MatejKafka

8 ms·

1.
by MatejKafka 8d ago
It does provide a pretty good COM interface.
2.
by MatejKafka 2mo ago
It's not really important whether the text is visible, you can just put the instructions in the middle of a long document, or use a low contrast color, or a small font size, or any other of the myriad of ways to make text hard to read.
3.
by MatejKafka 2mo ago
> By the way, if you don't want a culture war, you gotta stop warring. I find it hard to understand how could steveklabnik's comment be seen as warring.
4.
by MatejKafka 2mo ago
I haven't seen data that would confirm that the Nim ARC/ORC approach is faster than manual memory management (C/Rust/Zig/...) on programs with non-trivial lifetimes (for trivial lifetimes, Nim elides RC). I'd a
5.
by MatejKafka 2mo ago
From HN guidelines: > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
6.
by MatejKafka 2mo ago
I agree that culture makes a difference, but the largest aspect of it is that the average Linux user is fairly technically proficient and would be fairly unlikely to install malware even on Windows. As for software installation, that is tru
7.
by MatejKafka 2mo ago
To answer in a more constructive way: No mainstream desktop OS tries very hard to sandbox drivers. Some drivers on both Windows and Linux (not very familiar with Mac) can be implemented as userspace drivers, as long as the performance hit i
8.
by MatejKafka 2mo ago
I expect that process to be mostly automated, I wouldn't expect the MS folks at the testing lab to do much (if any) manual testing, especially for a new version of a previously approved driver. I'm not surprised that the driver go
9.
by MatejKafka 2mo ago
Yes, and it's still fairly easy.
10.
by MatejKafka 2mo ago
Agents work well on Windows for sysadmin stuff - PowerShell gives them an easy way to interact with Registry, event log, WMI and other facilities in a structured way.
11.
by MatejKafka 2mo ago
Use Pro, Home is needlessly limiting for a power user.
12.
by MatejKafka 2mo ago
Read sibling comments to get answers to all your (non)questions.
13.
by MatejKafka 2mo ago
Except there's plenty of proprietary software for linux, you just won't find it in default repos and have to install it manually.
14.
by MatejKafka 2mo ago
Agree with all of those points and there are some partial solutions (IOMMU, userspace drivers, virtualization,...), but we're still quite far from being able to safely connect untrusted hardware and load its driver without effectively
15.
by MatejKafka 2mo ago
Yes, but unless all 3rd party drivers can run in userspace (which is not really feasible), Microsoft needs to give vendors the option to install a kernel driver, at which point a vendor can always decide to ship a kernel driver and bypass a
16.
by MatejKafka 2mo ago
You know why desktop Linux doesn't have much malware? Because ~no one uses it. That's it. Once you get users, you get malware. The rest of your comment is just as ignorant.
17.
by MatejKafka 2mo ago
> Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem. Not really. AutoRun ran whatever was on the USB drive, with no oversight. This installs a driver from a c
18.
by MatejKafka 2mo ago
How it it a Windows issue that driver developers pack garbage with their drivers? If Linux supported loading 3rd party drivers (it mostly doesn't, and if Windows did that, the whole internet would be up in arms about Microsoft locking
19.
by MatejKafka 2mo ago
You can "spoof" any system where you can load older drivers into giving you admin/root, you just need to find a vulnerable driver. Nothing Windows-specific in that.
20.
by MatejKafka 2mo ago
How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)
21.
by MatejKafka 3mo ago
How do you expect Mozilla to make enough money from just Firefox to survive if Google ever decides to stop paying them for being the default search engine?
22.
by MatejKafka 4mo ago
It is absolutely great at binary analysis, as long as you give it a decompiler.
23.
by MatejKafka 5mo ago
No, don't. There are many reasons why a user may want to move the temp dir somewhere.
24.
by MatejKafka 5mo ago
It could very well be an actual reachable buffer overflow, but with KASLR, canaries, CET and other security measures, it's hard to exploit it in a way that doesn't immediately crash the system.
25.
by MatejKafka 7mo ago
Personally, I just move SSH to a random high port on each of my public servers. Works like magic, no more log noise.
26.
by MatejKafka 7mo ago
https://simonwillison.net/ is a pretty loud and moderate voice in the community. Also active on Lobste.rs: https://lobste.rs/~simonw But agree that there's an irrational level of tribalism on both side
27.
by MatejKafka 7mo ago
I don't think it's about trying to handwave away the achievement. The problem is that many AI proponents, and especially companies producing the LLM tools constantly overstate the wins while downplaying the issues, and that leads
28.
by MatejKafka 7mo ago
Lobste.rs mostly are what HN used to be, with less focus on startup culture and more focus on hacking.
29.
by MatejKafka 7mo ago
Microsoft tried with UWP. Developers mostly refused, for various reasons.
30.
by MatejKafka 7mo ago
> Microsoft doesn't have a very good track record with security or privacy. That's a very unfair assessment. In many areas, Microsoft services and Windows are better protected than most alternatives (e.g., disk encryption, virt

More ›