mdaverde

5 ms·

1.
by mdaverde 1y ago
The answer to miserable health isn't exercise. It's high quality sleep.
2.
by mdaverde 2y ago
But others do
3.
by mdaverde 2y ago
Agree with everything has trade offs but do not agree that they are equivalent in impact. Tradeoffs have tradeoffs
4.
by mdaverde 2y ago
So much of HN now is medical & healthcare related
5.
Ask HN: Is Hacker News becoming more medical/health related?
3 points by mdaverde 3y ago|4 comments
6.
by mdaverde 3y ago
This was exactly my take. This language just got a whole lot of significant focus behind it
7.
by mdaverde 3y ago
Literally, yes. As example, the north bridge isn't as explicit today as the document makes it seem. A lot of functionality that used to be reserved for the north bridge is now being tucked away into the CPUs or motherboards themselves.
8.
by mdaverde 3y ago
Just read your article: https://www.marginalia.nu/log/09-system-upgrade/ You got rid of a lot but where did the functionality for those tools go? I understand wanting to get rid of containers & Kubernetes, but
9.
by mdaverde 3y ago
Question: how do you reliably deploy? And if it's just scp-ing tarballs, how do you handle dependencies? Do you run & upgrade any third-party processes that rely on having their filesystem or deps? Struggling with this because even
10.
Scoped CSS Is Back(keithjgrant.com)
2 points by mdaverde 3y ago|0 comments
11.
Conway's Law and Division of Labor(youtube.com)
1 points by mdaverde 3y ago|0 comments
12.
by mdaverde 4y ago
This is changing! (or technically, has changed!) eBPF recently added the ability to look through internal data structures through iterators [0] so instead of parsing text we can run a program that traverses through all the task_structs and
13.
ChatGPT, Write an eBPF Program(twitter.com)
3 points by mdaverde 4y ago|0 comments
14.
Taming Tracepoints in the Linux Kernel(blogs.oracle.com)
1 points by mdaverde 4y ago|0 comments
15.
by mdaverde 4y ago
Can you explain why you consider it to be worse? eBPF is also working on signed programs [0] [0] https://lwn.net/Articles/853489/
16.
by mdaverde 4y ago
eBPF has changed several of these constraints [0] - Verifier can explore up to 1million insns now instead of 4096 - 512 bytes of stack but with tail chaining you have up to 8k - Bounded loops have been added. Unbounded loops are prevented b
17.
by mdaverde 4y ago
Bonus points because it's C99
18.
by mdaverde 4y ago
In the same way out-of-tree kernel modules are enforced to license themselves as GPL if they intend to use a lot (if not most) of the available functionality, eBPF programs fall under the same restrictions. bpftool[0] allows you to see whic
19.
by mdaverde 4y ago
Looks like eBPF support for HID devices will be available in the next kernel release (v6.2) Source: https://twitter.com/kernellogger/status/1592786651968839683 Linux Plumbers Conf talk: https://www.yout
20.
eBPF Kernel Scheduling with Ghost [video](youtube.com)
2 points by mdaverde 4y ago|0 comments
21.
by mdaverde 4y ago
It would be nice to see a comparison of FreeBSD's capsicum vs OpenBSD's pledge vs Linux's landlock features. It seems to me that the general vision of these projects have overlap but the implementations wildly differ. Another
22.
by mdaverde 4y ago
In the near term with a recent-enough BTF-enabled kernel, bpftool should be enough for an "ambitious" user to understand what objects are being run on a system. Unfortunately, "ambitious" here meaning enough to actually
23.
by mdaverde 4y ago
You can see the interpreter instructions through bpftool: bpftool prog dump xlated id 173 To see the JITed instructions: bpftool prog dump jited id 173 For the interpreted insns, you can also see the instructions in different
24.
Introduction to eBPF's Cap_bpf(mdaverde.com)
3 points by mdaverde 4y ago|0 comments
25.
by mdaverde 4y ago
In 2020, CAP_BPF was added to allow the use of eBPF. For most programs, you'll use a combination of CAP_BPF, CAP_PERFMON and/or CAP_NET_ADMIN. For some edge cases (such as hardware offload), you'll need the entire CAP_SYS_ADM
26.
Overview of eBPF procfs kernel parameters(mdaverde.com)
1 points by mdaverde 4y ago|0 comments
27.
BPF as a safer kernel programming environment(lwn.net)
4 points by mdaverde 4y ago|0 comments
28.
Towards debuggability and secure deployments of eBPF programs on Windows(cloudblogs.microsoft.com)
1 points by mdaverde 4y ago|0 comments
29.
by mdaverde 4y ago
While I do agree generally that we're still experimenting with the guardrails around eBPF, it seems like the more fundamental problem of the "ease of privilege escalation" is what we should be focused on? But I can see how eB
30.
Red Hat Next 2022: Enabling Next Generation Networking with eBPF(youtube.com)
2 points by mdaverde 4y ago|0 comments

More ›