zobzu

37 ms·

511.
by zobzu 11y ago
I just tried it. it is fast. its a VM really, but packaged like a container. On my laptop, it starts about as fast as a Docker container, ie less than a second. This is quite impressive.
512.
by zobzu 11y ago
[...] since the whole userland that you need is included in the binary (worth noting) you just dont get the debugging stuff (which is okay as long as you can choose)
513.
by zobzu 11y ago
thats a pretty good comment actually. there's quite a bit of similarity. we generally tend to jump into these as "omg awesome new tech" with a very narrow view. But it also helps boosting more though-out techs (even thus it f
514.
by zobzu 11y ago
The issue with this is that gpg doesnt check these keys when you sign them (presumably because speed) So even if you verify the persons identity correctly when you sign their key you can't tell if the key is garbage easily. In fact i g
515.
by zobzu 11y ago
Pocket is basically integrating a third party service in the user's default bar (you can remove it in customize) It feels like its there for commercial purposes... Has mozilla lost its user centric values though? Theres enough ads and
516.
by zobzu 11y ago
It doesnt matter. Cars always think they can push the bike away on the right side of the street if they arent fast enough to return. Happens all the time. And indeed the bike will move (or.crash/die so the bike always moves)
517.
by zobzu 11y ago
the major issue with security by obscurity is ignorance. a very well secured secret that is also not talked about will be very safe. a poorly secured secret that is also not talked about will not be very safe, and you probably wont even kno
518.
by zobzu 11y ago
I think we'd just say something else is too inconvenient and that nobody cares (which is sort of true). I can pick all the locks of my appartment in under a minute.. but im not worried. The postman leaves packages in the lobby behind t
519.
by zobzu 11y ago
seems like the perfect setup du jour, should probably document it :)
520.
by zobzu 11y ago
For similar systems (ie small but doing good manual classification when all else fails) I suspect that if more used razor (or again, similiar) we'd achieve better results (razor allows for sharing this data automatically)
521.
by zobzu 11y ago
"We certainly haven't seen much "INSTALL PATCHES NOW" fear mongering. And we really need it, so I'm hoping this posting will start a panic." Yeah well its a DOS triggered by pretty particular conditions. While
522.
by zobzu 11y ago
Tldr google no longer use vpns for corp access
523.
by zobzu 11y ago
I bet you're one of these only testing on chrome nowadays...
524.
by zobzu 11y ago
https://github.com/polegone/gonix/blob/master/cp.go I think it needs some work for actual parity =)
525.
by zobzu 11y ago
2) is a pretty good point actually, maybe slack could integrate that in their backend - basically if the irc client is set as away do not mark read. if not or returns from away, make all buffers read. Not too hard and would be quite conveni
526.
by zobzu 11y ago
As a non-prosummer, 1To seems plenty (i use <3G on Google photo backup), auto-album could be nice (since I can never be bothered...) Basically, I'm the target, I guess you're not. I guess I Should give it a try. Google+'s
527.
by zobzu 11y ago
Not really- chroot provides no isolation, namespaces do. choot is the visible portion (changes root.. ie changes /mnt/blah/bleh to /) but not "the foundation" Things can in fact work isolated without chroot, t
528.
by zobzu 11y ago
Tldr its stronger than kevlar they say Cool!
529.
by zobzu 11y ago
It's hard to judge and yes it's of course a PR piece. That said there's an interesting part to it. Where it applies, I'd welcome computer based decision or control (for ex. surgical operations where precision is a must)
530.
by zobzu 11y ago
Yeah exactly Microsoft's point I think. I'm not sure if its the best trade off right now, but it certainly makes sense. It might help bridging the current solutions, hopefully (even thus that will perhaps take 10 years)
531.
by zobzu 11y ago
Actually, I meant booting! Had to look for it in the HN history, look at this guy's implementation: https://www.youtube.com/watch?v=6SxLvz6pcGs ~30ms here, the post indicates some kind of intel NUC (so not exactly the
532.
by zobzu 11y ago
If you read the first 3 sentences, 2 are technically completely wrong and the third is a deliberately fake data. That's called FUD. I'm all for the positive attitude stuff - unless the presentations start like that, I then have no
533.
by zobzu 11y ago
Them registration links :(
534.
by zobzu 11y ago
Unikernels are cool to play with. Erlang is cool too. But... - [name] is a kernel thread not a user space process. - its libssl, not "libopenss" - installing rpc, some obscure 55k listening port, and calling it bloated.. heh so ch
535.
by zobzu 11y ago
Funny since it "highly recommends chrome only" on the page (seems to work perfectly fine in firefox tho..)
536.
by zobzu 11y ago
A lot of laptops allow for various trickle charging modes. Generally they stay charged between 90 and 100% (charges to 100 then wait until 90), some allow for charging to 80. In my experience there can be memory effects when fully capping
537.
by zobzu 11y ago
the internal server is always made of servers and clients just like the external one. if you compromise one server you have access to the data transiting there, but not the others if you compromise one client you have access to the data thi
538.
by zobzu 12y ago
that looks nice i hope the separation between processes themselves will be nicer than firefox (or even chrome) since its "from scratch" :) (ie that it wont be remoting everything and only protect the system from escaping a child -
539.
by zobzu 12y ago
how do you handle component sandboxing in Servo compared to firefox e10s? (firefox being child process sandbox, ipc to parent, and things being a little "unperfect" in the separation)
540.
by zobzu 12y ago
I compiled and tried servo+servo-shell just now: - it compiles very fast, that's cool - it doesn't render my static pages properly, albeit its not too bad - its slow as hell (i did use --release for build and run) :)

More ›