Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
yrro
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
43 ms
·
601.
▲
by
yrro
5y ago
I think you mean glibc 2.34: https://sourceware.org/pipermail/libc-alpha/2021-August/1297... You opt-in by building with -D_TIME_BITS=64: https://www.gnu.org/software/libc/manual
602.
▲
by
yrro
5y ago
It's worth noting that this was possible because OpenBSD are happy to break their ABI in order to improve their operating system. Linux values ABI stability highly, and prefers to introduce new interfaces that applications have to opt
603.
▲
by
yrro
5y ago
I guess you don't want the employees to steal from _you_?
604.
▲
by
yrro
5y ago
I have personal experience of this happening in lab environments. And there's no SSH exploit necessary. I'm not talking about a hacker from the internet, I'm talking about a malicious co-worker. The old permission model of &q
605.
▲
by
yrro
5y ago
As they say, change is the only constant. I won't say PolKit's implementation is the best ever. But it exists, and solves real problems, enough so that applications choose to use it and distros choose to ship it. One thing I can s
606.
▲
by
yrro
5y ago
sudo/suo/doas do not allow for flexible policy evaluation. They're also useless for GUI applications. For instance, GNOME Settings uses PolKit to ensure that remote control can only be turned on by an admin who makes the requ
607.
▲
by
yrro
5y ago
In case helpful for you or anyone else, you can find out whether polkit would allow a request for an action with pkcheck(1), for instance: "pkcheck --action-id org.freedesktop.RealtimeKit1.acquire-real-time --process $$" and check
608.
▲
by
yrro
5y ago
If you add your users to the 'audio' group then they can SSH into machines to eavesdrop. $ getfacl -p /dev/snd/pcmC0D0c # file: /dev/snd/pcmC0D0c # owner: root # group: audio use
609.
▲
by
yrro
5y ago
Nothing fake about it? That is one of the actions that RealtimeKit allows clients to request: $ pkaction --action-id org.freedesktop.RealtimeKit1.acquire-high-priority --verbose org.freedesktop.RealtimeKit1.acquire-high-priority:
610.
▲
by
yrro
5y ago
Groups are not granular enough. `pkaction` lists 315 different actions on the system where I just ran it. You'd need 315 groups to begin to reflect that level of granularity... Groups are also not dynamic enough. When evaluating these
611.
▲
by
yrro
5y ago
> Saint Lucia: 88,698 Deaths per million Wow. Next highest is Somalia (3,261 dpm)
612.
▲
by
yrro
5y ago
Relevant parts: > Nvidia Corp. is quietly preparing to abandon its purchase of Arm Ltd. from SoftBank Group Corp. after making little to no progress in winning approval for the $40 billion chip deal, according to people familiar with the
613.
▲
by
yrro
5y ago
That said... https://www.cablinginstall.com/sponsored/berk-tek/article/16... ... points out that 5GBASE-T needs 200 MHz channel bandwidth which is past what Cat 5e is specified for. So perhaps for runs approa
614.
▲
by
yrro
5y ago
2.5GBASE-T and 5GBASE-T are designed to work across 100 meters of Cat 5e. Nothing crappy about it! :)
615.
▲
by
yrro
5y ago
They aren't. They need _outbound_ access to TCP ports 80/443, and Sony are too cheap to hire people who actually know what they're talking about to write support articles.
616.
▲
by
yrro
5y ago
Maybe if the network administrator has disabled UPnP that is a hint that they don't want to allow random devices to expose themselves to the entire internet?!
617.
▲
by
yrro
5y ago
Or IA5SString if you know, ahead of time, that you only need ASCII.
618.
▲
by
yrro
5y ago
> disguising itself as a major nutrient Honey is a nutrient? I thought it was water + sugar?
619.
▲
by
yrro
5y ago
You can do this by mounting procfs with the hidepid= option. But it breaks systemd when enabled system-wide: https://github.com/systemd/systemd/issues/12955 Individual units can opt-in to this behaviour with
620.
▲
by
yrro
5y ago
Does the key still work?
621.
▲
by
yrro
5y ago
Ok I'll give it a go in good faith the next time I have a problem.
622.
▲
by
yrro
5y ago
"Windows ain't done 'till Chrome don't run (fast)"
623.
▲
by
yrro
5y ago
Filing an issue report? Against Windows? Are you joking?
624.
▲
by
yrro
5y ago
> Could we not move to a strategy where authors have to cryptographically sign packages with their own package-specific private key when publishing them? I'm sorry the NPM ecosystem doesn't do this already? Good god!
625.
▲
by
yrro
5y ago
> They even create a fake venv command that tells you to please install python-venv. ??? $ apt-file search /usr/bin/venv | wc -l 0 I do agree with you however that python3.9 should be moved into libpython3.9-stdlib, and h
626.
▲
by
yrro
5y ago
Ah, I missed the spec link and landed on the design documentation... So I will have to wait to see what form this configuration takes. Hang on a minute, this is suddenly sounding rather familiar--I'm suddenly reminded of the Internet c
627.
▲
by
yrro
5y ago
I guess this won't/can't protect web services on private networks that nonetheless.use public routable address space? What about IPv6, both public routable address space and ULA space?
628.
▲
by
yrro
5y ago
s/FDA/FAA/ darn TLAs
629.
▲
by
yrro
5y ago
I don't think services should be allowed to mislead their users in this way. If 'delete message' does not delete the message then it should not be labelled as such. The option should be labelled as 'Hide Message*' t
630.
▲
by
yrro
5y ago
inet_aton has other, weirder behaviour: https://disconnect3d.pl/2021/02/16/terrible-inet-aton/
More ›