temprature

20 ms·

1.
by temprature 5y ago
Do you have examples of what in OpenBSD you found "utterly complicated to setup and use"? I've been using for several years now because of how devoid of complexity it is and because of how comprehensive the documentation is.
2.
by temprature 6y ago
> First off: Fair Use does not exist. It is an assumption, not a defined situation or law. https://en.wikisource.org/wiki/Copyright_Act_of_1976#%C2%A7_... Further recommended reading: Lenz v. Universal Music Corp.
3.
by temprature 7y ago
That's in Netflix's custom stack that they contributed to freebsd, and not used by default.
4.
by temprature 8y ago
Where? I can't see discussion about this submission at that link.
5.
by temprature 8y ago
Removes the need to add a separate include for namespacing, ie. no pledge.h header needed. Makes the calls shorter and easier to read. Consider: if (pledge("stdio rpath tmppath proc exec", NULL) == -1) err(1, "p
6.
by temprature 8y ago
It's also pretty trivial to run the program. Maybe it's different in other projects, but I'm pretty sure in OpenBSD you're encouraged to actually test the code, not just ship it because it compiles. There's 2 progra
7.
by temprature 8y ago
Nice backpedaling.
8.
by temprature 8y ago
Implementing KPTI didn't involve any of what you just said.
9.
by temprature 8y ago
An "actual vulnerability" has been found. It's amazing that even after the lazy FPU fiasco, people think OpenBSD did this on a complete whim.
10.
by temprature 8y ago
OpenBSD and DragonFly had their meltdown mitigations done in a couple of weeks from when it was publicly disclosed. If it's good enough for projects developed by handfuls of volunteers, it's good enough for the multi-hundred billi
11.
by temprature 8y ago
It's a sysctl that can be toggled. If you want hyperthreading and don't care about the security concerns, you can turn it back on. The commit message specifically mentions that this was implemented because many modern machines don
12.
by temprature 8y ago
Copperhead is based in Canada but you appear to be citing US law.
13.
by temprature 8y ago
I guess Richard Stallman violated the "spirit of the GPL" when he made MicroGnuEmacs change their name.
14.
by temprature 8y ago
Brainy isn't open source or publicly available, you can click on the project names in the list to see its scan results.
15.
by temprature 8y ago
Indeed, surely Mac OS includes its own man pages? man 2 mprotect, man 2 unlink
16.
by temprature 8y ago
> I would trust wordpress to keep their signing keys safe. What signing keys? Wordpress's automatic updates aren't signed, so your trust is horrendously misplaced. Someone already did the work for them to implement it[0], and
17.
by temprature 8y ago
If you think a preimage attack against MD5 is "trivial" you should demonstrate it. People would be very interested in this because no one has managed to do it yet. Creating two files with the same MD5 is a very different beast fro
18.
by temprature 8y ago
There have been no practical demonstrations of colliding the MD5 of an arbitrary file (ie. pre-image attack), only situations where two files are created specifically with the intended purpose of creating a collision. This is precisely what
19.
by temprature 9y ago
OpenBSD's base ships the most recent LLVM and Clang (5.01), but there's no LLDB yet and gdb is outdated (6.3, the last GPLv2 version). He would have had a much better time using C99 than C++11, especially since he didn't want
20.
by temprature 9y ago
For starters, its own libc and a proper filesystem (the author wrote their own ext2 implementation).
21.
by temprature 9y ago
There's a lot of people install memcached without realising it listens on all addresses by default. If you install it and run it via whatever system your OS/distro uses, you'd never need to look at the man page so you wouldn&
22.
by temprature 9y ago
In what country is it acceptable to not treat others with basic courtesy and respect? Which is really all the list is asking for.
23.
by temprature 9y ago
Given that there's groups of people railing against being told not to do the things on this list, yes, apparently.
24.
by temprature 9y ago
Performance is only an issue if your disk can write faster than your CPU can hash. hammer2 changed its hash a couple of years ago because this started happening with newer NVMe drives[0], but before that disk writes weren't CPU-bound.
25.
by temprature 9y ago
Actual lawyers have also read both licenses and came to the conclusion that they are incompatible: https://sfconservancy.org/blog/2016/feb/25/zfs-and-linux/ The main debate over the incompatibility
26.
by temprature 9y ago
They don't like embargoes but they don't go out of their way to break them. The only embargo I know of that OpenBSD broke was for OpenSSL, and that was an honest mistake, as explained here: https://www.tedunangst.com&#x
27.
by temprature 9y ago
He told them they could go ahead, he then regretted it but that's not OpenBSD's fault. From https://www.krackattacks.com/#openbsd : > As a compromise, I allowed them to silently patch the vulnerability. Recei
28.
by temprature 9y ago
I enjoyed it retroactively because it set up this continuity gag a few seasons later: https://www.youtube.com/watch?v=6rxdhKRODLw#t=59s
29.
by temprature 9y ago
> OpenBSD won't get notified about vulnerabilities until well after everyone else Which doesn't make a difference if OpenBSD still gets their patch out at the same time as everyone else. Unlike other vendors, it doesn't
30.
by temprature 9y ago
No, why should there be? If you own a domain name you can get a DV cert for that domain name. It's that simple. There shouldn't be any policing at all of which domain names are allowed to have certificates.

More ›