News for hackers. Stuff that matters.

bennofs

Re:I'm switching my phone from Android to Linux on Thursday August 06, 2026 @04:43AM (#49194137)
There is microg, which implements some of this by re-implementing Google Play services but allowing you to choose your own provider for services where this is possible: https://en.wikipedia.org/wiki/MicroG
Both Debian and Ubuntu provide snapshot mirrors where you can specify a date to get the package lists as they looked at that time.
8MWh is equivalent to a few hours of electricity generation of a wind turbine.
One major downside is that it becomes really hard to do transactions, especially across multiple files. If you store mostly immutable data though like git (where except the refs every object is immutable, mutating creates a new object) it can work nicely.
Re:Uv's killer feature is pulling in local dependencies on Monday January 13, 2025 @07:04AM (#42682578)
I for one enjoy the convenience of automatically installing python versions. Yes I know how to do it manually. Yes it is possible to install multiple versions. But that does not mean I want to do it every time, just to test how things behave in different python versions. For that, it's also okay if it does not install the most performant version of the interpreter.
Re:I am rich and have no idea what to do on Friday January 03, 2025 @01:46AM (#42583195)
The limit could depend on a lot of other things. In theory, it's possible that you are paying 100% of revenue on debt service yet still the best option is to take on more debt. This is if you believe that investing the money raised via additional debt provides returns that outweigh the increase in debt service costs. So in that situation, additional debt can even lower the debt service / income ratio.

So this is meant to illustrate that the limit on debt is more a function of the concrete circumstances. In this line of argumentation, debt is not limited by a mathematical formula that just takes GDP and similar statistics as input.

My argument is that you typically also check other properties, like properties describing what your program should do. These other properties likely wouldn't be satisfied by a nop program, and hopefully the same is true for many subtle issues.
Yes, that is a limitation. But this limitation is not too bad.

In many cases, a bug in the translation simply makes the proof impossible. Somebody then investigates why the proof does not go through and finds the bug in the translation.

We only have a problem if the bug in the translation specificially cancels a bug in the original code. If there is no systematic risk, it is quite unlikely that two bugs cancel each other in this way.

Do you know if redispatch costs are included as part of your transmission costs and how much they are? Because if they are, then investing into the transmission lines can decrease transmission costs since the providers need to pay less for redispatch.
Re:Does QE Cause Wealth Inequality? on Tuesday November 16, 2021 @01:12PM (#29244191)
I am no economist but couldn't it be that raising pay in few sectors does not cause inflation? I would think that depends on what the people receiving more money spend it on. If they only spend it on things where we have no bottleneck and there is still excess capacity, how would that create inflation? Inflation should only happen if the increased paycheck is used to compete for scarce resources/products. So I think predicting inflation requires a more detailed analysis, especially you need to have a cycle of increased prices and pay.
Re:Ode to a Streaming ByteString on Wednesday October 27, 2021 @02:53PM (#29017473)
How does rust do bounds checking for slice accesses if the length is not stored?
Re:Why bugs might feel “impossible” on Tuesday June 15, 2021 @05:19PM (#27521645)
JVM also has jstack and other tools like jprofd to introspect running vms.
Re:Kolmogorov Complexity: Extensions and Applications on Wednesday May 05, 2021 @02:46AM (#27046912)
Construct a TM which enumerates all possible variable assignments and checks if the SAT problem is satisfied then halts if so. You can construct this TM in polynomial time, and it halts exactly if the SAT problem is satisfiable. So this is a polynomial reduction from SAT to the halting problem.
Re:Test for lists in Cython on Monday April 19, 2021 @01:38PM (#26865666)
But it breaks down if you have cross-language cycles, because no garbage collector of either language will see the full cycle.
Maybe I've missed it, but I didn't find anything in the article about whether the vaccine does need to be discontinued or not. In any case, being clear about what side effects are possible and researching them to get a better understanding is a requirement in my opinion.
Re:We Don’t Use Docker on Tuesday March 16, 2021 @07:52AM (#26475514)
Well, turning a static binary into a docker image is basically just adding some metadata on how to run it. Whereas turning an image into a static binary is much harder, so it makes sense the world standarized on the more flexible format.
Re:We Don’t Use Docker on Tuesday March 16, 2021 @07:49AM (#26475499)
> User, process, and filesystem namespacing. System call filtering. Ensuring even if there is a remote exec exploit there is no bash or anything else in the container for an attacker to use.

All of these are supported by systemd out of the box. You can use `SystemCallFilter=...`, and various options to restrict the file system (like `ProtectHome` and `ProtectSystem`) plus tons of other linux kernel features (capabilities, no new privileges).

Last I tried, telegram desktop on Linux didn't support e2e encrypted chats which is sad.
Though deprecated, https://github.com/yandex/gixy is a nice checker for these kind of issues.
Re:Nano is what Bitcoin hoped to be on Saturday February 20, 2021 @11:45AM (#26205509)
For some cryptocurrencies, a 51% attack would only be able to halt the network (prevent new transactions) but wouldn't be able to cause a double spend or other safety failures.
Does wireguard support storing keys in a hardware device, so that the cannot easily be exfiltrated if the machine is compromised? You want that for security critical infrastructure.
Note that at least on Linux, deploying a keylogger to exfiltrate the password for a SSH key is not hard either. Even if a keylogger is somehow not possible, you can probably still replace key binaries with patched versions or change desktop shortcuts to launch modified programs.
Are there many package manager that do not have either pre-, post- or build scripts or plugins allowing arbitrary code execution during build?

pkg managers that do have that: cargo (build.rs), pip (setup.py), npm (install scripts), apt/rpm/pacman (postinstall hooks)

Maybe the only exceptions are Go and Java package managers?

> Imagine the massive spinning generators as a big mass that slow down just a little bit when you switch on a light and then that generator has to add more steam (or open hydro valve or whatever).

I have always wondered, would that still hold true if the grid was fully solar-based? There would be no rotating mass in that case.

On Linux, I've used https://github.com/rhofour/evdi-vnc to make a secondary screen that you can connect to with any VNC client.
Signal Desktop doesn't require the phone, so no, it doesn't work that way.
Re:Semantic Clojure Formatting on Tuesday December 08, 2020 @07:21AM (#25344263)
One problem with this is that formatting now becomes a multi-file thing. You have now have to figure out what names actually refer to, which depends on building a project model to correctly resolve imports, etc....

Compare this with traditional formatters, which you can run on each single file individually, this is much more complex and also harder to parallelise.

Older »