Readit News logoReadit News
marcosdumay commented on Disks Lie: Building a WAL that actually survives   blog.canoozie.net/disks-l... · Posted by u/jtregunna
1718627440 · 5 hours ago
> Unix is dumb

I don't know. Now async I/O is all the rage and that is the same idea.

marcosdumay · 5 hours ago
The syscall is literally called "sync", though.
marcosdumay commented on Poor Johnny still won't encrypt   bfswa.substack.com/p/poor... · Posted by u/zdw
nine_k · 2 days ago
This is a difference in the threat model.

Signal's threat model is that everything around you is hostile to you, except the parties you interact with. You are an undercover rebel in a totalitarian sect which would sacrifice you to Cthulhu if they see your chat history. Losing it is much better than disclosing it.

Your threat model is likely random black hat hackers who would try to get into your communication channels and dig some dirt to blackmail you, or to impersonate you to scam your grandmother out of several thousand dollars. Signal protects quite well against it. But the chance of this happening even in an unencrypted channel is low enough. You don't mind making the security posture somehow weaker, but preserve the possibility to restore your chat history if your secure device is lost or destroyed.

I suppose the problem could be solved by an encrypted backup with a long key which you keep on a piece of paper in your wallet, and / or in a bank in a safe deposit box. Ideally it would be in the format that the `age` utility supports.

But there is no way around that paper with the long code. If this code is stored on your device, and can be copied, it will be copied by some exploit. No matter how inconspicuous a backdoor you are making, somebody will find it and sneak into it. Should it happen in a publicized case, the public opinion will be "XYZ is insecure, run away from it!".

marcosdumay · a day ago
> If this code is stored on your device, and can be copied, it will be copied by some exploit.

Yeah... We really need some key-management hardware where the secrets can be copied by some channel that is not the primary one. This used to be more common, before the IT companies started pushing everything into the cloud.

I have recently started to see computer boards with write protection for the UEFI data, what is a related thing that also did go away because mostly of Microsoft. So, maybe things are changing back.

marcosdumay commented on Async DNS   flak.tedunangst.com/post/... · Posted by u/todsacerdoti
paulddraper · 2 days ago
IO can fail at any point though, so that’s not particularly bad.
marcosdumay · 2 days ago
It's particularly bad because thread interruptions are funneled into the same system as IO errors, so it's easy to consume them by mistake.

Java has that same issue.

marcosdumay commented on Microservices should form a polytree   bytesauna.com/post/micros... · Posted by u/mapehe
throwaway894345 · 2 days ago
I agree with this, and also I’m confused by the article’s argument—wouldn’t this apply equally to components within a monolith? Or is the idea that—within a monolith—all failures in any component can bring down the entire system anyway?
marcosdumay · 2 days ago
> wouldn’t this apply equally to components within a monolith?

It's a nearly universal rule you'll want on every kind of infrastructure and data organization.

You can get away for some time with making things linked by offline or pre-stored resources, but it's a recipe for an eventual disaster.

marcosdumay commented on Programmers and software developers lost the plot on naming their tools   larr.net/p/namings.html... · Posted by u/todsacerdoti
dylan604 · 3 days ago
Americium, Einsteinium, Unobtanium also show chemistry isn't so uptight as suggested.
marcosdumay · 2 days ago
> Unobtanium

I think you mean Unununium.

marcosdumay commented on Programmers and software developers lost the plot on naming their tools   larr.net/p/namings.html... · Posted by u/todsacerdoti
orthoxerox · 3 days ago
To quote bash.org (or qdb.us?), you have to talk to tar with a German accent:

    tar xzf file.tgz
where xzf stands for "extrakt ze feil"

marcosdumay · 2 days ago
It's `xaf`, because the modern world is way too complex for simple Germanic rules to solve it.

But GNU tar was never the issue. It's almost completely straight forward, the only problem it has is people confusing the tar file with the target directory. If you use some UNIX tar, you will understand why everybody hates it.

marcosdumay commented on Programmers and software developers lost the plot on naming their tools   larr.net/p/namings.html... · Posted by u/todsacerdoti
isoprophlex · 3 days ago
I just remember it as "Da Disk", early 2000's nu metal lyrics-style, because it does mad things to da disk, yo.
marcosdumay · 2 days ago
I guess the most relevant backcronym expansion is still "Disk Destroyer"
marcosdumay commented on The Tor Project is switching to Rust   itsfoss.com/news/tor-rust... · Posted by u/giuliomagnifico
jfindper · 2 days ago
>better portability across operating systems

Does Rust have better portability than C?

marcosdumay · 2 days ago
Depends on what C code you are talking about.
marcosdumay commented on The Tor Project is switching to Rust   itsfoss.com/news/tor-rust... · Posted by u/giuliomagnifico
N_Lens · 3 days ago
Rust - "I am inevitable"
marcosdumay · 2 days ago
Unless you use aluminum or stainless steel...
marcosdumay commented on French supermarket's Christmas advert is worldwide hit (without AI) [video]   youtube.com/watch?v=Na9Vm... · Posted by u/gbugniot
ekjhgkejhgk · 4 days ago
I remember a time when using computer was not well seen when creating art.

Wasn't it even Tron who didn't qualify for the special effects oscar because they "used computers"?

It's interesting that it's no longer "computer bad", now it's "AI bad".

marcosdumay · 3 days ago
You cold find plenty of people complaining about CGI up to earlier this year.

Computers are bad, unless used by exactly the necessary measure to add to the story. Then they are great. But most movies don't do that, and you can see the actors not reacting to the scenes they are in because they have no idea what's actually happening.

The same will probably happen to AI, with also most people overdoing it and making bad stuff. Forever.

u/marcosdumay

KarmaCake day30397September 18, 2012
About
My page:

https://marcosdumay.com

A couple of projects:

https://sealgram.com

A set of email extensions that make it possible to run a PKI over SMTP, making email privacy easy to achieve.

And, besides the extra privacy, the PKI needed shared data and access control, what led me to create a DAV-like system, that lets you share your mailbox over the net, by granting capabilities.

http://marcosdumay.com/rapid-django

A CRUD generator for DJANGO, 'cause I couldn't find any good one.

View Original