ultramancool

This just makes me miss SoftIce. Just hit ctrl+d and be immediately dropped into exactly what your machine is doing at any time.

Of course, just doing this would be illegal on most proprietary operating systems.

(assuming the bug here is a description being assigned to a title)

getDescription simply needs to return a Description object while getTitle returns a Title object. Duh.

Only in the final rendering should it get turned into a string and there it should only accept a Title type for doing so.

Okay, I'm kind of joking, but this is seriously the solution if you really want to get down to it - primitive overuse is the problem, so wrap it in a type that makes it explicit. You need cheap and easy types to take full advantage of this sort of thing.

EDIT: And even with those reading code developed in such a way may go overboard at some point. I'm not sure as I haven't really seen it done to the fullest extent possible. Typically even when taking a fairly strong advantage of such a type system, unit tests and stuff are still used, but theoretically you could enforce their parameters entirely in the type system. Of course, that enforcement can also be incorrect, but it does make it clearer in many cases.

Yeah, they talked about numbers of bugs fixed, but those surely seem to have impacted the user experience. My big worry is that if I were to consider deploying to such a service, that I would encounter similar bugs, but not have the political pull to get them fixed and simply have to perform hacky fixes around them myself.

If those major distros weren't switching though, you wouldn't have to, which is what my point was. The only reason you're adopting it is not for a practical benefit, just because the distros did.

I run devops though for a small business and we've avoided the issue entirely using runit for our software.

I've switched everything I write to use runit because runit doesn't require any particular init system, you can easily integrate it with sysvinit, freebsd's RC, ubuntu's upstart, systemd, etc. It just runs on top and doesn't need to be the king and it's incredibly simple to write scripts for it. Completely removes the need to worry about this init mess.

The thing is though - their code is already written. Systemd is entirely unnecessary for 99% of people, probably everything except some of it's LXC features has clear and popular alternatives. LXC is the only thing making me eye systemd with interest, but I'll come back to it in a few years once all the weird stuff is worked out.

That's awesome, but you should consider F-Droid because you're probably going to get a takedown on Play if you get any level of popularity.

I looked at it but both price and lack of root and bootloader unlocking are extremely prohibitive for me. The keyboard is really its only appealing feature.

I can get a device like a OnePlus 3 for about 60% of the price and it has better hardware to boot. In terms of storage, RAM and CPU it's more comparable to a OnePlus 2 which is about 40% of its price.

Keyboard is nice, but not double the price and lose features I rely upon like AdAway and XPrivacy kind of nice.

Are there any pickins for android phones with keyboards with even remotely modern hardware (I'd settle for anything with a 1080p screen probably)? Seems extremely limited, I was unable to find any viable options last I checked. I hate the candy bar form factor but it seems as though it really has won out unfortunately.

Yeah, the XBMC Youtube addon used to do subscriptions and the like, it was pretty nice, but I think it broke and the main developer abandoned it. Youtube-dl does support channels and resuming though so you could fairly easily just set up a cron job and use syncthing to get the videos onto your phone. No pretty GUI for that though.

Try NewPipe, it's an open source YouTube downloader and background player for Android:

https://f-droid.org/repository/browse/?fdid=org.schabi.newpi...

Isn't the whole point of Musk opening Tesla's IP to be able to sell more batteries? It's not charity, it's a business strategy.

You might also consider Cesium, which is WebGL based and gets you a globe view too.

I'd love this kind of report with various things. I'm thinking phones would be extremely helpful too, how easy is it to unlock the bootloader on this phone? How hard is it to repair it? What proprietary blobs does it rely upon?

Yes, eventually, but there's a lot bigger concerns than quantum computers currently.

Cheat Engine is an extremely capable tool too, has lots of reverse engineering features, including a debugger and pointer searching tools, a blue-pill style hypervizor to modify memory undetectably and a very powerful assembly level patcher. Oh, and it's all open source. Seriously nice stuff.

That is a concern for the DH key establishment though, that might be decrypted in future.

If you're paranoid, configure your SSH server to only accept Curve25519-based key exchanges, only use AES with authenticated modes or CTR+ETM or chacha/poly1305, and only take ed25519 or long RSA authentication keys.

Assuming your clients are up to date it should work without any major impact. I also strongly recommend rejecting NIST "random" curves in your hostkey verification, better RSA or ed25519 than the current default of the somewhat questionable ECDSA-based keys.

Not sure, but my guess would be that the yellow was a hardcoded constant in the code in a few places and modifying it involved opening up system files in a hex editor and doing some edits, amateurs + hex editors = bad times.

Not to mention uboot, busybox, etc.

I've been thinking about how something like this could be done in a completely distributed way, I think I've even seen some research implementation of it. In any case, it'd be interesting...

Hmm... http://twister.net.co/ maybe? The biggest issue is going to be mobile, but if you have enough people firing it up on servers and stuff, you'd probably be okay. And then of course you realize that there's also the even bigger issue of actually getting people to use it. You're fucked there unless you have some serious marketing talent, which most people capable of writing such a thing in the first place lack.

I just want to take this opportunity to say that as a paying customer, this attitude towards your duty of keeping a site online, no matter who's it is, is exactly why we swear by CloudFlare and why almost no one else seems appealing in this field. I've watched your competition snuff out customers for being too controversial, while you guys just get it done. Thanks for this, it's really changed the shape of the internet in some ways.

Yes, and my cheap $20 Kimsufi (OVH's ultra-cheap brand) still didn't drop off the internet.

So how would you feel about 600gbit+? I'm genuinely curious, would it be an interesting challenge or an immediate avoidance? As a business customer myself and a big fan of CF's general attitude to these sorts of things, I know be very happy to see the blog post on it.

There's definitely some truth to this, FreeRADIUS is just not that valuable of a target since not many people have RADIUS exposed to the world, however if you look at other highly valuable targets like OpenSSH, which is probably in the top 10 if not the most valuable target in the world, you see far fewer significant exploits. It's definitely possible to have better quality than OpenSSL and a lot of OpenSSL's issues are due to legacy code and what amount to experiments being run in production software.

The question is not what Yahoo is killing but what they aren't killing. I'll be surprised if anything is left of Flickr in a few years given the success of competition.

Yeah, that would definitely be nice. The result quality has definitely gone down noticably, well, at least until I throw quotes on everything. Used to be able to just use "+" in front of terms but of course they killed that too! Still better than duckduckgo with or without though.

Yeah, definitely, trying to find actual torrent sites now amounts to adding "magnet" "btih" to your query or you get a bunch of junk spam sites filled with malware.

Really? I tried it but I always found the Google results much better, especially when you're on the hunt for a weird error you're getting or a bootlegged copy of something obscure.

That's not true actually, the software that powers wordpress.com is builtin and can power many sites from the same instance.

https://codex.wordpress.org/Create_A_Network

So while many hosters will offer a single instance (as it's more flexible), some, often companies doing it internally will use multisite just like wordpress.com.

Yeah, honestly I wouldn't be surprised if Al-Jazeera thought they were using the open source version and were in the clear legally and thought the whole DMCA was a bogus attempt to extort them.