timhh

7 ms·

1.
by timhh 28d ago
Great read. Thanks for not using AI to write it! (Or at least making it not read like the usual slop.)
2.
by timhh 28d ago
I don't have a Cameo Pro 4 to test, but I have reverse engineered software to control some of their other devices. It's a little janky but if you want to help I'd appreciate it! https://robocut.org/ I believe
3.
by timhh 1mo ago
I'm still trying to convince them that RISC-V assembly exists...
4.
by timhh 2mo ago
Yeah I always thought the whole architecture of PAM being a library is weird. A sane person would have made it a Daemon that processes talk to surely? Really it should probably be part of SystemD, but I know that would anger the anti-System
5.
by timhh 2mo ago
I'm vaguely considering rewriting PAM in Rust. It's definitely something that would benefit from Rust's extra security and the code quality isn't that great. Nor is the UX. What "among other things" were you th
6.
by timhh 2mo ago
Mostly the specification was just poorly written with many ambiguities. But also the design was complex, weird, invasive and IIRC not backwards compatible with standard RISC-V.
7.
by timhh 2mo ago
Why not what? Sorry I'm not sure which bit of my comment you are responding to.
8.
by timhh 2mo ago
There's no real need for LLVM, GCC or CUDA to be memory safe. POSIX libc is of course C by definition but libc's are normally extremely well tested, and it is possible to avoid libc entirely if you want. V8 is actually a nice case
9.
by timhh 2mo ago
Is it valuable enough though. Looking at Google's stats Rust has several orders of magnitude fewer memory vulnerabilities even with `unsafe` (kind of the point). If C was at that level there's no way CHERI would have ever been p
10.
by timhh 2mo ago
> Security through Obscurity still reigns. That's not the case at all. The spec is developed in the open: https://riscv.github.io/riscv-cheri/ If you want to run CHERI code, it's true that silicon isn&#x27
11.
Rust vs. Zig Compilation Time(blog.timhutt.co.uk)
2 points by timhh 2mo ago|0 comments
12.
by timhh 2mo ago
That looks quite simple. Think about something like this, a commercial SystemVerilog simulator (this only shows a fraction of the UI). https://blog.reds.ch/wp-content/uploads/2018/09/questa13.png Or some
13.
by timhh 2mo ago
Of course you can make compressed work. E.g. you fetch 66 bytes instead of 64. Hell, Intel/AMD manage to make x86 fairly fast. But it's definitely more awkward and has costs throughout the CPU. I would be really surprised if t
14.
by timhh 2mo ago
> Requiring C (compressed) is necessary to avoid splitting the Linux ecosystem. Chips lacking C would never be able to run binaries compiled with C. Yes that's precisely the point of excluding it from the RVA profiles. It would mean
15.
by timhh 2mo ago
I like RISC-V (it's been my job for the last 7 years) but this is nonsense. Not everything RISC-V is good. CLIC was awful (thankfully it has been abandoned). The spec is not especially well written - the style is inconsistent due to be
16.
by timhh 4mo ago
> Default lock screen experience still has a needless delay of 5 seconds when entering a wrong (even blank wrong) password, even on the first attempt. I suspect that is not KDE's fault (or Wayland's) - it's probably PAM, w
17.
by timhh 4mo ago
Note the shunting yard algorithm is an iterative (as opposed to recursive) version of Pratt parsing (and also precedence climbing which is virtually identical). However as normally stated it does not do proper error checking - it will accep
18.
by timhh 6mo ago
I don't understand how you can be so confidently wrong about something so easily checked. :D > You can't run unix_chkpwd against a local account without root because you won't be able to access /etc/shadow to get
19.
by timhh 6mo ago
Definitely not for local password authentication, and I'm dubious it helps for ssh either. See my other comment.
20.
by timhh 6mo ago
> You obviously can't run unix_chkpwd against a local account without root. Wrong. At least check before you say something is obvious. > No, it's very simple. Even more wrong: https://github.com/linux-pam&#x2
21.
by timhh 6mo ago
It is. Only the default changed. Also you can press tab if someone happens to be looking over your shoulder (and your password is so obvious they can guess it from the length).
22.
by timhh 6mo ago
> Yes, for local password authentication. It's really really not. By default PAM has a difficult-to-disable 2ish second minimum delay for all authentication methods. However this is completely pointless for local password authentica
23.
by timhh 6mo ago
Not for local password authentication. https://github.com/pibara/pam_unix/blob/master/unix_chkpwd.c...
24.
by timhh 6mo ago
You make it sound like there was a discussion where they looked at these two alternatives and chose improving sudo over using run0. Actually I just submitted a patch for this and they accepted it. I don't work for Ubuntu and I didn&#x2
25.
by timhh 6mo ago
Yeah I would like to fix those too but sudo is the one I encounter most. Also the existence of sudo-rs meant there was less push-back. I seriously doubt the maintainers of openssh or passwd would accept this change.
26.
by timhh 6mo ago
I did this! I didn't actually know that Mint had enabled this by default. That would have been a useful counterpoint to the naysayers. If you want the original behaviour you don't actually need to change the configuration - they a
27.
Baochip-1x: What it is, why I'm doing it now and how it came about(crowdsupply.com)
346 points by timhh 6mo ago|79 comments
28.
by timhh 7mo ago
> i.e. this doesn't require age verification at all, just a user profile age property This is usually how they do it though. First make a dumb law with poor enforcement. People don't push back about it because it obviously won&
29.
by timhh 7mo ago
> the capabilities are so far mostly just talk lol what? They've caught and successfully reflown the super heavy booster, and they've mostly successfully done a soft landing of Starship in the sea. How is that remotely "ju
30.
Sudo-rs enables pwfeedback by default for Resolute Raccoon(discourse.ubuntu.com)
3 points by timhh 7mo ago|3 comments

More ›