gnoack

6 ms·

1.
by gnoack 14d ago
When project leads and directors only ask for features, the humans start to eventually push back, but agents do as you please, no matter what the cost. They were trained to do what you ask, but unlike with humans, you need to ask for the re
2.
by gnoack 29d ago
Point taken, that's true. I'm admittedly developing on distributions where the updates are faster, so I missed that. But then again, I also didn't expect that this short weblog article would have such a large audience when
3.
by gnoack 2mo ago
Yes, "en-bugging" :)
4.
by gnoack 2mo ago
+1 It is also a testament to solid engineering and attention to good security practices in general. These still work, also against fancy new AI attackers. When sophisticated attacks become cheaper to run, maybe it will (finally) be cheape
5.
by gnoack 6mo ago
How does this change the point that is being made in the article? Your agent is also only taking one of the existing roles that humans today occupy (e.g. the software operator or developer)
6.
by gnoack 8mo ago
Those are pathname UNIX domain sockets, so you address them through the socket file, which is conventionally stored somewhere under /run. You can run "netstat --listening --unix" to list the UNIX domain servers on your system
7.
by gnoack 8mo ago
I think you are misrepresenting this; Varlink is based on much more conventional UNIX technology than Dbus, which is decades old: You connect to a named UNIX socket through its socket file in the filesystem (man page: unix(7)). This is an o
8.
by gnoack 1y ago
Etoile had its own Smalltalk dialect back in the day, Pragmatic Smalltalk. This was a Smalltalk based on the Objective-C runtime, based on an OMeta implementation and a LLVM backend. David Chisnall, who created it at the time, ended up gett
9.
by gnoack 1y ago
CDE was open sourced a while back: https://sourceforge.net/projects/cdesktopenv/
10.
Landlock Your Vibe Coding(blog.gnoack.org)
2 points by gnoack 1y ago|0 comments
11.
by gnoack 1y ago
Absolutely, seccomp is also an unprivileged sandboxing mechanism in Linux. It does have the drawback however that the policies are defined in terms of system call numbers and their (register value) arguments, which complicates things, as it
12.
by gnoack 1y ago
Landlock is currently still lacking some wrapper libraries that make it easier to use, in C. We do have libraries for Go and Rust, and the invocation is much more terse there, e.g. err := landlock.V5.BestEffort().RestrictPaths( la
13.
by gnoack 1y ago
The way I interpreted most of these "subclassing" cases in the GoF diagrams was actually as "subtyping", and then it makes more sense. Regarding no one having a lock on the term "delegation", I think this is sp
14.
by gnoack 1y ago
It's tracked in https://github.com/landlock-lsm/go-landlock/issues/35 - signals and abstract Unix sockets do unfortunately not interact well with the inherently multithreaded Go runtime. We are working o
15.
by gnoack 1y ago
+1 A rough description of upcoming network restriction features in Landlock and how they map to the BSD socket API is in the talk at https://youtu.be/K2onopkMhuM?start=2025 starting around 33:45 I really hope we can get bac
16.
by gnoack 1y ago
(Author of go-Landlock here) Awesome! I'm happy to hear that you and others are interested in the configuration language. We should probably coordinate that on the Landlock mailing list when the time comes, so that we don't duplic
17.
by gnoack 1y ago
OpenBSD did get it right, but they also have a more relaxed scheme for backwards compatibility across releases. Linux's strict ABI compatibility guarantees complicate matters slightly, but with the right supporting library it becomes t
18.
by gnoack 1y ago
(Author of that library here) It is a library, as already linked in the other comment: https://github.com/landlock-lsm/go-landlock The landrun tool is built on the same library. We also provide an official library for
19.
by gnoack 1y ago
Exactly, for resource limits you can use setrlimit(2) or cgroups if needed.
20.
by gnoack 1y ago
(Landlock reviewer here) Namespaces can also be used for sandboxing, but they have a series of problems. Most importantly, they require more substantial changes to your program that wants to sandbox itself, and the program has to jump throu
21.
by gnoack 2y ago
I ended up building my own Wiki in Go at some point, although I use this mainly for my own smaller purposes. Description and demo instance at: https://wiki.gnoack.org/UkuleleWeb It takes very little resources on my Raspberr
22.
by gnoack 2y ago
I find this an offensive comment. The GIGO principle applies to documentation, and we would be in a much worse place if we didn't have the man page documentation written and reviewed by humans.
23.
Man Pages Maintenance Suspended(lwn.net)
7 points by gnoack 2y ago|3 comments
24.
by gnoack 2y ago
It is not the Debian package maintainer stepping down here, but the project maintainer.
25.
by gnoack 2y ago
This is the project that maintains the user-facing documentation for Linux itself. Anyone who does system administration on Linux, who uses the command line, or who programs in C is relying on this documentation. Also, it is not the Debian
26.
by gnoack 2y ago
I think this is a big misinterpretation of that Alan Kay quote, which was in response to https://news.ycombinator.com/item?id=11941656 - the author of that comment aims to create a programming language with a focus on &quot
27.
by gnoack 2y ago
In "UNIX - A History and a Memoir", Brian Kernighan is telling the story of doing that in 1972 (chapter 4.5, about "Grep") grep '^[behilos]*$' /usr/dict/web2
28.
by gnoack 2y ago
This does not necessarily deserve to be imitated, but it is an experience that definitely stood out in my memory in how unusual it was: the dsmc backup utility. The tool boggled me enough at the time that I wrote about it on my weblog: htt
29.
by gnoack 2y ago
The things you can make a startup from these days... I just use a one-liner in my ~/.XCompose file... <Multi_key> <e> <m> : "My Complicated Name <my.complicated.email@gmail.com>" (Yes, this wo
30.
LLM-generated docs are usually worthless(blog.gnoack.org)
2 points by gnoack 3y ago|1 comments

More ›