Interesting take, but as a sibling commented: όχι. > αι = ε > αι already sounds identical to ε in Modern Greek, so the digraph is dropped. sounds the same, but the distinction actually helps semantically (helps identify…
I watched this in 2020 even though it's from EuroBSDCon 2019. I'm talking about Patricia Aas keynote "Embedded Ethics": https://www.youtube.com/watch?v=HfNIiitVFtc Hasn't aged one bit. If anything Patricia is spot on…
I worry about online voting not being transparent enough
One could implement a rudimentary IPv4 stack in a couple of afternoons. There is not much magic in parsing Ethernet / ARP / IPv4 / UDP. For IPv6, a node needs to speak ICMPv6/NDP/MLDv2 which are all orders of magnitude…
Another vote for inoreader. Used TheOldReader.com when Google killed Reader, then switched to inoreader. Haven't looked back (even though I'm using the free version still). edit: Adding that I find the android app to be…
But the content of shipping container #1 does not spill into shipping container #2. If it does, there's a problem. Similarly with software containers, you don't want data flowing into nearby containers (unless you do…
My guess is that the signaling servers are centralized. You need those for connection establishment between two peers. Once they 'know' each other, they may aswell talk to each other directly. Routing all calls through…
In OpenBSD, "base builds base". That is to say, one must be able to build the system using the compiler provided in the compXX.tgz set. gcc moved to GPLv3 and OpenBSD doesn't ship GPLv3 code. For a long time, that's the…
I'd recommend any Python talk by Raymond Hettinger (Python core developer). The content is top notch, and he is also very good at delivering it.
As pointed out by JdeBP, I confused RemainAfterExit= with KillUserProcess=. RemainAfterExit is an option indicating how systemd should process a unit file, while KillUserProcess is for systemd itself. It's nice to know…
yes, indeed. Too late to edit now though :(
Does anyone have resources related to learning concurrency ? I've had a very short introduction to pthreads in a CS class, but it was too succinct to get any practical benefit IMO. Knowing that a mutex can be used to…
I have followed eBPF development from afar, so I don't exactly where it's at. I have a ... semantics question: do people really refer to eBPF as BPF ? This is probably bothering me more than it should, but why do…
Not going to use yGuard anywhere, but thanks for opensourcing it. On the other hand, I stumbled upon yEd some time ago and it has been my go-to tool for diagrams ever since. Thanks to all the folks at yWorks that work…
EuroBSDcon 2019 Keynote by Patricia Aas: Embedded Ethics (https://www.youtube.com/watch?v=HfNIiitVFtc / slides: https://www.slideshare.net/PatriciaAas/embedded-ethics-eurob...) Because, sometimes you need to worry less…
Alright, so that would mean that it's not WireGuard that's broken because it's trying to be more picky about the RNG, but rather the Linux CSPRNG that's broken when RDRAND is misbehaving. As you said, worrisome.
I'm surprised WireGuard asks RDRAND directly. Isn't there a facility inside the Linux to get random numbers ? OpenBSD conveniently provides arc4random() in its libc for applications to use, and the same function is…
No argument there. My point is that the default for FreeBSD jails is "isolate everything" and it's up to the user to open it up. My post was in response to 'sayhello' that is wondering whether jails provide enough…
The BSD jails / Solaris zones approach is not the same at the path taken by Linux. Linux gives you a facility to isolate network, a facility to isolate process views etc. You put them all together and you get a…
Doubt it had anything to do with ministers. They probably have 'work' phones, and these are paid by 'work'. In other words, citizen's tax euros ...
I am by not means qualified to judge on the quality of the patch, but I'm glad Linus is moving away from adding flags to getrandom() (resulting in subtly different behaviour than the Open/FreeBSD implementations). Now…
Thanks. I was staring at the snippet wondering. I'm not all that familiar with YAML, so I thought perhaps all the values needed to be quoted rather that just written as is.
