Posts by encthenet@flyovercountry.social
 (DIR) Post #AR7HVKM6w1073FqvA0 by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       Just a reminder to add alt text to your images.  Especially screen shots, you can just copy paste the text.There's been a few posts that I haven't boosted because the author forgot to add alt text.  And since we have an edit button even less excuses when someone posts alt text not to add it.
       
 (DIR) Post #Aesu2kMeNigzDtePmi by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       So much this.This is why I always get annoyed at people who complain about looting, in that stuff can be replaced, but when it's violence against people (police brutality) it often has lasting, and unreversable impacrs to the person, and the authorities are perfectly fine with the later, but always complain about the former.> https://weirder.earth/users/lonelywizard/statuses/111887582550929114
       
 (DIR) Post #B4E0nwt1WuQCdkunOi by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @mwl Be careful out there.> https://beige.party/users/christymarx/statuses/116219051255769214
       
 (DIR) Post #B4WVBWA72KCkAzLEky by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @ariadneDamn wish I could get them in California, Bay area.  Though I've got other meds and adjusted my diet and it's a problem now, but for a couple years I lived on ibuprofen, and was usually tired in the morning since I had to wake up in the middle of the next to take another dose.
       
 (DIR) Post #B5KUoCBOrqOnSGoqzw by encthenet@flyovercountry.social
       0 likes, 1 repeats
       
       Just learned why I won't be using passkeys.  Because it requires icloude keychain, and I definitely don't want apple having a copy of my passkeys.Yes, I know they're supposedly e2ee and everything, but also, allowing the passkey to transit devices actually means that it isn't really 2FA anymore, especially if you keep any password in the same keychain.It's pretty embarrassing how the security industry has managed to rebadge a not 2FA into 2FA.
       
 (DIR) Post #B5OOdERuHMdqCnlj72 by encthenet@flyovercountry.social
       0 likes, 1 repeats
       
       I've probably told this story before, but one of my favorite debugging stories is the time we conducted a seance on a core file.At the time we were using the boehm garbage collector, but had processes not freeing memory.  We had core files, but at the time, to get stats, you had to run code in a live process.I had recently done work parsing sections of elf binaries, so I wrote a script (with the help of some coworkers) that would take a minimal program, run gdb on it, and then script gdb to open the core file, load cored process into memory at the correct locations.  I forget how we handled the stack, but likely just loaded the registers from the core file as well.With the core file restored, we could now tell gdb to print the stats.My coworker used it to find that boehm was erroneously including the text segment as valid pointers, and with the process at 2gb (which was pretty large in 2004/2005 time frame), strings became valid pointers, preventing the freeing of memory.  Changing to not include it fixed our out of memory issues.
       
 (DIR) Post #B5aqfjO1M3bhLfRymO by encthenet@flyovercountry.social
       0 likes, 1 repeats
       
       Til that after y2038, we'll have a y2100.  That's the year that current rtc implementations in computers won't properly account for the lack of a leap year.  (Assuming other implementations match the one I just read.)
       
 (DIR) Post #B5jql6tt6eu698YnA0 by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       Repeat after me.  AI agents only act on the commands that it was told.  The fact that it also does random stuff is known and expected and any deviation is a failure on the person/org. An AI agent never acts on its own initiative.> entirely on its own initiative If you don't have proper seat belts on your AI agent, that is entirely a human problem, NOT an AI agent problem.> https://mathstodon.xyz/users/gregeganSF/statuses/116473736484432679
       
 (DIR) Post #B5kDhP4VtxbYI7jQS8 by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @mwlYeah. I love how there're a number of great authors on here.
       
 (DIR) Post #B5lCM91ITuBld7UCzg by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @lethalbitBy undocumented, you mean not publicly disclosed until you hit it, even though almost everyone will hit the bug?Those are the nastiest.@NoraByte
       
 (DIR) Post #B5pZFOIcLkFiZLAyrQ by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       Just looked through the security assessment on the rust rewrite of core utils, and this is why just rewriting everything in the last language is such a dangerous things.  They literally threw out 20+ years of security fixes because they thought it was cool and would increase security.At least a security assessment was done, but some of those failures are pretty bad, and very likely to have had serious security implications if they were deployed into any real world system.  Setting mode bits incorrectly, TOCTOU, arbitrary file overwrites are just terrible.Would I have likely introduced some of the bugs if I had done the work?  Yes.  Would I have done the work?  No, I'm not that crazy.I do wonder if they did white box or black box when they copied functionality.  I'm suspecting black box because of some of the errors.https://github.com/Zellic/publications/blob/master/uutils%20coreutils%20-%20Zellic%20Audit%20Report.pdf
       
 (DIR) Post #B5pZFPeHKhAokoJnGK by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @stiiinYeah, probably not a record of how they prevented them in the future, but the point is that it's had a history compared to the new coreutils.The new product might be better or not.  As with all new things, you get a new set of problems.  Do you want an unknown set or a set that is decently known?
       
 (DIR) Post #B5pZFPouh9gFHnIHq4 by encthenet@flyovercountry.social
       1 likes, 0 repeats
       
       @stiiinAnd unsurprisingly, all the bugs are logic bugs, but the other question is, when was the last time the cp or rm or mv had a segfault or memory safety bug?Those utilities aren't a major source of memory safety bugs.  They're a source of logic bugs, and converting to rust doesn't magically fix logic bugs.Rewriting libjpeg or other file parsing libraries would be a more useful endeavor, less logic to get wrong, more likely to have memory safety issues in C.
       
 (DIR) Post #B6KKlisZtTKoFdiGjg by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @mwlHmm, looks like loader.efi(8) doesn't contain much help.I think you have to set an efi var because FreeBSD puts its loader in a non-standard location.  I'll dry to dig up more info since I remember having to deal with this a few years ago.#FreeBSD
       
 (DIR) Post #B6KNAt1tUZmosbCICW by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @putney @mwl Check out:https://wiki.freebsd.org/UEFIThat talks about using FAT16 instead of FAT32, and also using loader.efi.
       
 (DIR) Post #B6KNb6apgaHSTX2dlY by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @mwl @putney Yeah, I'm annoyed that the old boot man page has gone away, and other manpages like loader.efi doesn't contain this info.  I thought I had some fixes in my tree, but can't find them.  I'll try to dig them up later.
       
 (DIR) Post #B6UwqXQ3fVsXzmhBMu by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @eloyDon't make me try to make dns support it.I think I still host the decss source in DNS, so it's not that hard to embed a video stream into DNS packets.@domi
       
 (DIR) Post #B6f25geaXSnvh4su0m by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       @azonenbergI'm not familiar with floating point precision, but I take it that doing(i mod 2*pi) * (rate mod 2*pi)Doesn't solve things?
       
 (DIR) Post #B7RIFuHSgb3hvrqPFg by encthenet@flyovercountry.social
       1 likes, 0 repeats
       
       Ok, this is VERY weird.  My wife and I both received a "call" from each other via signal at about the same time, but neither of us called the other person.Part of the reason we know this is she was downstairs and asked if I had called her.  I hadn't, but just seconds before she asked my phone rang for a fraction of a second, and I confirmed that signal shows a missed call from my wife.#Signal
       
 (DIR) Post #B7kxV2KE7LZXoFx15k by encthenet@flyovercountry.social
       0 likes, 0 repeats
       
       As usual, a woman doing all the work that men should be doing.(Note she's only worth $30b, just to put into perspective how little the men are doing, especially the ones who pledged to give half their fortunes away.)> https://flipboard.com/users/Independent/statuses/bn7IdHoaT2264Lqf9w5Niw:a:1855170754