netheril96

Supposedly it can root Android.

Our builds went _down_ from 1 minute to 2 seconds.

Just curious, what might be the cause of such speedup?

They need to live more active lives.

When I become more active, I also become more hungry due to the extra energy consumption. The net effect is little weight loss and more often than not weight gain. While being physically active is beneficial to health in many ways, it does little for losing or maintaining weight, at least for me.

Is it possible to complete assignments with AMD GPUs? Preferably on Windows.

Channels are not for everything. Plenty of mutex cases cannot be rewritten as channels, or will be very unwieldy so. In fact, every large Go project I have seen uses mutex here or there.

I've swinged between Go and Rust for my personal projects multiple times. For work, it is decided by the management so not my problem.

The biggest gripe I have with Go is the lack of *any* compile time check for mutex. Even C++ has extensions like ABSL_GUARDED_BY. For a language so proud on concurrency, it is strange not to have any guardrails.

We need an easy way to ensure that only kernel modules in an whitelist can load. I’m tired of blacklisting modules I never need.

You are assuming that LPE only applies to the user that holds all the sensitive stuff. But it also applies to users created specifically for isolation. Without LPE they would not have access to anything important even if they were compromised.

You are misinterpreting my goal here. I have patched my kernel against copy fail but I am thinking of ways to harden my setup against future CVEs in the kernel.

So the question is, before I learned about copy fail, what could I have done that would have limited the possible damage this vulnerability could do to me? CapabilityBoundingSet is one answer and rootless podman as mentioned in this article is another. They don’t prevent all but at least `su` is useless.

If the goal is just preventing full root privileges, a CapabilityBoundingSet in a systemd unit will do.

However copy fail can be used in many other ways not contained by containers or the above settings. For example it can modify the /etc/ssl/certs to prepare for MitM attacks. If you have multiple containers based on the same image then one compromised CA set affects another.

Maybe it's time to tax IPv4 usages or holders.

Does this work from a fork? That is, can I file a stacked PR to a project not owned by me, by creating branches in my forked project? Previously I asked AI about how to contribute stacked PR, it told me that I can only do it when I have push privileges to the repo, not from a fork, and the doc here is ambiguous.

----

OK, I found this from official docs, so this feature is now quite useless to me:

Can stacks be created across forks?

No, Stacked PRs currently require all branches to be in the same repository. Cross-fork stacks are not supported.

ETH is not afraid of doing hard forks, so I'm expecting that they will lead in adopting post quantum cryptography. And then BTC ecosystem participants can learn from ETH.

It would still tank the price. Right now many Bitcoins are lost because no one holds the keys any more. When they can hack it, suddenly the sell pressure significantly goes up.

I don't count that Xi losing, but Xi winning. He's very conservative in China's sense, and he's basically crushed less conservative forces in the Party. A crackdown on clothing "detrimental to the spirit of the Chinese people." doesn't serve any real interests of Xi other than enforcing the ideals of China's conservatives.

Similar to how the Republican party always try to inhibit abortion wherever they can. You won't say that Republican party successfully passing an anti-abortion law indicates they are losing, will you?

Was it? What I was told was that Youtube was built in Python and was gradually migrated to C++ after bought by Google.

Because Shopify would have waited until Rust came out in 2015, instead of launching in 2006,

PHP and Ruby apps have generated far more revenues than all the Rust and Golang code combined.

You already stated the obvious: PHP and Ruby apps generated far more revenues simply by existing longer.

ETH uses 256-bit integers for accounting.

Nullable annotations don’t work with well with generics, or at least those tools I use.

What's the practical difference between system store and user store? Do some apps or system operations only trust the system store and not the user store?

Not rhetorical questions.

The materials found during discovery are not always relevant. You can discover all of them, but then some of them shouldn't be presented to the court or jury.

Not really. If someone logins as user A on the machine, and caddy runs as user B, then unless A has sudo access, A cannot modify caddy. But with this admin HTTP endpoint, user A now can arbitrarily modify caddy.

what makes you think India and China can?

They don't have to do anything. The US visa system already excludes most of the Chinese and India people eager to immigrate to the US. The brain drain is bounded above by the US policy.

There are also exchanges where you trade against other people between crypocurrencies and fiat. Chinese people all use this. These workers could use those.

It will be years when most Android users are on Java 21. It’s also not a feature that can be transpiled. So for Android developers virtual threads are probably not a thing we need to understand or use in any near future.

Then don't complain about people not contributing to your projects. You reserve the right to reject my PR, and I reserve the right not to contribute any more.

No QA is able to find out a Spectre vulnerability. QA is irrelevant in this conversation.

really cranky with anyone who dared challenge their position.

You could profit from those people, if you are confident in your position, by shorting some of the stocks that shoot up from people's pre-judgments on this matter.

If your recovery mechanism completely bypasses the benefits of using the YubiKey, that recovery mechanism is what your attackers will use.

I don't use any methods other than YubiKey when I do have my keys. So attackers cannot trick me. If I see a choice without Yubikeys I immediately know I'm being phished.

I have four. One attached to the desktop, one attached to the laptop, and two carried with all my mechanical keys (one of them supports NFC and another supports USB-C).