News for hackers. Stuff that matters.

xfer

Re:NixOS Is Not Reproducible on Wednesday October 30, 2024 @06:07AM (#41993374)
I pressed C-c accidentally during the upgrade(wrong terminal) and it broke the entire system(had to manually change a few files rebuild initramfs to be able to boot). I would take the complexity of Nix without a thought.
Re:Just want simple TLS for your .internal network? on Tuesday October 22, 2024 @04:53AM (#41912424)
Or use a wildcard cert for all internal certs.
Re:Aider: AI pair programming in your terminal on Thursday April 11, 2024 @07:07AM (#40000870)
Like another commenter I also use it for initial exploration in uncharted territory. For coding only helpful with autocompleting error strings. Even then, it messes with normal auto-complete, might get rid of it.
Re:Creating an Autonomous System for Fun and Profit on Sunday June 25, 2023 @01:01AM (#36465260)
Well, no such thing as stable addresses since you don't really own IP addresses, you are leasing from RIR. But, if you are fine with APNIC allocation, see if RIPE PI Allocation is sufficient for you, they are much cheaper(RIPE charges $50/yr), add some LIR cost, total would be <$100/yr.
Re:Indian ISPs: We already give govt full access to web traffic on Thursday November 10, 2022 @11:57AM (#33549453)
Do you see a green lock with message saying "your access is restricted" in the US?

Do you see any TLS connection resets based on SNI? If not, most(all?) indian ISPs already visibly do far more than average American ISP.

Nobody in india uses SMS to communicate, it is solely used for verification OTP. It's never been a thing, so not sure what you are talking about.
Re:Against DNSSEC (2015) on Friday October 21, 2022 @12:34PM (#33289949)
Can you not mitm the CA's dns lookups for http, tls-alpn challenges and make them sign the certificates for you? How does letsencrypt prevent this? Do they check with multiple resolvers around the world?
Re:GitHub Copi­lot inves­ti­ga­tion on Tuesday October 18, 2022 @09:36AM (#33246904)
> There is a similar gymnastics done by human engineers today due to the issue of patents. I don't think this is a good trend to uphold.

Are you arguing that copyright laws should be abolished? I have no problem with that as long as it's clearly defined, you can't not respect copyright of open source code but enforce it for proprietary code, just because the value is arguably non-monetary.

Re:GitHub Copi­lot inves­ti­ga­tion on Tuesday October 18, 2022 @04:28AM (#33244488)
> An editor extension allowing search of github would be at least as easy to use to violate licenses

Well, try doing that for music or movies or proprietary leaked codebase.

If you think copilot is uniquely producing things that are not that different from humans then surely no one would have any problem with feeding it massive amounts of corporate programs?

I am not aware what writers are doing but there have been plenty of uproar regarding stable diffusion. I have a feeling that if any tools like this get built for musicians/film-makers, it will look vastly different from the current situation.

Re:GitHub Copi­lot inves­ti­ga­tion on Tuesday October 18, 2022 @03:11AM (#33243983)
The difference is if you build tools that can be used to violate existing copyright laws your tool will get taken offline by the same corporations. Yet they are selling one that can be used to do so.
Exactly, it would actually benefit many C/C++ programmers. Some components of NT are very high quality, why not wash their license if the aim is to empower the programmers and also make some profit?
LGPL is open source, the scandal is violating the license agreement.
You are assuming copying around buffers won't consume any cpu? Maybe it's perfectly fine, maybe it's not. But it needs some experiment before we can handwave it.
I also think vscode is really good enough for development and has a healthy plugin interface. I only miss my vim navigation when working in it, nothing beats vscode remote mode and it's free.
Re:So You Want to Compete with Steam (2018) on Thursday September 22, 2022 @05:45AM (#32936694)
It's literally a free game, with no strings attached. The only downside is the game gets heavier on resources with these items when you play with players with these items.

Valve is certainly doing(has done) better than the market ethically, you need to look into their competition to see the state.

Re:NaN Boxing (2020) on Saturday September 17, 2022 @03:49AM (#32875591)
Is that a good trade-off sacrificing fixnum bits? I guess it would make sense when the language is intended for scientific programming.
Re:India is almost 80% IPv6 on Sunday September 11, 2022 @02:25PM (#32801998)
The ipv6 routing on major ISP(Jio) that started popularizing it is pretty bad, half of the packets go to singapore and back to india. You often need to explicitly use v4 to get better latency.
Anyways to export dashboard for public viewing, maybe even static image? It looks like all drawing is done client side at present.
A DDoS Protection company doesn't know what the state of the market is? Really? Feigning ignorance on this matter is not very honest.

Your aws story is completely irrelevant since AWS doesn't sell counterfeit luxury handbag insurance. Would you argue amazon webstore doesn't know about fake products in their marketplace?

It's not hard to do this if you collaborate with your upstream or run your network, you have to ban all datacenter/hosting companies networks as well. Then your users complain they can't access your service because their vpn is using these networks...
We are talking about internet shutdowns not "bans", so how are you going to "circumvent it with a bit of knowledge", unless you plan to break into isps buildings and you need a license to operate an ISP in India in case you didn't know.
Re:Amazon, Verizon found using IPv4 240/4 addresses on Wednesday August 24, 2022 @09:05AM (#32578932)
IPv6 space is too big to scan, a /64 network is already a big problem. Botnets require vuln device to have internet connectivity, they don't need to have inbound connections. Most of them use udp/dns etc. for control.
Re:IPv4 Address Auctions on Sunday August 14, 2022 @05:42AM (#32457888)
Well if your IP address is that much of a security risk for you, then I hope you have the discipline to never visit anything without vpns/proxychains.
Re:IPv4 Address Auctions on Sunday August 14, 2022 @03:41AM (#32457303)
> I frequently still buy things over the VPN and stay logged in with accounts attached to me.

They are talking about *registration*, how often do you register new accounts?

I also believe all registration forms should outright ban non-ISP IPs.

Re:Remote Attestation is coming back on Saturday July 30, 2022 @03:23AM (#32284990)
You should read about North Korea's linux distro if you believe that they will be forced to create an open computing world.
Re:The Dangers of Microsoft Pluton on Tuesday July 26, 2022 @05:26AM (#32236078)
This is the problem, when normal people stop buying PCs, only gamers and enterprise customers remain. So they will sell what their customers want.
You use CoW on filesystem level and take snapshot every 5 mins. Your concerns about write coming from above is gone.

The point about being able to use different media like bluray drives is a valid point but since xz doesn't do any correction it doesn't really matter, it has to be done out-of-band anyway.

Re:Rocky Linux 9.0 on Friday July 15, 2022 @02:31AM (#32105249)
The target audience is the machines that host your vms, these need to have a stable environment for a long time(of course patched for security when needed).
You don't need to use any tool, it's a general purpose programming language, so "making a script to analyze csv" requires you to learn the basics of programming and what csv is.

It's not unnecessarily complex, but expecting people to handhold and teach you programming for free when you haven't shown any commitment to learning is silly. If you were to do this, you will essentially be writing programs for clueless people for free and they just move on(they may not learn anything).

If you want to learn programming join a bootcamp or a hacker group or get a formal education(where people will be paid for this).

Older »