News for hackers. Stuff that matters.

ritchiey

Re:Toolship: A (More) Secure Workstation on Wednesday September 20, 2023 @10:55AM (#37584986)
I have the same concern. Something might be worth looking into is replacing docker with Podman because it runs as the authenticated user rather than using a daemon running as root. Also, I believe Podman desktop allows for multiple VMs.

Also consider QubesOS. Where everything runs in a VM (if you can find appropriate hardware on which to run it).

Less flexible but easier to install is ChromeOS FLEX (or a high end Chromebook). Like QubesOS, ChromeOS lets you run Linux in a VM but with the ability to open native windows.

Re:Toolship: A (More) Secure Workstation on Wednesday September 20, 2023 @10:41AM (#37584785)
WSL probably is good but I believe it still has access to the whole Windows file system.

Linux on ChromeOS is probably better because its file system is separate. Files and directories must be explicitly shared from the main OS.

I think both have the ability to open windows on the main desktop so you can run graphical IDEs and the like in the VM which is nice.

Re:Chromebooks will get 10 years of automatic updates on Thursday September 14, 2023 @11:29PM (#37517974)
To me the big difference between the two is security.

WSL2 mounts the windows file systems. A VM in crostini is completely isolated and yet it can still display windows on the main desktop.

The only other thing I know that does that is QubesOS.

Re:Run Firefox on ChromeOS on Tuesday August 08, 2023 @05:18AM (#37046415)
I can see it being useful in a corporate setting to limit which sites you can visit with Chrome to just your secure admin panels and internal apps. Then use Firefox to go to dangerous places like… the Internet.

That way if one of your users clicks a link in a phishing email Chrome simply won’t open it.

Re:Live-reload your static website with no server at all on Saturday June 24, 2023 @01:44AM (#36455914)
This works similarly to any live-reloading local server except that there is no server. All you need is a text editor and a web-browser.
Re:Ask HN: Rust or C or C++ in 2023? on Tuesday June 06, 2023 @12:03AM (#36207937)
I'd be interested to hear if anyone has learned Rust without first understanding memory addressing and pointers.

Although I think Rust is a better way to write safe code and the industry is right to adopt it, it seems like a heavy lift to learn about heaps, stacks and pointers whilst also learning about ownership and lifetimes.

I don't really think that C++ is worth learning unless you have to work on an existing C++ codebase.

The reason usually cited for why not BitTorrent for software packages is because it makes public what package versions you have and haven’t downloaded.

This information could be useful to an attacker.

Re:LastPass: Notice of Recent Security Incident on Friday December 23, 2022 @01:22AM (#34102831)
I personally know at least one person who had his Google account locked with no explanation.
The killer tab feature I would like to see is a keystroke to switch to the previously focused tab in the current window. That’s it.

I frequently find myself jumping between two tabs (for example filling a form with details from another page) and no browser I know of makes it easy.

Re:Maria: A ClojureScript coding environment for beginners on Thursday November 17, 2022 @08:23AM (#33638487)
I imagine they’d find it no more annoying than do Frank, Bob, Doug or Russell.

In fact I might call my next project Karen. Because things can only get better for her.

Re:Ignite – Use Firecracker VMs with Docker images on Tuesday September 27, 2022 @04:18AM (#32992773)
Ignite is running a VM per container. Docker for Windows/Mac runs all containers in a single VM.
Re:The Low Energy Trap on Saturday August 20, 2022 @04:19AM (#32530311)
Nixon did, but then other things happened.

https://en.m.wikipedia.org/wiki/Project_Independence

Re:Apple previews Lockdown Mode on Wednesday July 06, 2022 @08:56PM (#32008772)
Or Australia. Border agents here can now compel you to hand over your phone and credentials.
Re:Beam VM Wisdoms (2019) on Wednesday April 21, 2021 @08:17PM (#26897083)
You can also compile OCAML/ReasonML to Erlang.

https://caramel.run/

Re:On Small Games on Monday November 23, 2020 @08:25PM (#25194171)
Tanks on the starter disk is my favourite couch co-op game.

Not sure how long it is though because you always have to start from the beginning so we’ve never completed it.

Re:Some progress on CO2 sequestration technologies on Saturday July 27, 2019 @10:00PM (#20545444)
Even better, plant trees, cut them down, build things out of them and grow more.
You don’t need to wait for web-assembly to solve these problems.

TA mentions 3 languages (Elm, Reason & Purescript) that combine sound type-checking and immutability right now.

None of these bring the cognitive overhead of Rust’s borrow checker and, in the case of Reason at least, compile at lightning speed to readable (though optimised) JS.

Re:Show HN: WebGL Demo in ReasonML on Friday March 02, 2018 @09:02AM (#16501377)
IPhone 7 Using WebGL ver: 1 Open ControlsWarning: No color buffer floats. Water will look bad. Try Chrome >= 64.

60 FPS. Looks ok to me but have to zoom to fill the screen with the canvas.