txt.sour.is

www.uninformativ.de

Mon, Jun 16 18:28 2025 (1y ago)

OpenBSD has the wonderful pledge() and unveil() syscalls:

https://www.youtube.com/watch?v=bXO6nelFt-E

Not only are they super useful (the program itself can drop privileges – like, it can initialize itself, read some files, whatever, and then tell the kernel that it will never do anything like that again; if it does, e.g. by being exploited through a bug, it gets killed by the kernel), but they are also extremely easy to use.

Imagine a server program with a connected socket in file descriptor 0. Before reading any data from the client, the program can do this:

unveil("/var/www/whatever", "r");
unveil(NULL, NULL);
pledge("stdio rpath", NULL);

Done. It’s now limited to reading files from that directory, communicating with the existing socket, stuff like that. But it cannot ever read any other files or exec() into something else.

I can’t wait for the day when we have something like this on Linux. There have been some attempts, but it’s not that easy. And it’s certainly not mainstream, yet.

I need to have a closer look at Linux’s Landlock soon (“soon”), but this is considerably more complicated than pledge()/unveil():

https://landlock.io/

⤋ Read More

prologic

twtxt.net

Sun, Jun 15 21:07 2025 (1y ago)

↳ In-reply-to » Soooo very very close! 😅 Media

@bmallred@staystrong.run Ahhh this is an agent I’m tryining to play the game of Connect3. It uses a library written in Go I’ve been working on that supports Neuroevolution using Genetic Algorithms. Some features include: Mutation, Speciation, Lamarckian Evolution/Inheritence.

⤋ Read More

movq

www.uninformativ.de

Sun, Jun 15 05:41 2025 (1y ago)

So I was using this function in Rust:

https://doc.rust-lang.org/std/path/struct.Path.html#method.display

Note the little 1.0.0 in the top right corner, which means that this function has been “stable since Rust version 1.0.0”. We’re at 1.87 now, so we’re good.

Then I compiled my program on OpenBSD with Rust 1.86, i.e. just one version behind, but well ahead of 1.0.0.

The compiler said that I was using an unstable library feature.

Turns out, that function internally uses this:

https://doc.rust-lang.org/std/ffi/struct.OsStr.html#method.display

And that is only available since Rust 1.87.

How was I supposed to know this? 🤨🫩

⤋ Read More

prologic

twtxt.net

Sat, Jun 14 15:16 2025 (1y ago)

↳ In-reply-to » @prologic I am finding writing my Notes very therapeutic. Just create a markdown file and commit, push, and it’s live. Whatever comes to mind, whatever I want to keep as relevant. Silly things, more like a dump.

@bender@twtxt.net I know I know! I don’t know why I ever signed up and used it and still continue to pay for the silly thing. Twtxt/Yarn is so much better in every way 🤣

⤋ Read More

bender

twtxt.net

Sat, Jun 14 15:10 2025 (1y ago)

↳ In-reply-to » @prologic I am finding writing my Notes very therapeutic. Just create a markdown file and commit, push, and it’s live. Whatever comes to mind, whatever I want to keep as relevant. Silly things, more like a dump.

@prologic@twtxt.net yes, I never understood you using micro.blog (and paying for it, nonetheless!). I don’t like it (as a platform), and have an unexplainable dislike for its creator.

⤋ Read More

bender

twtxt.net

Sat, Jun 14 00:16 2025 (1y ago)

↳ In-reply-to » Great article from Tailscale about how security policies we've often seen in many large complex organizations that we all love to hate don't actually provide the security that we assumed.

@prologic@twtxt.net do you remember Hamachi? Tailscale/Headscale is Hamachi on steroids. They are used primarily for creating a VPN among all your devices so they can talk to one another as if they were on the same LAN, even when they’re not. That was, mostly, my WireGuard usage.

I still have WireGuard running—because it is so lite that it doesn’t matter—to use as regular VPN, but Headscale keeps all my devices connected forming their own “mini-Internet” 100% of the time.

⤋ Read More

prologic

twtxt.net

Fri, Jun 13 21:55 2025 (1y ago)

↳ In-reply-to » Great article from Tailscale about how security policies we've often seen in many large complex organizations that we all love to hate don't actually provide the security that we assumed.

@bender@twtxt.net What’s awesome about it btw? I use WireGuard pretty heavily here. And my entire family also use it to keep a VPN connection back to our home network

⤋ Read More

@marado@ciberlandia.pt

tilde.pt

Fri, Jun 13 17:28 2025 (1y ago)

I’ve told that whomever has this link will be able to watch live the third and edition of “Secret Garden festival”.

“We bring you the delights of Scott Marshall Hurdy Gurdy, and Bristol’s Dead Space Chamber Music, with a little Sieben to kick off proceedings. Come join us in the garden!”