Upstreaming means the 'cost of maintainance' is shared. If you have out of tree patches, and upstream changes the API, either you have to update your patches or you have to keep running an older version. Possibly…
Shipping the required network settings alongside makes sense. i.e.: a smtp mailer declares it needs to access tcp/25. How does one get a global view though ? What am I allowing on this host and more importantly, how do…
This is the same kind of reply I got when systemd implemented IP accouting in unit files. Lennart said systemd gets a lot of flak, but in the end it's only implementing kernel features. I proceeded to ask him: why is it…
Interesting take, but as a sibling commented: όχι. > αι = ε > αι already sounds identical to ε in Modern Greek, so the digraph is dropped. sounds the same, but the distinction actually helps semantically (helps identify…
I watched this in 2020 even though it's from EuroBSDCon 2019. I'm talking about Patricia Aas keynote "Embedded Ethics": https://www.youtube.com/watch?v=HfNIiitVFtc Hasn't aged one bit. If anything Patricia is spot on…
I worry about online voting not being transparent enough
One could implement a rudimentary IPv4 stack in a couple of afternoons. There is not much magic in parsing Ethernet / ARP / IPv4 / UDP. For IPv6, a node needs to speak ICMPv6/NDP/MLDv2 which are all orders of magnitude…
Another vote for inoreader. Used TheOldReader.com when Google killed Reader, then switched to inoreader. Haven't looked back (even though I'm using the free version still). edit: Adding that I find the android app to be…
But the content of shipping container #1 does not spill into shipping container #2. If it does, there's a problem. Similarly with software containers, you don't want data flowing into nearby containers (unless you do…
My guess is that the signaling servers are centralized. You need those for connection establishment between two peers. Once they 'know' each other, they may aswell talk to each other directly. Routing all calls through…
In OpenBSD, "base builds base". That is to say, one must be able to build the system using the compiler provided in the compXX.tgz set. gcc moved to GPLv3 and OpenBSD doesn't ship GPLv3 code. For a long time, that's the…
I'd recommend any Python talk by Raymond Hettinger (Python core developer). The content is top notch, and he is also very good at delivering it.
As pointed out by JdeBP, I confused RemainAfterExit= with KillUserProcess=. RemainAfterExit is an option indicating how systemd should process a unit file, while KillUserProcess is for systemd itself. It's nice to know…
yes, indeed. Too late to edit now though :(
Does anyone have resources related to learning concurrency ? I've had a very short introduction to pthreads in a CS class, but it was too succinct to get any practical benefit IMO. Knowing that a mutex can be used to…
I have followed eBPF development from afar, so I don't exactly where it's at. I have a ... semantics question: do people really refer to eBPF as BPF ? This is probably bothering me more than it should, but why do…
Not going to use yGuard anywhere, but thanks for opensourcing it. On the other hand, I stumbled upon yEd some time ago and it has been my go-to tool for diagrams ever since. Thanks to all the folks at yWorks that work…
EuroBSDcon 2019 Keynote by Patricia Aas: Embedded Ethics (https://www.youtube.com/watch?v=HfNIiitVFtc / slides: https://www.slideshare.net/PatriciaAas/embedded-ethics-eurob...) Because, sometimes you need to worry less…
Alright, so that would mean that it's not WireGuard that's broken because it's trying to be more picky about the RNG, but rather the Linux CSPRNG that's broken when RDRAND is misbehaving. As you said, worrisome.
I'm surprised WireGuard asks RDRAND directly. Isn't there a facility inside the Linux to get random numbers ? OpenBSD conveniently provides arc4random() in its libc for applications to use, and the same function is…
No argument there. My point is that the default for FreeBSD jails is "isolate everything" and it's up to the user to open it up. My post was in response to 'sayhello' that is wondering whether jails provide enough…
The BSD jails / Solaris zones approach is not the same at the path taken by Linux. Linux gives you a facility to isolate network, a facility to isolate process views etc. You put them all together and you get a…
Doubt it had anything to do with ministers. They probably have 'work' phones, and these are paid by 'work'. In other words, citizen's tax euros ...
I am by not means qualified to judge on the quality of the patch, but I'm glad Linus is moving away from adding flags to getrandom() (resulting in subtly different behaviour than the Open/FreeBSD implementations). Now…
Thanks. I was staring at the snippet wondering. I'm not all that familiar with YAML, so I thought perhaps all the values needed to be quoted rather that just written as is.
Upstreaming means the 'cost of maintainance' is shared. If you have out of tree patches, and upstream changes the API, either you have to update your patches or you have to keep running an older version. Possibly…
Shipping the required network settings alongside makes sense. i.e.: a smtp mailer declares it needs to access tcp/25. How does one get a global view though ? What am I allowing on this host and more importantly, how do…
This is the same kind of reply I got when systemd implemented IP accouting in unit files. Lennart said systemd gets a lot of flak, but in the end it's only implementing kernel features. I proceeded to ask him: why is it…