ratorx

6 ms·

1.
by ratorx 3d ago
Oops should have RTFA before commenting, I thought the CNAME was only to your servers.
2.
by ratorx 3d ago
Out of curiosity, how is MPIC relevant? Not that familiar with it, but CNAME would resolve to your server regardless no?
3.
by ratorx 11d ago
Yeah, I don’t think it assumes zero knowledge, which is what I’d expect from a “first programming language” book. But it does say it’s targeted more for an “algorithms” course in the introduction. As a side note, I think a REPL is the best
4.
by ratorx 20d ago
I think it’s more of a time vs code tradeoff, if done properly. For example in the Vec case, you could theoretically build an alternative which encodes the “three sections” property internally, and ensures correctness at construction time f
5.
by ratorx 1mo ago
The existing, human standards are based on human capabilities. Humans may not have read all the papers that could be cited. However, all these papers are almost certainly in the AI’s training set and it potentially has the ability to retrie
6.
by ratorx 2mo ago
Do you have source for IWF funding being by big tech? Haven’t found anything that breaks their funding down by source and the majority on the UK govt site is from “charitable activities” ( https://register-of-charities.charitycomm
7.
by ratorx 3mo ago
Anycast DNS doesn’t mean what you think it means. Your DNS traffic to Cloudflare is routed via anycast. If Cloudflare is sending this DNS query (eg to an authoritative DNS server), the IP address it uses for this is not going to be the anyc
8.
by ratorx 3mo ago
Putting aside the WASM sandboxing (I’m not familiar enough with it to understand how sandboxing works) there’s a DoS vector at least. Even regexes have had many DoS issues, and I can’t imagine WASM being easier to sandbox for DoS risk.
9.
by ratorx 3mo ago
There’s a big difference in the expected use of a file. If the file is attacker provided, and the fallback path is being used, the attacker can embed whatever WASM payload they want into the file since the file will be “opened” by “execute
10.
by ratorx 4mo ago
Providing access to the data is easy. It is just an MCP or equivalent, and coding such CRUD is cheap now. Applying the actions is unsolved. Unless you YOLO the LLMs, taking stateful actions automatically requires a lot of protective infrast
11.
by ratorx 4mo ago
If your goals were fame, then yes. But you can still pursue excellence even if there is an alternative “easy” path. The equivalent is something like hand tool woodworking - it’s still a thing despite the advent of machines, but more of a ni
12.
by ratorx 5mo ago
UK has never had net neutrality, there are many limited data phone plans that include unlimited music/video etc
13.
by ratorx 5mo ago
I think I read somewhere (but could be wrong) that it was because they didn’t want to own any “authentication” services. Their infrastructure was zero trust (as in they don’t hold any passwords or private keys), just a discovery server for
14.
by ratorx 6mo ago
Making it explicit wouldn’t be particularly problematic no? Option<&Spouse> in Rust terms. Or for this specific case, a GADT (Single | Married<&Spouse>)? It could even use a special “NULL” address. Just don’t pollute eve
15.
by ratorx 6mo ago
Pure CS is not necessarily equivalent to pure maths. For the “science” bit of CS, you do need to do the equivalent of experiments (for more applied topics). For example, a physics degree is expected to have experiments. You are not required
16.
by ratorx 7mo ago
Changing the links and doing nothing else would be a pretty dumb MITM. You could do a more complex variant which is not so easy to spot (targeting specific networks, injecting malware whilst modifying the checksum) The key property of SSL t
17.
by ratorx 7mo ago
I find it interesting that they bought Astro ( https://blog.cloudflare.com/astro-joins-cloudflare/ ), which from my definitely-not-a-frontend-person perspective seems to tackle a similar problem to Next. A month ago. I
18.
by ratorx 7mo ago
You can make it so employees don’t have ambient access to data, and require multi-party approval for all actions that require user data. Giving away a user password should be treated as a routine risk. I’m not saying that’s how it actually
19.
by ratorx 7mo ago
It doesn’t have to be a compile time constant. An alternative is to prove that when you are calling the function the index is always less than the size of the vector (a dynamic constraint). You may be able to assert this by having a separat
20.
by ratorx 7mo ago
A global train outage would be quite a spectacle, is that even possible?
21.
by ratorx 7mo ago
Management not having to listen to engineers is the structural problem. How do managers know which concerns that engineers bring up are actually relevant? How do engineers know which concerns have real world consequences (without having a i
22.
by ratorx 8mo ago
I think it depends on the scope and level of solution I accept as “good”. I agree that often the thinking for the “next step” is too easy architecturally. But I still enjoy thinking about the global optimum or a “perfect system”, even it’s
23.
by ratorx 8mo ago
I guess this is also a matter of organisational policy and how much power individual teams/organisational units have. I would imagine mature organisations without serious short/medium term existential risk due to product features
24.
by ratorx 8mo ago
Team lead manages the overall direction of the team (and is possibly the expert on some portions), but for an individual subsystem a senior engineer might be the expert. For work coming from outside the team, it’s sort of upto your manageme
25.
by ratorx 8mo ago
To be clear, they definitely use ingress anycast (ie anycast on external traffic coming into Cloudflare). The main question was whether they (meaningfully) used egress anycast (multiple Cloudflare servers in different regions using the same
26.
by ratorx 8mo ago
So reading the article you’re right, it’s technically anycast. But only at the /24 level to work around BGP limitations. An individual /32 has a specific datacenter (so basically unicast). In a hypothetical world where BGP could r
27.
by ratorx 8mo ago
It’s possible, but I think it’s typically used for ingress (ie same IP, but multiple destinations, follow BGP to closest one). I don’t think I’ve seen a similar case for anycast egress. Naively, doesn’t seem like it would work well because
28.
by ratorx 8mo ago
I guess my workflow for this is more fragmented. Either I’m prototyping a script (and edit and test it directly) or just need throwaway loop (in which case fish is nicer). I also don’t trust myself to not screw up anything more complex than
29.
by ratorx 8mo ago
For POSIX: I leave Bash as the system shell and then shim into Fish only for interactive terminals. This works surprisingly well, and any POSIX env initialisation will be inherited. I very rarely need to do something complicated enough in t
30.
by ratorx 8mo ago
Wha do you mean by “fixing this” or it being a design flaw? I agree with the point about sequential allocation, but that can also be solved by something like a linter. How do you achieve compatibility with old clients without allowing somet

More ›