HN user

keddad

50 karma

neversleeps.moscow

keddad@yandex.ru

Posts2
Comments14
View on HN

It's really not, especially on a highway. Makes me sad to read about more and more speed restrictions - there is nothing wrong with those in areas there cars and pedestrians cross, but seeing a highway with a 110 (or sometimes even 80) speed limit just feels stupid. Sometimes I'm happy to live in a place with relatively modest speeding fines (also, you have to speed A LOT to loose your license over it, it's a very rare occasion).

Seems like a non-issue to me. I work with a relatively large Bazel monorepo, and we have to vendor pretty much anything anyways. Many 3rd-party rules might need patches to work properly with our custom toolchains/rules.

Bzlmod sounds nice for small projects, but for big monorepos within organizations with established processes it is more of a hassle, and I imagine that most Bazel users are not using it for small projects.

I don't believe it is true. They might block commercial solutions, but i'm using Wiregiard with exit point in Netherlands right now, works fine (although on certain providers, I've seen some throttling, but that could just be coincidental)

UPD: I asked some friends, some of them have faced probmes. I guess it is not protocol block, but instead combination of protocol and "suspicious" server. Mine has stuff other then VPN running on it, so it might have flown under the radar.

What is the alternative, curl up and cry? Doing anything (especially anything interesting) involves taking risks. Not to mention that I probably have more chances of being arrested or conscripted then actually suffering in an airplane accident, they are still quite safe. I don't think that worrying about everything, especially things as basic as an airplane travel, will do you any good.

I flew from Moscow to Vladivastok recently, and it's a choice between 8 hour flight and a week in a train. The planes might be missing some maintenance, but they are certainly not falling out of the skies, and it's not like the trains can't fail (especially considering occasional train tracks sabotages). There are always risks, it's not that big of a deal.

There are open-source rules for that, but at my place of work, we found those lacking. We had to write our own set of rules which would basically take all the source files for a given target, generate MSbuild files depending on the target type and call it from Bazel to build the code in this isolated environment. Another problem are nugets: you have to wrap each in a Bazel target in order to make it available during build, and analyze them beforehand to understand what kind of outputs (like .dlls) will they generate during build. It's a bit of a mess, sadly.

You basically have to declare all those dependencies in Bazel. For instance, if you look at rules for Go, they declare the whole dependency graph (Modules, their relations) in Bazel. There is tooling to generate that for you, so it's not really that bad.

Where it gets harder is when this language feature is integrated with an existing build system. C# is normally build with it's own build system, and to build it with Bazel you have to essentially rewrite some of it's logic in Bazel, which can be hard, but doable.

No, I'm looking for an app which will be secure, as in, lack backdoors or obvious security issues. I understand that OS can compromise it, but I more or less trust my normal OS, and it seems weird to use a "secured" OS, because that's where I'd expect all the backdoors to be. Not to mention the fact that if your threat vector is "Apple looking through you photos", you probably don't even need anything special in the first place - popular Linux disto with some Matrix client will be just fine.

I'm a bit skeptical about Tails and other comsec tools which are a full OS instead of small, separate app. I don't have the time or knowledge to inspect full OS image in detail, and it feels like "secure communications, protected from the guys you don't like" is exactly the thing the "guys you don't like", like government, would create, with proper backdoors in place. After all, that had happened numerously before. (Crypto AG, that story about CIA gaining control of some "secure messaging" devices, etc)

I want to learn some low-level programming and hardware stuff, however, I don't really know where to start - sure, I can order an arduino with some kit, but I don't know much about electrical engineering, so making anything harder when a blinking LED will be a challenge.

Well, the original document states that "Web-browsers shall ensure support and interoperability with qualified certificates for website authentication referred to in paragraph 1...". I'm not sure, however, what punishment, if any, is there for the browsers that don't comply with that regulation.