Skip Navigation

帖子
1
评论
115
加入于
2 yr. ago

I'll be honest, I'm just here for the memes.

  • I just started using Backblaze B2, switching from AWS S3. I use it through Rclone to encrypt everything before I upload it. Only $6/TB/mo and it only charges what you use. You can download up to 3x your data stored per month for free, so if you ever decide to move or you need to restore a backup, you don't have to pay egress costs. It was the cheapest service I could find, but there may be others.

    You can set price limits on your account to ensure you don't go over too. It will alert you when you approach the limit. There are some minor costs, like pinging the API, but they are free up to a reasonable amount.

  • You need to swipe harder for it to work

  • A backdoor is very distinct from a vanilla vulnerability. Heartbleed was a vulnerability, meaning the devs made a mistake in the code, introducing a method of attack. XZ was backdoored, meaning a malicious actor intentionally introduced a method by which he could exploit systems.

    Both are pretty serious vulnerabilities, but a backdoor, especially introduced so high in the supply chain, would have been devastating had it not been caught so early.

  • Too complicated. Just enter a negative number.

  • RIP that one guy who relied on this bug. He's gonna have to create a bookmark now, which will ruin his whole workflow.

  • As mentioned, binary test files makes sense for this utility. In the future though, there should be expected to demonstrate how and why the binary files were constructed in this way, kinda like how encryption algorithms explain how they derived any arbitrary or magic numbers. This would bring more trust and transparency to these files without having to eliminate them.

  • Rclone is awesome! It lets you mount cloud storage to directories. It even supports encrypting any backend, so you can use cloud storage privately.

  • Sounds like a fun speedrun. What's your PB?

  • In simple terms, it's like a VM for an application. You set it up with the right dependencies and your application will "just work" on it, without having to deal with other applications existing alongside it.

    What makes it better than a VM is that it is much faster. It interfaces with kernel features that help isolate the processes and files from the rest of the system. It is not virtualization, rather it is namespacing.

    Docker also provides a bunch of tools that help with creating this environment automatically and allowing for some escaping into the host, such as binding ports and sharing data with the host's file system.

    Once this environment is created, it can be shared with uses as a single downloadable bundle, called an image. This makes it really easy to download and run an application without having to prepare your system with the right dependencies and files.

    Nothing is free though, and the cost here is more disk space and some performance overhead, although it is close to native speed.

  • The Arch Wiki gives good tips on what environment variables to set to make sure that your GUIs are running with Wayland native and not XWayland. I have a Framework and I don't have any blurry text issues, and I've done all the settings in this section.

    https://wiki.archlinux.org/title/Wayland#GUI_libraries

  • It actually is possible to segfault in safe Rust, although it is considered a bug. Proofs of concept are shown in this cve-rs crate.

    If you want an explanation of why this happens, I recommend this video: https://youtu.be/vfMpIsJwpjU

  • PHP: Problem -> real_solution_for_real_this_time() (real_solution_i_swear() is unsafe and deprecated)

  • I use Home Assistant for controlling my smart lights. They do support Docker, but I installed it as a VM with KVM. You get more features with it, such as add-ons. But you should definitely look into your options. They have a diagram on this page.

    https://www.home-assistant.io/installation/

  • Y'all have terrible tab hygiene. I have 0 tabs 99% of the time, phone and desktop. Need something for later? Write it down. Once you're past so many tabs, you'll never look at it again.

  • Never underestimate a dedicated community to make anything competitive

  • Criticism of the comic aside, two party system is still definitely undesirable. I believe it is a side effect of first past the post voting. What we really should implement is ranked choice voting. It gets rid of the dumb "voting third party is voting for [opposite party]" argument by letting you vote for who you want guilt-free and falling back on your lower-ranked votes if 1 wasn't popular enough.

    But you know, this will always meet resistance because politicians would lose their jobs for implementing this.

  • Reminds me of when I downloaded Tic Tac Toe for my graphing calculator in high school. It wasn't this verbose, but the original author copy pasted the logic for each turn. Even I knew this was awful, so I refactored it to use a loop.

  • They are tracking support for other OSes, and I took a look at the Linux roadmap, and they've made some good headway from the last time I looked. I would use it for its UI performance. I don't like how everything these days use Electron. It also supports Language Server Protocol, so adding extensions for languages should be fairly simple for the community to do. The multiple collaboration seems cool too, although I think most devs would seldom use it.