PhilipRoman

I think the only significant mistake was having both prefix and postfix operators for types. If they all neatly sat on one side there would be no problem.

There seems to be a severe lack of hash pinning in "modern" software ecosystems. We figured out how to do it 20+ years ago with Git bringing hash addressed storage to the masses. Coming from a different background it was very surprising for me to see things like docker images, packages and github actions being updated at the whim of upstream registry. I much prefer the philosophy where builds are fully offline and predictable, even if not fully reproducible.

Probably something on your end, it is using a normal letsencrypt cert

I expected this to be a font which shuffles characters and glyphs (requiring more effort to type it) resulting in nonsensical text but visually readable page.

Yeah I have some devices that expect the manufacturer charger (I guess it's pre-negotiated to 19V or something) and I'm not even sure what was the point in giving it a USB C connector.

Does the server also handle TLS internally, or is it behind a proxy? For comparison, statically linked darkhttpd is around 138K

This is true but I can do the same on free ChatGPT without even logging in. I wouldn't pay $5 a month for that functionality, much less $20 (or >$1000 to be able to run it at home).

SOTA AI for "serious" work is in a different position, used by fewer people but with big pockets and sometimes a pathological dependence on it.

If you're already losing and losses are capped past some point (worst case just kill yourself), high stakes gambling is quite logical. Of course in reality, gamblers are rarely driven by game-theoretical analysis.

When we talk about "E2EE" messenger apps, that usually means more than just using HTTPS. VPNs can certainly help with encryption in transit, but that's a very different concept.

Unfortunately this comes up a lot, with people asking if Immich supports end-to-end encryption and getting told to use LUKS or Tailscale.

How are VPNs related to end-to-end encryption?

Hah, someone from UK seems to have a camera pointing to his cannabis plants... Hopefully the guy has a "loicense" for that, otherwise it would be a hilarious way to get busted

Isn't consulting one of the most high-margin areas in general?

Right up there with fun, safe math optimizations

I believe 32-bit was chosen partially due to implementation efficiency reasons. It makes sense because you can allocate a 4GB mapping, so there is no need for a second software virtual memory layer. Also perhaps they internally require tagged pointers, which are much cheaper, especially if aligned, if the pointer is only 32 bits

For a moment I thought this was another case of AI psychosis, like the post from week ago about the "content-addressed lattice heap" but this is actually pretty neat.

Ironically news outlets like to use the phrasing you rightfully point out as absurd. Not sure if they just do it randomly or only when they get orders to push a certain narrative.

>Car plows into Christmas market in Germany, killing at least 5 and injuring 200

Don't most companies have a Git repo for skills that you can pull?

Because it costs money? Believe it or not, most places don't pay you 6 digit salaries for shuffling around YAML.

It is a fantastic init system/service supervisor. My problem with it is basically everything else. I think its developers see systemd as central to the entire system, basically the userspace counterpart to the kernel. I prefer the approach of 'dinit', but I understand why they designed it that way.

Due to this design they often have underspecified interaction between the different components, since the assumption is that everyone will use largely the same baseline systemd environment and as long as it works, who cares what it does underneath. If the different parts were more independent, they would be forced to develop a cleaner API contract between them.

SDL is a relatively high level API and framebuffer style graphics work fine on it. I think there are some edge cases for X11 with non-compositing window manager where you will get interesting glitches if the window moves.

Yes, only... 25m? You must have a bigger room than I do :)

I'd agree if POSIX provided something like an open() flag which made the changes visible atomically, but as it stands, the rename() idiom is the mainstream way of durable file writing, so it is commonly used. Practical example using busybox sed: (GNU sed detects this case and refuses to overwrite)

  / # stat /dev/null
    File: /dev/null
    Size: 0          Blocks: 0          IO Block: 4096   character special file
    ...
  / # sed -i 's/foo/bar/' /dev/null
  / # stat /dev/null
    File: /dev/null
    Size: 0          Blocks: 0          IO Block: 4096   regular empty file
    ...

Hard links suffer from the general issue of there being two styles of writing to a file - open(2)/write(2) vs rename(2). Depending on the internals of each program you use to update the file, you will get very different results.

This is one of the ugliest parts of POSIX design, making idioms like -o /dev/null and file attributes unpredictable (I've had a server run out of disk space because a root-owned process used rename-style writing on /dev/null)

If you use the VPN for the Web, browser fingerprinting is a major threat outside of specialized scenarios

If you blindly TOFU ssh sessions, those can be pwned easily in many common use cases. Legacy software configurations like NFS with IP authentication will be bypassed. Realistically the most likely scenario is using your home as a VPN, or a DDOS node.

It also sets a HN=1 cookie, so you may need to clear that or use incognito

AFAIK Lambda and everything else will use micro-VMs. No serious company would use a shared kernel design for workloads in different security contexts. (Personally I wouldn't even use the same hardware host, but sometimes sacrifices have to be made)

And how many of those actions do uncached downloads instead of building self-contained offline images... Speaking of which, I wonder if GitHub has implemented any HTTP interception for common mirror sites, like used by apt, etc.

If you have /proc available, you don't even need to disable ASLR (all mappings are available to you)

>You can't restrict management to specific vlans

This bit me as well, FYI Zyxel switches seem to be among the few that do this properly, even on cheapest models. On the other hand their web interface cannot be used over SSH or other tunnels... The software side of network equipment is in a sad state, no wonder the hyperscalers moved to whitebox switches