A plugin can spawn arbitrary processes so if neovim is not started in a sandbox (container, namespace, firejail...) they can basically do whatever your user has the right to do.
Pretty big supply chain risks here.
HN user
A plugin can spawn arbitrary processes so if neovim is not started in a sandbox (container, namespace, firejail...) they can basically do whatever your user has the right to do.
Pretty big supply chain risks here.
The devlog videos are great : https://github.com/eduard-permyakov/permafrost-engine#devlog
Thank you so much for making this in the open and documenting everything !
Compiling it yourself from source is quite easy, you can find instruction here: https://www.sqlite.org/howtocompile.html
Here is an article from Julia Evans explaining it: https://jvns.ca/blog/2019/10/28/sqlite-is-really-easy-to-com...
Or if you are familiar with Docker, you can use a more recent Debian in a container and install sqlite inside it.
The problem lies in baking entire distribution into an image.
Using distroless images or "FROM scratch" with statically compiled app reduces the risks.
You still have to watch for your app dependencies updates but that's less work than for an entire distribution.
If you want your content to be accessible for most people you also need to transcode your video to several resolutions. This coupled with an adaptive bitrate player [0][1] will allow clients to choose the resolution they can afford (so that people with different bandwidth can access your content)
When dealing with more than 10s or 100s concurrent viewers the required bandwidth on your server will be high and putting a CDN in front may be required.
[0] https://github.com/Dash-Industry-Forum/dash.js [1]: https://github.com/video-dev/hls.js
I feel that learning from (bad) past choices to build a better solution is a good engineering practice ? Sure the initial db choice didn't scale but they learned from it and they seem to be happy with how they built their new db now
This FFmpeg Python bindings [0] provides wrapper for filter_complex which simplifies its use a lot !
It appears to simply apply this CSS to the selected elements:
.___blur-blur { filter: blur(5px); }
We have more precise data about global warming. Sensors are good at measuring temperature or sea rising, less at measuring divorce rates.
Great website ! It's nice to see the different instructions while the animation is running.
I also use http://www.cs.usfca.edu/~galles/visualization/Algorithms.htm... when I want to visualize algorithms.