bdash

5 ms·

1.
by bdash 7mo ago
It is a little more direct than that even. The application's entitlements are passed into the interpretation of the sandbox profile. It is the sandbox profile itself that determines which policies should be applied in the resulting com
2.
by bdash 7mo ago
App Sandbox is fundamentally a way for programs to use the underlying sandbox subsystem without having to write SBPL code themselves. When a program has opted into the App Sandbox, the system applies one of these sandbox policies automatica
3.
by bdash 7mo ago
See https://bdash.net.nz/posts/sandboxing-on-macos/ for more details on how sandboxing works on macOS. It touches on how the SBPL Scheme source code is interpreted in userspace to build a bytcode representation of
4.
by bdash 8mo ago
There are SME / SME2 instructions that use the ZA tiles as vector registers / vector groups. These can take advantage of the higher throughput of the SME processing grid vs SSVE instructions that operate on Z registers. See the `F
5.
by bdash 8mo ago
Intel's software optimization guides have similar annotations on many of their guidelines, and have done since long before LLMs were a thing. As a reader it's useful to know how impactful a given recommendation is and how generall
6.
by bdash 8mo ago
SSVE instructions are executed by the SME engine, which trades latency for throughput. SSVE is really intended to support use of SME, rather than as a replacement for Advanced SIMD on the CPU core itself. The Apple Silicon CPU Optimization
7.
Spinning around: Please don’t – Common problems with spin locks(siliceum.com)
158 points by bdash 8mo ago|63 comments
8.
by bdash 1y ago
Strangely the WindowServer issue is a constant issue on my personal MacBook Pro, but I've never seen it on my identical work MacBook Pro. It seems like there's some other factor that is necessary to trigger the problem.
9.
by bdash 1y ago
I'd sorta hope they are testing widely-used applications in the way that typical end users will experience them before releasing a new OS version.
10.
by bdash 1y ago
This affects some of the most widely used applications on the platform, including "productivity" applications such as Slack that Apple uses internally. How did no-one at Apple notice this and do something about it prior to macOS 2
11.
by bdash 1y ago
I've had success using https://github.com/nico/ninjatracing along with Clang's `-ftime-trace` to visualize the build performance of a C++ project using CMake. https://github.com/aras-p/Cl
12.
by bdash 1y ago
It mostly seems to be deprecated to encourage developers to use App Sandbox rather than doing custom sandboxing things. With custom sandboxing baking implementation details of system frameworks into the sandbox policy is almost unavoidable,
13.
by bdash 1y ago
What's most amusing is that in the most recent blog post ( https://eclecticlight.co/2025/04/30/why-some-apps-sometimes-... ), the handful of log statements that serve as the source of the claim in fact con
14.
by bdash 1y ago
Doctor Bandit Heeler is an archeologist. https://www.youtube.com/watch?v=Uiv_V7QOy3A
15.
Doom II running on an Avengers Infinity Quest pinball machine [video](youtube.com)
2 points by bdash 2y ago|0 comments
16.
by bdash 2y ago
The code snippets are purely declarative because they are reconstructed from the simple bytecode that the macOS sandbox library generates after evaluating the Scheme code. At that point any abstractions present in the source code are long g
17.
by bdash 2y ago
It still compiles the rules down to a very basic bytecode: https://bdash.net.nz/posts/sandboxing-on-macos/#sandbox-poli...
18.
by bdash 2y ago
Passkeys are a different story than the keychain more generally. Other browsers that work with passkeys via the system APIs had to jump through hoops and get Apple's approval to do so: https://developer.apple.com/docume
19.
by bdash 2y ago
When I first run locally-built software I tend to notice XProtect scanning each binary when it is launched. I know that XProtect matches the executable against a pre-downloaded list of malware signatures rather than sending data to the inte
20.
by bdash 2y ago
I suspect they're referring to changes to Gatekeeper in recent macOS versions: https://arstechnica.com/gadgets/2024/08/macos-15-sequoia-mak... It used to be that you could run any third-party application
21.
by bdash 2y ago
https://security.googleblog.com/2024/07/improving-security-o... talks a little about improvements Chrome has made on Windows to make it harder for malicious software to access the encryption key used to encrypt co
22.
by bdash 2y ago
Each keychain item on macOS has an access control list associated with it that lists the applications that are granted access to the keychain item. If an application not on the ACL attempts to access a keychain item, macOS prompts the user
23.
by bdash 2y ago
As someone with a good understanding of the technologies involved I came away rather confused by the article. There are a few things that are obviously incorrect, and others that don't make much sense. Some of them could be perhaps be
24.
by bdash 3y ago
To get that game for $500 I think the owners would need to be at a point where they're sick of it and just want it gone. A couple of thoughts: 1. Games on location are often not owned by the location, but instead owned by a third-party
25.
by bdash 3y ago
I'm not really making any money doing it. I learn a lot and enjoy the process. As an example, I picked up a 1978 Bally Strikes and Spares machine from Marketplace. It'd sat in the owners garage unplayed for 10 years and no longer
26.
by bdash 3y ago
I've bought non-working pinball machines from Facebook Marketplace or Craigslist for great prices and brought them back to life. They cover a range of the pinball spectrum from electromechanical games from the 1970s through 1990s games
27.
by bdash 3y ago
That's how mine started getting out of control. I had one non-working machine that I rescued from a family friend's barn. My wife decided we should get a newer, working one so we would have something to play while I kept working o
28.
by bdash 3y ago
They’re heavy, awkward to move, and take up a lot of floor space. They’re loud and require ongoing maintenance. They’re also a lot of fun! I really enjoy both playing and working on mine.
29.
by bdash 3y ago
They collect a lot of information, but make very little of it available. What is available isn't exposed in a particularly friendly way. Some of the extra data they gathered makes it into the Year in Review stats they make available at
30.
by bdash 3y ago
Folks in the industry bought licenses, tooling, and parts for games from manufacturers that shut down. Others were reverse-engineered after the fact. Between https://www.pbresource.com , https://www.pinballlife.com ,

More ›