cyphar

5 ms·

1.
by cyphar 5d ago
If the need is driven by a bubble economy, when the bubble pops the demand disappears too. This can even lead to a separate bubble popping (see: the dotcom and telecom bubbles). Yes, datacentres can be reused for other purposes but dark fib
2.
by cyphar 8d ago
If your site is static you can host it on CF pages for free with unlimited* egress. * of course it's not unlimited unlimited but I've not heard of anyone being cut off.
3.
by cyphar 10d ago
Not to mention it is the least efficient representation of git commits. It seems a lot of people are unaware that git generates the diff representation you see with "git show" on the fly -- internally, commits are Merkle trees rep
4.
by cyphar 16d ago
As a kid, I didn't have a computer that could run WoW, nor would I have been able to convince my parents to pay for the subscription. I suspect most of the popularity was from kids in a similar situation, probably playing it on library
5.
by cyphar 16d ago
You're quite right that the rules are clear and native speakers get them correct almost all of the time (I've not seen one get it wrong while speaking but some people were taught it as a spelling rule at school and so tend to writ
6.
by cyphar 16d ago
My understanding of shibboleth is that it refers to the primary pronunciation identifying the speaker (which is how it was used biblically). Those are also interesting but it feels a bit more special to me when it's a secondary speech
7.
by cyphar 17d ago
And are British, at least in Australia (and the US, I guess?) we pronounce the second "i". It is always fun when you notice where someone is from based on secondary clues like that -- my favourite is the choice of "a" or
8.
by cyphar 1mo ago
> It's unfair when you do the best you can and suddenly you have to talk to lawyers. Well, PBS didn't do the best they could. Aside from the whole "one backup is no backup" problem, they should've immediately m
9.
by cyphar 1mo ago
Iron Mountain probably only knows what data was owned by Open Source Storage, but not on the level of which data belongs to which Open Source Storage customer. If so, it would be incredibly reckless for Iron Mountain to provide all of the d
10.
by cyphar 1mo ago
I find it quite amusing what they seem to consider "degraded performance" to mean -- I guess if you really squint, your service not working at all is actually just very large latency spikes (until the service recovers) and thus ca
11.
by cyphar 1mo ago
I find 鸚哥（いんこ） to be the easiest way to type the right hand side of 彁.
12.
by cyphar 1mo ago
You're talking about limited liability companies, which is a legal structure relevant for civil claims. Someone committing crimes "on behalf" of a company is not protected by the corporate veil and absolutely will get prosecu
13.
by cyphar 2mo ago
You can make it complete, it just won't be consistent. In fact there is a simple way to do it -- add contradictory axioms and then you can use the principle of explosion to prove any statement as true. Is such a system inconsistent and
14.
by cyphar 2mo ago
Not really, Go already disallows import loops so even if Go did have exportable traits the compilation flow would be the same. But traits wouldn't really make sense for Go -- my point was that there is are solutions for this problem in
15.
by cyphar 2mo ago
Don't Godel's incompleteness theorems mean that completeness is a property you don't want in a prover (as it means the prover must then be inconsistent and this unsuable) and consistency is a property of the prover you cannot
16.
by cyphar 2mo ago
That is the classic answer for how to do that in pre-generics Go. It doesn't solve the problem I mentioned.
17.
by cyphar 2mo ago
In Rust this is solved by defining a local trait and methods implemented for a trait are only available if the trait is imported. This is in contrast to Go where methods are not namespaced at all. But there are almost certainly many other w
18.
by cyphar 2mo ago
I've maintained one of the major container runtimes (which is written in Go) for over a decade as well, I think I have a less rosy view of Go than you but I still think it's a nice language all things considered and still use it f
19.
by cyphar 2mo ago
On the other hand, design decisions made under one set of constraints can become problematic when you add new features that don't play as well with earlier design decisions. For a concrete example, the fact you cannot define custom met
20.
by cyphar 2mo ago
For more context, sample reference materials from the NIST reference catalogue are not meant to be exceptionally high purity examples of the sample -- SRMs are usually commercially-produced products. The real value is that each sample comes
21.
by cyphar 2mo ago
It's hard to do a 1-to-1 comparison but if the telemetry also used a masked form of the machine-id with an application ID unique for the telemetry service then you wouldn't be able to correlate them directly. To be clear, I think
22.
by cyphar 2mo ago
On most distributions I've seen, SELinux is configured to automatically label /proc files with labels based on fairly granular roles, so that setup already exists. If you want to completely remove the global information in /p
23.
by cyphar 2mo ago
It should be noted that the "correct" usage of /etc/machine-id is that you use it in a way that doesn't allow cross-correlation between different applications by using a HMAC of the machine-id with an application-sp
24.
by cyphar 2mo ago
Most games are not perfect information games. How would you implement poker?
25.
by cyphar 2mo ago
Facebook uses more advanced fingerprinting techniques than just cookies, even a few data points like IP address, User-Agent, and screen-size probably uniquely identify you and let them cross-correlate you between containers. If you want act
26.
by cyphar 2mo ago
Breaking any kind of DRM (or writing, distributing, or using software that does so) violates section 1201 of the DMCA[1]. The maximum penalty for a violation is $500k and up to 5 years in prison. There are some token exemptions but none wou
27.
by cyphar 2mo ago
I don't think the (fairly factual) description of these systems as stochastic parrots means that they will never do useful work, just that they are not intelligent in the way we believe animals to be (to "push back" on your a
28.
by cyphar 2mo ago
They actually do use "os/user".Lookup() as a fallback if fetching via getent(1) fails, so they might be using NSS modules to dynamically define users and then not linking their binaries with glibc (musl and the opt-in pure-Go
29.
by cyphar 2mo ago
Indeed, but they did have code to use "os/user".Lookup() in a fallback path so I wonder if the issue is that they have some NSS module for user definitions (which wouldn't work with osusergo/static or musl-linked bi
30.
by cyphar 2mo ago
In my experience it is really very quick and easy to get a CVE if you contact MITRE directly, and on paper you do not need to disclose too much. The GitHub CNA is (ironically) very slow by comparison but that is a GitHub issue. Tailscale

More ›