yc12340

11 ms·

61.
by yc12340 7y ago
Mosh has a lot of issues. Most notably it lacks flow control [1] and does not handle packet loss or truncation [2]. Very sad, because the idea behind Mosh is great. 1: https://github.com/mobile-shell/mosh/issues&#x
62.
by yc12340 7y ago
> I'm pretty sure they meant "runs" in the sense of "runs the show" (make the majority of the decisions in Linux userland projects) not in the sense of "uses". I was not meaning that in some twisted way
63.
by yc12340 7y ago
>> IBM/Red Hat employees basically run the entire Linux userland > This seems like a very dishonest exaggeration. Definitely a dishonest exaggeration. Google runs Linux userland. Have been for entire last decade. Unless by &qu
64.
by yc12340 7y ago
Is remotely exploitable (!) CVE in systemd [1] not horrible enough? Or accidentally bricking computers at hardware level [2]? 1: https://nvd.nist.gov/vuln/detail/CVE-2018-15688 2: https://lwn.net/A
65.
by yc12340 7y ago
> You can use systemd without almost all of the sideparts. Can you? The whole premise of systemd revolves around ability to use existing init files, written by upstream developers. Upstream init files are going to use arbitrary parts of
66.
by yc12340 7y ago
According to claims on Reddit, this malware can re-enable "Allow installing untrusted apps" checkbox after user unchecks it. This and it's ability to survive factory reset may indicate, that xhelper can gain complete control
67.
by yc12340 7y ago
> As far as I can tell the result met the needs of the business? They have burnt their bridges by making it impossible to revert to older version. In effect, if someone can not run a newer version, they will be forced to completely aband
68.
by yc12340 7y ago
Sorry, but your advice have been detached from reality for a long time. SPF is not a "should" anymore, it is a must. Many major e-mail providers will outright reject your e-mail at SMTP level, unless you have correct SPF record. R
69.
by yc12340 7y ago
Nah, I will assume it as truth only when it makes sense.
70.
by yc12340 7y ago
> Would you trust LetsEncrypt more if the US DOJ ran it? You haven't responded to his question. Do you consider Let's Encrypt security theater?
71.
by yc12340 7y ago
ESNI does not provide much real security, only obfuscation. Besides, it is not going to make it (South Korea already blocks it and others will follow).
72.
by yc12340 7y ago
I don't want all my DNS requests to be sent to Cloudflare. I trust my ISP more than Cloudflare. As for you claims about "astroturfing campaigns", — how do we know, that you aren't a part of one?
73.
by yc12340 7y ago
I am calling in question validity of this project as a benchmark. The author asserts, that "it's virtually impossible to write allocation-free idiomatic Java code, so we still allocate... 20 bytes on average per forwarded packet&q
74.
by yc12340 7y ago
The definition of "Linux system" is a red herring. If you haven't signed OIN licensing agreement, you do not receive any relevant patent grants, period.
75.
by yc12340 7y ago
Care to explain how? Microsoft isn't giving away it's exFAT patents. They are merely suggesting, that everyone licensed them at Microsoft's own terms. Those terms include becoming a member of Microsoft-sponsored patent ring a
76.
by yc12340 7y ago
Background Services have always been killed on short notice. AFAIK, the OS regularly restarts them, even if it is completely idle with zero memory pressure. It used to be that way in KitKat and prior versions too. Using a Foreground Service
77.
by yc12340 7y ago
> Just stay in js land as a single page application and communicate with server purely in REST. This is a sensible conclusion. Unfortunately, "js land" tends to grow as application grows. And nobody actually unloads their Javas
78.
by yc12340 7y ago
SPAs are the worst, because companies deploy them to avoid separation of responsibilities and turn every employee into easily replaceable "full-stack developer". Unfortunately, a lot of people write terrible applications regardles
79.
by yc12340 7y ago
...also known as "directional navigation" — widely used by screen readers and browsers on Android TV or some Android Auto devices.
80.
by yc12340 7y ago
I assume, that Google's answer would sound like this: "We are not starting with musl, because we want to own all our software the same way people own hamsters or dogs: care for them, feed them, train them, single handedly decide w
81.
by yc12340 7y ago
> pthread cancellation was a terrible idea when it was added, and it's even worse today > you can implement it yourself via signals It appears, that you are contradicting yourself. Either it is "bad idea" or it is easy
82.
by yc12340 7y ago
> I imagine what you are proposing then is to record the entropy on the password Or just generate secure high-entropy passwords and force users to use them. Making users look up SMS codes before each login is acceptable. Making them solv
83.
by yc12340 7y ago
So rate-limiting is "user-hostile", but permanently hell-banning someone because their network is considered "seedy" is user-friendly? Incidentally, you still need rate-limiting if you use Google's CAPTCHA. If you d
84.
by yc12340 7y ago
It is odd, that C# needs foreach loop for bound check elimination. Java supports this optimization for a wide range of loop types... since Java 7, I think. Normally I would argue, that Java is just ahead of curve, but Android has also gaine
85.
by yc12340 7y ago
This has nothing to do with Tor. Cloudflare frequently blacklists entire countries/counties worth of people (and rarely reverts those blacklists). There is a good chance, that you have missed a lot Indian/Vietnamese/Russian&#
86.
by yc12340 7y ago
> web browser teams have taken the recent risks extremely seriously Not really. They didn't even properly apply band-aids. Chrome and Firefox disabled number of features, that allow Javascript code to create high-precision timers. T
87.
by yc12340 7y ago
> modern routers forward packets in tens to hundreds of microseconds Only when network is underutilized, and there is no throttling/bufferbloat.
88.
by yc12340 7y ago
> I think the growth of flat-earth and anti-vax believers are two examples that disprove your statement What growth are you talking about? Is there an actual research, that indicates that number of flat-earthers have grown compared to pr
89.
by yc12340 8y ago
> I would hardly consider Yahoo to be a leader in anything at this point, not sure about mail.ru. mail.ru is owned by the same mafia group, that controls majority of Russian internet. They are either very stupid or want the same thing as
90.
by yc12340 8y ago
> Android devices not running mainline kernels is a direct result of the Linux development process That's a wishful thinking. Majority of Android drivers are userspace blobs. Linux kernel development process is completely irrelevant

More ›