dgl

6 ms·

1.
by dgl 9d ago
Even if they are good the vulnerabilities have to be there. There's lots of things turning up like Local Privilege Escalations (LPE) in Linux, but serious people didn't expect the kernel to be a boundary for a sophisticated attack
2.
by dgl 13d ago
They are QSFP56-DD which can be split using breakout cables. So it's 4 x 400GbE ports, which could in theory be split into as many as 32 x 50GbE ports. (Although whether that then ends up being an economical thing to do is a different
3.
by dgl 21d ago
I put a short link on a family thing and someone complained it didn't work. Turns out iOS OCR recognised a "-" as a "=", so this isn't just people typing it wrong. Now my short links implement case insensitivit
4.
by dgl 22d ago
Simple -- you just add a custom SQLite VFS that ensures particular SQLite pages are mapped into underlying OS pages that are appropriately mprotect()ed. Try to modify the executable pages and you crash (W^X). Or you know, don't try to
5.
by dgl 3mo ago
Zip isn't useful for random access here; the problem with random access in HTTP serving is then you have to decompress the data and potentially recompress. The more interesting trick you can do with zip files for HTTP serving is to ser
6.
by dgl 5mo ago
I tried using their Magic Containers product and there were issues that showed a lack of attention to detail as well. It's supposed to scale globally (magically!) but I found multiple cases where particular nodes were problematic and t
7.
by dgl 6mo ago
FreeBSD has supported Linux emulation for a long time ( https://docs.freebsd.org/en/books/handbook/linuxemu/ ). The emulation is at the syscall level but enough to run most apps.
8.
by dgl 7mo ago
GitHub manage to do it. Most URLs you'd think of are either redirects to other bits of the site, or accounts owned by GitHub themselves. It just takes a bit of planning.
9.
by dgl 8mo ago
> Part #2 to me, I also want observability as to what the agent changed. You could potentially combine https://github.com/binpash/try with bubblewrap (I'm not sure how well they compose and as the docs say it i
10.
by dgl 8mo ago
This. Instead you can create multiple Wireguard interfaces and use policy routing / ECMP / BGP / all the layer 3 tricks, that way you can achieve similar things to what vxlan could give you but at layer 3. There's a perf
11.
Mtetris: Tetris-Like Game in X11/Motif(codefromabove.com)
2 points by dgl 8mo ago|0 comments
12.
by dgl 10mo ago
The BSD socket API has 3 parameters when creating a socket with socket(), the family (e.g. inet) the kind (datagram in this case) and the protocol (often 0, but IPPROTO_ICMP in this case). Because when the protocol is 0 it means a UDP socke
13.
by dgl 10mo ago
> My immediate question which isn't (I think) answered in the repo is how do you interface the NVMe? Can you put NVMe on PCI as opposed to PCIe? How? PCI to PCIe adapter and then PCIe to M.2: https://www.vogons.org/
14.
by dgl 10mo ago
Also the UK seems to include the Grand Union canal and River Severn but not the River Thames. It seems quite random.
15.
by dgl 10mo ago
> On the QR topic, I don't understand how logos in the middle work. You are losing pixels and checks with the logo in the middle which is fine until you make the logo too big. It is possible to add logos without (well, differently)
16.
by dgl 11mo ago
The VT3xx ones that were color did not support ANSI SGR to set them. I don't think VT5xx was a budget line, it has more escape sequences than the previous ones (including interesting ones like changing cursor shape, which modern termin
17.
by dgl 11mo ago
If MAME could support the VT525 (nearly the last terminal DEC made and unlike the previous DEC models it supports ANSI color) people might use it a bit more. It would be very useful for compatibility testing as there aren't many people
18.
by dgl 11mo ago
xterm does and some others, I posted about this and emojis a while ago: https://dgl.cx/2025/06/can-your-terminal-do-emojis
19.
Show HN: IRCd in Pure Bash(github.com)
6 points by dgl 11mo ago|1 comments
20.
by dgl 11mo ago
Given the source isn't released, how about an IRCd in bash: https://github.com/dgl/bash-ircd
21.
by dgl 11mo ago
The second generation was "skas" for Separate Kernel Address Space, some more background here: https://user-mode-linux.sourceforge.net/old/skas.html The host kernel patch for skas was never merged, probably f
22.
by dgl 11mo ago
Not quite; you're probably thinking of: https://google.github.io/building-secure-and-reliable-system...
23.
by dgl 11mo ago
The post calls this out: > the 1Password browser plugin would have noticed that “members-x.com” wasn’t an “x.com” host. But shared accounts are tricky here, like the post says it's not part of their IdP / SSO and can't be,
24.
Bash a newline: Exploiting SSH via ProxyCommand, again (CVE-2025-61984)(dgl.cx)
5 points by dgl 1y ago|0 comments
25.
URL Design (2010)(warpspire.com)
3 points by dgl 1y ago|0 comments
26.
by dgl 1y ago
The license page and linked blog posts mentions this: https://landley.net/toybox/license.html I like the 0BSD license (see my https://xn--gba.st ), AWS also uses the semantically equivalent MIT-0 license for
27.
by dgl 1y ago
This isn't really that different to GWT, which Google has been scaling for a long time. My knowledge is a little outdated, however more complex applications had a "UI" server component which talked to multiple "API"
28.
by dgl 1y ago
See how it's used in the standard library io types, it makes for quite nice composition: https://go.googlesource.com/go/+/refs/heads/master/src/io/io...
29.
by dgl 1y ago
> I wonder why they don’t do this for all levels. How deep could this even be in practice for it to matter? You could just have a hashmap with them all. While it may seem questionable for fields; it applies to methods too and is potentia
30.
by dgl 1y ago
To be fair I did lazily do: else if (c.slice(4, 4+4) == "ftyp") f="avif"; Because I didn't feel like parsing the HEIF to check it's actually AVIF. I'm pretty sure browsers aren't that b

More ›