marksomnian

9 ms·

1.
by marksomnian 2mo ago
To answer your question: > Does Debian already provide signature on .deb files (that is, provide a manifest of their hashes and and sign each)? Yes it does. If you look at https://ftp.debian.org/debian/dists/tri
2.
by marksomnian 2mo ago
That's exactly where I keep getting caught. I've looked at in-toto a number of times, and each time I've been left wondering "how is this better than a signed list of hashes?". Which I suppose is what in-toto is at
3.
by marksomnian 2mo ago
nginx (2004, ok, 22 years), ClickHouse (2016)
4.
by marksomnian 2mo ago
That data is in fact made publicly available by Network Rail: https://wiki.openraildata.com/index.php/TD though interpreting it isn't the easiest thing in the world...
5.
Finding a needle in a 4 GB haystack: from 0.75 GB/s to 49 GB/s in Go(segflow.github.io)
7 points by marksomnian 4mo ago|1 comments
6.
by marksomnian 6mo ago
It's not that unusual to have an interim CEO hold the reins (read: sign anything that needs the CEO's signature) while a permanent one is found.
7.
ClickHouse Release 26.1(presentations.clickhouse.com)
8 points by marksomnian 8mo ago|0 comments
8.
by marksomnian 8mo ago
In fact, uv's docs half-suggest this: > With uv, it turns out that it's often faster to omit pre-built wheels from the cache (and instead re-download them from the registry on each run). On the other hand, caching wheels that a
9.
by marksomnian 9mo ago
In my experience, the remote shell weirdness is usually because the remote shell doesn’t recognise ghostty’s TERM=xterm-ghostty value. Fixed by either copying over a terminfo with it in, or setting TERM=xterm-256color before ssh’ing: https
10.
PEP 761 – Deprecating PGP signatures for CPython artifacts (2024)(peps.python.org)
2 points by marksomnian 9mo ago|2 comments
11.
by marksomnian 9mo ago
Site appears to be hugged to death, repo is: https://github.com/angristan/MacThrottle
12.
by marksomnian 9mo ago
Meta don’t use RSC: https://bsky.app/profile/en-js.bsky.social/post/3lmvwmr5rfs2... > We are not using RSC at Meta yet, bc of limits of our packaging infra (it’s great at different things) and because Rela
13.
by marksomnian 11mo ago
And `rails new` required me to install Ruby and Rails. I'm not sure what the point you're making is.
14.
by marksomnian 1y ago
GitLab too: https://gitlab.com/gitlab-org/gitlab
15.
by marksomnian 1y ago
Looks like the source the article is based around is https://www.diyphotography.net/develop-film-at-home-with-a-j... , which itself is a write-up of https://www.youtube.com/watch?v=5_Oja2mpYqg .
16.
by marksomnian 1y ago
If I were a CodeRabbit customer, I'd still be pretty concerned after reading that. How can CodeRabbit be certain that the GitHub App key was not exfiltrated and used to sign malicious tokens for customer repos (or even used for that in
17.
Reflections on the React Community(leerob.com)
6 points by marksomnian 1y ago|0 comments
18.
by marksomnian 1y ago
> might be good to mention that for transparency, because people can tell anyway and it might feel slightly otherwise Devil's advocate: why does it matter (apart from "it feels wrong")? As long as the conclusions are sound
19.
by marksomnian 1y ago
I like this style. In a project I worked on we had CI reject any FIXMEs outright and any TODOs that weren't accompanied by an issue ticket[^1], so the hierarchy would be FIXME: I am leaving a note to myself to not get distracted, but t
20.
by marksomnian 1y ago
O'Leary has form for this sort of ragebaiting - recall the non-stories about standing "seats" and paying to use the toilet.
21.
by marksomnian 1y ago
> But a few instances were to conditionally set one piece of state whenever another piece of state was changed That use case is explicitly called out on the "You Might Not Need An Effect" article in the docs (which everyone wri
22.
by marksomnian 2y ago
From TFA: > Generally, this can be dealt with via policy and moderation to prevent abusive users from causing outsized load on systems, but these processes take time and can be imperfect. So it’s a case of the engineers accepting that, h
23.
by marksomnian 2y ago
> if a peaceful protest were to take place during the talk in question, we will not take action, provided the protest is indeed peaceful and does not disrupt the proceedings Would staging a sit-in explicitly intended to prevent the booke
24.
by marksomnian 2y ago
> Titanfall was a game that couldn't be made until the cloud What do you mean by this?
25.
by marksomnian 2y ago
From an infosec perspective, as long as the queries are encrypted (with proper TLS verification), that angle is covered (though there are other considerations about data sovereignity etc.). In terms of response time, that's something y
26.
by marksomnian 2y ago
Assuming arguendo that apple did want to do that kind of messing with DNS though - what's there to stop them from changing getaddrinfo() in the same way? As someone pointed out upthread, if you don't trust your OS vendor to do D
27.
Hydra: A framework for elegantly configuring complex applications(hydra.cc)
10 points by marksomnian 2y ago|0 comments
28.
by marksomnian 2y ago
Seems like a non-sequitur? Why does LLM integration mean that Zed is less good of an editor for junior devs?
29.
by marksomnian 2y ago
Interesting footnote: > In the 2022 engagement, the client’s engineers were enthusiastic about the prospect of a public analysis, and Jepsen was allowed to file public issues against systems including etcd. Following the conclusion of th
30.
Replayability Roadmap(blog.replay.io)
3 points by marksomnian 2y ago|0 comments

More ›