codedokode

8 ms·

271.
by codedokode 3mo ago
How do you sandbox /proc by the way? So that the app doesn't crash due to missing /proc/self/exe link or /proc/ID/stat file, but cannot read my private information (like /proc/cmdline, &#x2F
272.
by codedokode 3mo ago
The point is, for many use cases you need to install third-party software, including closed-source software, and I want an OS to be able to run it safely. That's the purpose of OS - allow running software. In reality, third-party softw
273.
by codedokode 3mo ago
In Linux there is no vetting. Does anyone verify proprietary AI agents like Claude Code? Software like VS Code? Games? They are distributed through random sites and cannot even be banned. You could restrict yourself to the official reposit
274.
by codedokode 3mo ago
I thought about VM but it would be pretty expensive and require lot of RAM (which is not cheap nowadays and not always upgradeable on laptops. How would you upgrade your 8 Gb MacBook?) and CPU overhead to emulate the hardware and run one mo
275.
by codedokode 3mo ago
I did not suggest that; what I suggested was that the programs should run in sandboxes.
276.
by codedokode 3mo ago
This highlights the problem with legacy desktop OSes like Windows, Linux and MacOS: they allow a random program from Internet to get full access to the computer. Windows and Mac display a warning that the program might be malicious, but how
277.
by codedokode 3mo ago
> Why do they delete a commit and push a new one every few hours? Maybe they want to get into "trending" section, or to have higher position in search results (maybe Github or Google prioritizes repositories updated recently)?
278.
by codedokode 3mo ago
The pagination is not always done with page numbers, sometimes there are "next" and "previous" tokens.
279.
by codedokode 3mo ago
When adding new HTTP methods, they should have included protection against cross-domain requests into the method, i.e. the server should not response to QUERY requests from another domain by default and the browser should not include cookie
280.
by codedokode 3mo ago
I always wondered why US cannot pressure India to crack down on those scammers? They use phone network, it should not be difficult to find them. Some youtubers even hack into their computers and extract all the info. US probably has a lever
281.
by codedokode 3mo ago
Why not limit LLM access only to citizens? Do you want people in North Korea to use your LLM to automate their hacking?
282.
by codedokode 3mo ago
To be fair, C is a pain to use, so it is better to improve Rust. It is annoying when for example, you have to free several allocated structures when there is an error in the middle of a functon.
283.
by codedokode 3mo ago
Nobody is going to write "checked_add" because that's too long and people are too lazy. The checked addition should be "+" operator.
284.
by codedokode 3mo ago
In case with coreutils, as I remember, there were mostly race conditions. Not memory safety issues. Maybe we just need better I/O libraries.
285.
by codedokode 3mo ago
> DFVULN-123 (Integer Overflow): In the RTP LATM depacketizer (rtpdec_latm.c), latm_parse_packet() performs a signed 32-bit addition that overflows and bypasses its bounds check Again there is another vulnerability caused by unchecked ad
286.
by codedokode 3mo ago
If there are so many vulnerabilities, should not they change approach to development, for example, use memory-safe languages, static analysis, do not use dubious "hacks" that break it?
287.
by codedokode 3mo ago
The LLM use should be restricted and not accessible to anyone because there are many hostile people around. Do you want North Korea to use American LLM to write malware? Do you want foreign scammers to automate their scams with LLMs? Do you
288.
by codedokode 3mo ago
"damaged" by not paying 99 bucks.
289.
by codedokode 3mo ago
This is why you should never consent to DNA collection because they will just keep it and sell it later without paying you a cent.
290.
by codedokode 3mo ago
The future is with gene editing to fix invalid genetic code. However, the owners of good genes probably won't give them away for free so it would be available only to the riches.
291.
by codedokode 3mo ago
This is unrelated to spam calls. Business will register thousands of phone numbers for "surveys" and will continue spamming with AI calls.
292.
by codedokode 3mo ago
They can also use VoIP. So just banning calls from abroad is not enough, you need to better regulate VoIP services.
293.
by codedokode 3mo ago
Foreigners must provide their biometric data to buy a local SIM card. They better just use a tourist SIM card.
294.
by codedokode 3mo ago
In Russia you need an ID to buy a phone number, and almost every site or app requires it to sign up. As a nice bonus, you or any scammer can buy personal data on everyone for cheap in Telegram bots, because everytime there is a PII leak, th
295.
by codedokode 3mo ago
It is obvious that they edited the images to make blobs look shorter vertically. And in some cases, simply copy-pasted non-existing blobs.
296.
by codedokode 3mo ago
I disagree. If you look at the photos the painting used to make black blobs shorter. As I understand, black blob vertical position is the weight of a molecule, and they want to hide the fact that there are heavier or lighter molecules. So o
297.
by codedokode 3mo ago
The problem with replacing exec/fork is that you usually want to configure new process: for example, set up signal handlers, close or open FDs, switch namespaces, setup seccomp, adjust permissions. And all the system calls to do it ap
298.
by codedokode 4mo ago
USB modem, MIDI controllers, USB thumbdrives, external sound card.
299.
by codedokode 4mo ago
Yes but monitor is not free, and you cannot travel (to the couch) with it.
300.
by codedokode 4mo ago
To be fair, USA also could not defend their allies and their bases, and didn't move the frontline in Iran as well. And if Iran buys a submarine capable to launch missiles from a friendly country the situation might get worse.

More ›