News for hackers. Stuff that matters.

whacker

Re:The SBOM Frenzy Is Premature on Monday October 03, 2022 @07:50PM (#33075147)
> That also means that unless you build a project on two identical hosts then it is unlikely you will get the same SBOMs.

I don't understand why the author thinks this is such an insurmountable issue.

Reproducible builds are possible with a little care: large parts of Debian are built reproducible. There are tools from https://reproducible-builds.org/

Bazel and similar build systems support reproducible builds, and thus identical SBOMs.

Re:The Protobuf Language Specification on Monday September 12, 2022 @05:33PM (#32817307)
proto predates gob by quite a bit. gob was introduced with golang, and it's not really used anywhere else.
Not quite fake: but this might be close enough? https://github.com/kubernetes-sigs/kind

Alternatively you could create a CRI plugin that does what you want. https://github.com/kubernetes/kubernetes/blob/242a97307b3407...

Re:Gandi loses data, customers told to use their own backups on Monday January 13, 2020 @03:43PM (#22038352)
Out of Band. Registrars cannot intercept whois searches?
Re:Attacks against GPG signed APT repositories on Friday February 23, 2018 @09:52PM (#16451354)
The release files have 'Valid-Until' fields, which will cause apt to reject it on replay.
Re:Attacks against GPG signed APT repositories on Wednesday February 21, 2018 @05:36PM (#16433610)
This is such a frustrating clickbait headline!

Most of the 'attack' s are:

1. Plain old bugs in apt. 2. Involve disabling the very security features (GPG and checksum verification) designed to prevent that attack!

I mean you can use grep as a filter for tail -f output.
The equivalent in grep is '--line-buffered'.
Yes, it does.
Re:Japanese addresses: No street names. Block numbers on Friday November 03, 2017 @04:22PM (#15621958)
Well, chess is eastern too (originated in India)
Re:The U.S. Isn’t Prepared for the Next Recession on Wednesday November 01, 2017 @07:46PM (#15606564)
I think the car issue is caused by rise of emissions controls. Efficiency and emissions control have been improved by computerizing the car - thats what puts car maintenance out of reach. Its hard for the average person to understand/fix things that we cannot see or touch.
Re:JSC loves ES6 on Tuesday June 06, 2017 @01:33PM (#14499155)
Not having to pay does not make it 'open' either, but I see your point.
Re:Behind the Scenes of Mexico's Sinaloa Cartel on Tuesday April 11, 2017 @01:10AM (#14085027)
actually its attributed to pablo escobar, and he was from columbia.
oh nss modules wouldn't either. Perhaps intercepting and rewriting every dns request would be needed.
I think (on linux, at least), its better to implement this as a nss- module (/etc/nsswitch.conf). You can do things like lookup a hashtable, automatically update databases, etc without having to rewrite system config files.

Also this does not protect you from programs that perform their own dns lookups, and ignore /etc/hosts and /etc/resolv.conf entirely!

Why DRBD when something like `sheepdog/ceph` is available?

The latter offer much better scalability and features.

Re:Moving 12 years of email from GMail to FastMail on Monday August 08, 2016 @01:29PM (#12249407)
The default I have seen everywhere (qmail, postfix) is a week.
what on earth is 'possible possession of drugs'?
Re:Why do we keep building rotten foundations? on Wednesday July 06, 2016 @02:12PM (#12044851)
I can imagine some of the complaints with gnome, although I feel its gotten far better, what exactly are the problems with gtk3 vs 2+?
I think a note taker taking live notes that everyone can see, and perhaps edit, is a great way to record meetings. As a bonus, you even have something tangible to show the time you put in!
Re:Walgreen Terminates Partnership with Theranos on Monday June 13, 2016 @03:33PM (#11896719)
All the other replies are misinterpreting this: There was once hope that this would democratize/commoditize medical testing.

Sad that it did not come true.

Re:PyPy3.3 v5.2 alpha 1 released on Tuesday May 31, 2016 @12:03AM (#11804482)
hallelujah!
Re:Show HN: Kajero – Interactive JavaScript notebooks on Tuesday May 17, 2016 @02:50AM (#11711756)
looks awesome!

A link to installation instructions would be nice.

Re:ReactJS is better without Flux/Redux/RxJS on Friday January 22, 2016 @03:50PM (#10955528)
Well, we we don't need any of the other stuff, if you just replace redux, etc with their equivalents in clojurescript!
webcam + motion detection would be a way to do this without additional hardware.
Re:Chrome kills the HTTP-HTTPS “mixed content” warning on Wednesday October 14, 2015 @01:56PM (#10388189)
and what if they simply get a certificate from another source?!

Older »