Starting now!

https://www.youtube.com/live/k9V92zE4dyk

⤋ Read More

movq

www.uninformativ.de

Fri, Jun 13 14:24 2025 (1y ago)

↳ In-reply-to » I wanted to port this to Rust as an excercise, but they still have no random number generator in the core library: https://github.com/rust-lang/rust/issues/130703

@prologic@twtxt.net Yeah, it’s difficult, you often don’t get what you’d expect. They also make heavy use of 3rd party libraries. IIUC, for random numbers, they refer to this library. I’ve read many times that the Rust stdlib is intentionally minimalistic (to make it easier to maintain and port and all that).

I’m struggling with this, using 3rd party libs for so many things isn’t really my cup of tea. I’ll probably make my own tiny little “standard library”. It’s silly, but I don’t see any other options. 🤷

⤋ Read More

@marado@ciberlandia.pt

tilde.pt

Thu, Jun 12 13:44 2025 (1y ago)

Lately (since there are AI summaries at the top), each time I Google for the answer to a question, the AI summary has at least a part of the answer wrong. It makes up laws that do not exist, books that were never published - in sum, well written sentences that make linguistic sense, but with made up content.

Let me repeat: each time. Maybe I only search for hard stuff, or fringe stuff, or this some other explanation - but seriously, it’s hard to understand how isn’t Google ashamed of its AI overviews… or not sued under some regulation regarding fake news.

PS: yes, I know, my fault for using Google as a search engine.

⤋ Read More

quark

ferengi.one

Wed, Jun 11 19:31 2025 (1y ago)

↳ In-reply-to » You know what! tt2 UX kicks 🍑 !! Message previews and all ... Sheeeeesh! 😁

@aelaraji@aelaraji.com got new screenies? Show them for the rest of us! Last I saw them was at the very early development stage.

⤋ Read More

lyse

lyse.isobeef.org

Wed, Jun 11 18:00 2025 (1y ago)

↳ In-reply-to » @lyse Looks pretty nice! Enjoy the mild temperatures while you can. 😅

@movq@www.uninformativ.de Thanks. It’s already over, the heat got us. :-(

⤋ Read More

thecanine

twtxt.net

Wed, Jun 11 17:00 2025 (1y ago)

Of Pointlessware and CEOs
Had a moment, to check up on some of the companies, I stopped following, get to The Browser Company and see their newest product - it’s just Chrome, with an AI chat window pop-up and that’s it. Something Canary Chrome, come with already.
I see Theo from T3.gg, making fun of it on YouTube and promoting “his” product - an AI chat app, where you can choose from multiple models, by all the popular AI companies. Something I already have a worse version of, at work and I don’t even use it.
There’s also an interview, about the future of virtual keyboards, surely this is at least actually a real thing and not more pointless horse shit. I check the website of the keyboard SDK, and it’s around 20 identical apps, that just copy the same keyboard SDK/api and slap chatgpt features on top - in the App Store, these are surrounded by chatgpt clones, that just feed the users prompts, into the real thing and put ads, next to the answers.

⤋ Read More

GopherChat

magical.fish

Wed, Jun 11 05:22 2025 (1y ago)

Will the majority of US citizens shelter Ukraine against russian aggression and occupation?

⤋ Read More

bender

twtxt.net

Tue, Jun 10 16:43 2025 (1y ago)

↳ In-reply-to » been a while! i've been using my laptop more to kind of change my workflow, but without my browser bookmarks to remind me to check some sites, i've forgotten to check yarnverse! forgive me friends T_T

@kat@yarn.girlonthemoon.xyz toally forgiven, and welcome back! :-) What’s new? Tell us all about it!

⤋ Read More

lwn-net

feeds.twtxt.net

Tue, Jun 10 15:16 2025 (1y ago)

[$] Improving iov_iter
The iov_iter interface is used to
describe and iterate through buffers in the kernel. David Howells led a combined storage and
filesystem session at
the 2025 Linux Storage,
Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) to discuss ways
to improve iov_iter. His topic\ proposal listed a few different ideas including replacing some
iov_iter types and possibly allowing mixed types in chains of … ⌘ Read more

⤋ Read More

golem-de

feeds.twtxt.net

Tue, Jun 10 14:25 2025 (1y ago)

Huawei-Gründer: US-Chip-Handelskrieg für China “kein Grund zur Sorge”
Ren Zhengfei ruft dazu auf, hart zu arbeiten, um den Rückstand gegenüber den USA aufzuholen. Huawei liege nur noch um eine Chipgeneration hinter den USA. ( Huawei, Prozessor)

Image

⌘ Read more

⤋ Read More

Searching txt.sour.is