temac · HackerTrans

temac

no profile record

comments

il y a 2 moisdiscuss

Weird take to claim "generally intelligent frontier" (whatever rhat means) and restrict availability based on "offensive" cyber security alone (how can this be handled at all compared to fixing software also remain to be seen) all while competitors but more importantly sw maintainers (eg curl) estimate that the capability in finding cybersecurity bugs is similar to what other modern models produce, and this has just significatively risen in the last months for everybody.

l’année dernièrediscuss

Is this an admission that you accept to implement complete garbage?

il y a 2 ansdiscuss

RT threads can be prempted by higher prio RT, and IIRC some kernel threads run at the highest prio. Plus you can be prempted by SMI, an hypervisor, etc

il y a 2 ansdiscuss

I dont know if the Python in Excel architecture as changed but last time i saw it, it was insane and unusable for me (data sent to MS servers where a linux container executes python: you need both a subscription and that the data in question not be regulated)

il y a 2 ansdiscuss

The USA spies all the time on everybody so by your own def they should be not really an ally of anybody.

il y a 2 ansdiscuss

I'm using OVH and the notion of it "just working" is all relative. It's tolerable, but certainly a bit buggy, and with far less services than aws and co. It is also cheap, but given the limitations I doubt they can increase the prices much...

il y a 2 ansdiscuss

The linux kernel already works perfectly fine with various base page sizes.

il y a 2 ansdiscuss

I've been trying to use auditing rules for a usage that seems completely in scope and obvious to prioritize from a security point of view (tracing access to EFS files and/or the keys allowing the access) and my conclusion was that you basically can't, the doc is garbage, the implementation is probably ad-hoc with lots of holes, and MS probably hasn't prioritised the maintenance of this feature since several decades (too busy adding ads in the start menu I guess)

The NT security descriptors are also so complex they are probably a little useless in practice too, because it's too hard to use correctly. On top of that the associated Win32 API is also too hard to use correctly to the point that I found an important bug in the usage model described in MSDN, meaning that the doc writer did not know how the function actually work (in tons of cases you probably don't hit this case, but if you start digging in all internal and external users, who knows what you could find...)

NT was full of good ideas but the execution is often quite poor.

il y a 2 ansdiscuss

Rust is possible and proves that you don’t need "optimizations" to optimize, but that optimizations are actually possible. Now that's kind of irrelevent for most of the article focusing about constant versus variable time which is not really an "optimization" problem but already an optimization one, but at least putting appart this rust proves that a langage doesn't need to allow nasal daemons to get good perfs. You just apply the technics when you actually know they are correct, not when you speculate the existence of the mythical perfect programmer (where this hypothesis has actually be disproven by studies on the subject)

il y a 2 ansdiscuss

Probably when writing "hate AI" here the meaning was hate the often useless text chat bot. Google Photo face recognition was there before the new hipe and is probably not designated talked by primarily as "AI" by the general public.

il y a 2 ansdiscuss

> that's one of the (inadequate) methods that the CA/BF permits for verification at issuance

Why inadequate (in the absolute)? This can be automated and let's encrypt allows verification through DNS, moreover this allows verification for wildcard certificates.

Now in this particular case maybe they should have gone through HTTP, and even automated with ACME. But there is nothing inadequate in the absolute in DNS verification. Besides allowing wildcard it also allows verification when you don't control the web server(s), when you don't even have a webserver at all, when the standard ports are occupied for something else, etc.

il y a 2 ansdiscuss

Something like ebpf.

il y a 2 ansdiscuss

"It blows my mind that a kernel driver with the level of proliferation in industry could make it out the door apparently without even the most basic level of qualification."

It was my understanding that MS now sign 3rd party kernel mode code, with quality requirements. In which case why did they fail to prevent this?

il y a 2 ansdiscuss

What is the value of writing all of that, compared to the simpler approach? What will you want next in your quest of purity? Forbidding inline styles in the name of security, maybe?

Disclaimer: I'm not found of web techs...

il y a 2 ansdiscuss

There was actually "SUA" after "SFU", only removed in Windows 8.1 and Windows Server 2012 R2.

il y a 2 ansdiscuss

It's funny how cancelled projects are somehow making people almost more "nostalgic" than projects that actually shipped. One of the reason may be that cancelled projects don't need to be completed, to ship with a reasonably good quality, to have an easy to use interface, to be sustainable for a long enough period of time, etc.

il y a 2 ansdiscuss

The C++ API bound forever to the gcc 2.95 ABI IIRC was also an "interesting" choice. Sure with success they would certainly have engineered a way forward, out of necessity, but if I would have had to give my opinion about that for Apple at the time...

il y a 2 ansdiscuss

Nt has a dynamic HAL layer to adapt it to platforms. I'm not sure if it was publicly documented, but in any case yes the source code leak don't harm that kind of port, even if you "just" have to write a HAL.

il y a 2 ansdiscuss

This article inverse the notion of free software and of copyleft...

il y a 2 ansdiscuss

And chose an architecture really interesting where everybody will recode an half-baked version of the work-in-progress protocol so each desktop-env/window-manager will have different compatibility characteristics; and where tons of actual implementation mix the graphic server with the desktop-env/window-manager so that crashes are extra fun.