thom_nic

6 ms·

1.
by thom_nic 4mo ago
> A leak was detected in one of the fittings and an attempt was made to correct it by striking the fitting with a large wrench.
2.
by thom_nic 7mo ago
> is this pressure from the gun manufacturing lobby Definitely not, it's pressure from the anti-gun lobby that keeps pushing "one more bill that this time will actually change violent crime statistics, we promise!" These
3.
by thom_nic 1y ago
This is fair, but I would venture to guess 99% of people including software developers and even most IT professionals completely rely on the vendor pre-installed root CAs.
4.
DoD's public.cyber.mil is using an untrusted root CA(cyber.mil)
2 points by thom_nic 1y ago|3 comments
5.
by thom_nic 1y ago
DOD Cyber Exchange, home of DISA STIGs among other resources, appears to be signed by a root CA "US DoD CCEB Interoperability Root CA 2" which does not appear to be in any browser list of trusted root CAs. This seems to have chan
6.
by thom_nic 6y ago
From my anecdotal observation this is true. Gun sales are also growing among demographics not typically associated with gun ownership (non-white, non-conservative.)
7.
by thom_nic 6y ago
> the salesman wasn't supposed to TELL YOU that we are monitoring what you install Exactly. The old "I'm sorry I got caught" and not "I'm sorry I did it."
8.
by thom_nic 6y ago
> There's always the risk that the West might internally reject the scientific revolution. In the US I am pretty sure we are already on the decline. I think it has to do with, during the industrial revolution and post-war, huge scie
9.
by thom_nic 6y ago
I agree, for a couple reasons. One, while you usually have to deal with a cross toolchain (usually intel-> ARM) it's easier to build and debug on a target board versus booting and rebooting your PC to see if you did everything righ
10.
by thom_nic 7y ago
This sounds a bit like the custom bicycle frame builder phenomenon as well. Well-known builders/shops can have years-long wait lists and their builds will go for 2x, 5x or 10x the cost of a top of the line mainstream model - 10s of th
11.
by thom_nic 7y ago
I was curious, and since the author of this answer provided links to what they called leaks [1], it's not difficult to download both the leak and ReactOS source [2] and look for similarities. So, out of curiosity, that's what I d
12.
by thom_nic 7y ago
I clicked the article link just because I was expecting to see this guy: https://en.wikipedia.org/wiki/Steve_Urkel#/media/File:Steve_...
13.
by thom_nic 7y ago
Beyond the Abstract, can anyone give a TL;DR on novel or interesting things covered in this paper?
14.
by thom_nic 8y ago
I actually implemented something on an embedded linux product once: a busybox initramfs that you could boot into "recovery mode," then along with dropbear, SSH into a completely in-memory system and re-flash the entire system imag
15.
by thom_nic 8y ago
The issue becomes when you're calling some generic library that's unaware that it is running in a request handler. If you want to log from deeper in some logic, maybe you've passed some data or domain objects but not a reque
16.
by thom_nic 8y ago
I have not used Java in many years now, but I'm curious if anyone has anecdotal experience using OpenJDK in production? Performance vs Oracle Java, bugs/ idiosyncrasies due to internal API differences, etc?
17.
by thom_nic 8y ago
I tried this as well, can't reproduce. I've got a 15" "late 2013" rMBP, set display options to "more space." I've got a total of 45 tabs open between a couple different windows (I use the userChrome
18.
by thom_nic 8y ago
If anyone is interested in other lightweight tools to complement a minimal embedded linux distro, check out Troglobit's GitHub repo: https://github.com/troglobit . He has a collection of tiny apps perfect for embedde
19.
by thom_nic 8y ago
I hate to say it, but demonizing ICE seems like the wrong thing. It's the executive administration that direct ICE and Congress that tells ICE the laws to enforce. That's not to say they are blameless but we could point fingers a
20.
by thom_nic 8y ago
How about a web interface on an embedded device?
21.
by thom_nic 9y ago
> I really don't want to learn dart Literally half of programmers: "Ugh why can't everything be Javascript" Other half of programmers: "Ugh Javascript is the worst language in existence" /s Given that
22.
by thom_nic 9y ago
This is true. Thankfully node-pre-gyp helps here because you can build the native modules once for each target arch/platform. I actually have a node app that uses several native modules, and `npm install` it for an ARM target from an
23.
by thom_nic 9y ago
Have you looked into a DIY battery replacement?[1] I've replaced "non removable" batteries and cracked screens in several phones over the years (the latest being a Nexus 5X) and it's definitely doable if you have a stea
24.
by thom_nic 9y ago
> There is no real demand for alternatives to the RPi. Only if you quality that with "among consumers." There is tons of demand for ARM-based modules that are designed to be embedded in a commercial product. Comparing this pr
25.
by thom_nic 9y ago
I don't know firsthand, but "Debian" is primarily responsible for userspace binaries, which just need to be built for aarch64. Just about everything specific to the chip & peripherals is handled in the kernel. (Yes Debi
26.
by thom_nic 9y ago
I think "ecosystem" doesn't actually matter much (if "ecosystem" means maker/ tinkerer mindshare) for commercial applications. All you need is (1) kernel support for the chip including drivers e.g. for video&#
27.
by thom_nic 9y ago
PocketBeagle unfortunately isn't sufficient for integration into a commercial product. It doesn't breakout most of the AM3357's pins. If all you need is USB/I2C/SPI/GPIOs you're OK but PocketBeagle omits
28.
by thom_nic 9y ago
The ironic part here is, part of npm's core design - installing all deps to `./node_modules` - makes it extremely easy to "build" on one machine and then zip up the whole project directory which only needs `node` to ru
29.
by thom_nic 9y ago
The real interesting part of this is the formal verification tools they described which were used to uncover these vulns. It seems that, while not a silver bullet, FV tools of this sort would be the most reliable way of discovering (and pre
30.
by thom_nic 9y ago
I'm currently taking Andrew Ng's Machine Learning course on Coursera; I immediately thought of using logistic regression to find this shape algorithmically. I know the premise of the paper is "with four parameters." Bu

More ›