then install evil application B, it can't access the secrets from A. * And if you revert back to A, those saved secrets will still be there. What stops app B from pretending it's an app A
302.
by xani_ 4y ago
The app key would need to stay the same, but I can't think of a mechanism that would deny one app trying to pretend it's another. Also the fact it doesn't emulate smartcard means every single software supporting it would have
303.
by xani_ 4y ago
That's also funny because one of selling points often starts with not needing to have separate ops people. And it always ends with a bunch of people doing essentially same thing but with different job title. > AWS skills are as arca
304.
by xani_ 4y ago
Okay ? It can be lib. Just make wayland use it, not be thing every DE needs to. DE shouldn't care about where the mouse movement data comes from and should not need to compensate based on device.
305.
by xani_ 4y ago
Yes. That is the problem. It should. There should be a way to call snap in a way that gives you manual and it should be available via the usual cmdline tools
306.
by xani_ 4y ago
I know, twas a joke
307.
by xani_ 4y ago
I remember when man couldn't handle man git command and that was eventually added "a b" -> "a-b" translation.
308.
by xani_ 4y ago
I despise programs that do it. Especially if they went out of the way to make packages but manual is just "go to webpage, fuck you". Also the dumb trend of doing command help subcommand instead of command subcommand
309.
by xani_ 4y ago
For me X11 got to the level where everything I want "just works" out of the box. The most I did is to tweak which input goes where on arand It can only go down from here. I'm not touching Wayland with 100ft pole
310.
by xani_ 4y ago
Maybe we should put a layer on top of wayland with all of the common stuff that DE uses funneled into common APIs. Like, all the eXtras DM needs We could call it X-Wayland
311.
by xani_ 4y ago
No, it's wayland architecture problem. It forces every single DE that will use it to reinvent same thing. There is no good reason to do that, just a lot of duplicated effort. You will not want to have different mouse behaviour when you
312.
by xani_ 4y ago
I used that feature very rarely but the times I did it was insanely useful. Mostly running some debug software so debugging session could run locally but I could control it remotely, without installing whole graphical environment and someho
313.
by xani_ 4y ago
Yes but you need semi-competent people to manage it and have actual ops dept. Then again we got a bunch of racks and our ops dept is 3 people. We have few dozen different apps running on it, anything from "just a wordpress" to k8s
314.
by xani_ 4y ago
Few reasons. Main one is that containers are a complex problem to implement. You need to mount a bunch of filesystems, set a bunch of limits what app running in container can and cannot do, and then do all the plumbing to network it (firewa
315.
by xani_ 4y ago
It allowed us to remove literally thousands of lines of code, including a bunch of rewritten init scripts, because apparently "simple" SysV scripts still have plenty of traps for the developers that start to rear their ugly heads
316.
by xani_ 4y ago
More than that, you can automatically mount whole block device (or file-as-device), even run integrity checks on it. If someone is building say an embedded system that has to run different services (say a NAS, or a router), it's pretty
317.
by xani_ 4y ago
At that point why not just plainly run kubelet as init 1? Add whatever is required (mainly initial network and storage config), why add the management layer on top of it at all ? Like, it appears to target doing same thing systemd does but
318.
by xani_ 4y ago
here in Poland you can freeze the rate for 5 years and that's it ;/
319.
by xani_ 4y ago
If value grows, acquiring materials to make it gets cheaper and cheaper so it would be self-regulating.
320.
by xani_ 4y ago
Yeah the article pretty much pointed out that they weren't spending enough attention on making sure everything works efficiently. Like the fact relatively long expiry product like bottles of Coke still managed to expire (that kind of b
321.
by xani_ 4y ago
Poor kid, the family are basically gimping his start in life by a decade... it's outright abuse
322.
by xani_ 4y ago
Just look at the processor architecture diagram. But TL;DR modern big processors are not one big piece of silicon but basically "SMP in a box", a bunch of smaller chiplets interconnected with eachother. That helps with yield (&quo
323.
by xani_ 4y ago
idle as in OS not running is around 2.5W for rPi. No real power management on rpi either so you can't sleep.
324.
by xani_ 4y ago
You mean idle "server turned on but not used" or completely off ? Servers usually have out of bands management builtin and that's on all the time, even if management network is not connected. Should be just few watts tho
325.
by xani_ 4y ago
If by that you mean that people that saw the content didn't participate coz there is just nothing there , sure
326.
by xani_ 4y ago
> “In many ways, Airlift raised the bar of ambition for Pakistani startups in a big way. Our teams at Airlift redefined the standard of execution, strategy, building a world-class culture, developing a cutting-edge product, raising sizab
327.
by xani_ 4y ago
If someone uses my computer to lie to me about bank transaction, SMS 2FA still shows amount and type of transaction. That's kinda a problem with few of the 2FAs, there is no context attached to code
328.
by xani_ 4y ago
That's kinda problem of many 2FA systems, my bank's send me the reason for 2FA and amount + last few digits of account if it is money transactions.
329.
by xani_ 4y ago
You can use Yubikeys(most of them, the cheapest ones don't have that feature IIRC) as smartcards in addition to other features. You can use smartcard in linux as both GPG key, and SSH key (via GPG SSH agent). Which means leaking your p
330.
by xani_ 4y ago
The e-mail thing is a bit silly; sure, if someone leaks your password you're safe but if your device is compromised there is good chance attacker have access to your e-mail too

More ›