Readit News logoReadit News
rkangel commented on GitLab discovers widespread NPM supply chain attack   about.gitlab.com/blog/git... · Posted by u/OuterVale
mcny · 18 days ago
> But protecting specific directories is just whack-a-mole. The real fix is to properly sandbox code - an access whitelist rather than blacklist

I believe Wayland (don't quote me on this because I know exactly zero technical details) as opposed to x is a big step in this direction. Correct me if I am wrong but I believe this effort alone has been ongoing for a decade. A proper sandbox will take longer and risks being coopted by corporate drones trying to take away our right to use our computers as we see fit.

rkangel · 18 days ago
Wayland is a significant improvement in one specific area (and it's not this one).

All programs in X were trusted and had access to the same drawing space. This meant that one program could see what another one was drawing. Effectively this meant that any compromised program could see your whole screen if you were using X.

Wayland has a different architecture where programs only have access to the resources to draw their own stuff, and then a separate compositor joins all the results together.

Wayland does nothing about the REST of the application permission model - ability to access files, send network requests etc. For that you need more sandboxing e.g. Flatpak, Containers, VMs

rkangel commented on Await Is Not a Context Switch: Understanding Python's Coroutines vs. Tasks   mergify.com/blog/await-is... · Posted by u/remyduthu
rkangel · 20 days ago
I think this article is missing the point a bit.

It's saying that the action of calling an async function (e.g. one you've written) isn't itself a yield point. The only yield points are places where we the call would block for external events like IO or time - `await asyncio.sleep(100)` would be one of those.

This is true, but surely fairly irrelevant? Any async function call has somewhere in its possible call tree one of those yield points. If it didn't then it wouldn't need to be marked async.

rkangel commented on Pebble Watch software is now open source   ericmigi.com/blog/pebble-... · Posted by u/Larrikin
apparent · 22 days ago
Thanks for explaining this. Would you estimate that the January units will be more likely to have issues than the later ones, since they'll be first off the line? Or will there be no changes to the components/process that might make the later units more reliable?
rkangel · 21 days ago
A good manufacturing process (with the appropriate level of testing) should result in yield variations, not quality variations. i.e. if the line is running less well for some reason, then you end up throwing more in the bin rather than shipping bad product.
rkangel commented on Cloudflare Global Network experiencing issues   cloudflarestatus.com/inci... · Posted by u/imdsm
lpcvoid · a month ago
Can we at some point acknowledge that constant cloud disruptions are too costly, and can we then finally move all of our hosting back on-prem?
rkangel · a month ago
I would only consider doing stuff on-prem because of services like Cloudflare. You can have some of the global features like edge-caching while also getting the (cost) benefits of on-prem.
rkangel commented on Core Devices keeps stealing our work   rebble.io/2025/11/17/core... · Posted by u/jdauriemma
lanyard-textile · a month ago
This is not good.

> We’ll compromise on almost everything else, but our one red line is this: Whatever we agree on, there has to be a future for Rebble in there.

I can see through to the good intentions, but this mindset has a very dangerous sandbagging risk to the other party.

Could you imagine a company forcing you to exclusively use them and only them as a vendor for the foreseeable future? Not just for a single contract, but for many contracts beyond it? Or one especially long contract?

That’s just not fair.

There are some other red flags here too. I am not convinced they have the ability to license a database they themselves scraped, nor if there’s any obligation to merge the particular code changes if any back upstream.

rkangel · a month ago
That's not what they're demanding (or at least, that's only one way of giving them what they're demanding).

A legal guarantee that they'll allow people to configure their watches for an alternate app store would probably be sufficient, for instance.

rkangel commented on Steam Machine   store.steampowered.com/sa... · Posted by u/davikr
BlindEyeHalo · a month ago
Turns out that a company that is not publicly traded and run by people that only care about stock prices, can actually care about their customers.
rkangel · a month ago
There's all sorts of things you can do if you don't care about money.

The more interesting point is that if you aren't driven by investors to care about short term financial stuff (stock prices) then you can make long term decisions. Caring about your customers is a classic one for this - costs you money in the short term, but in the long term gets you a great customer base.

rkangel commented on Steam Machine   store.steampowered.com/sa... · Posted by u/davikr
jorvi · a month ago
It looks way too chunky, just like the original Steam Controller, Steam Deck or original duke Xbox controller. Not everybody has Jack Reacher hands.

Microsoft really did it right with the XSX controller. They took the old X360 / Xone design (perfect for large and medium hands) shrunk it slightly and then added cut-outs and and angled button surfaces (perfect for medium and small hands). The Elite is similarly good, with the back buttons being elongated and thin, meaning everyone can reach them comfortably without them getting in the way.

rkangel · a month ago
As someone who has big hands (not chunky, just long fingers), I find the Steam Deck sooo comfortable and satisfying to hold. I still use my Nintendo Switch from time to time, but holding it now feels like it was designed for a child (which it was!).
rkangel commented on Valve is about to win the console generation   xeiaso.net/blog/2025/valv... · Posted by u/moonleay
acdbddh · a month ago
As much as I love hacking with various things, there are reasons why I buy "closed products" for myself and for my family. I like to do hacking when I want it (with ESP32, rpi etc). I don't want to be forced to serve as a free IT support guy anytime someone presses a wrong button.

When it comes to gaming consoles, I want them to serve reliably to my family. The game console must be fun, optimized for best experience and should not break. Will that be possible with an open platform where anyone can install anything?

rkangel · a month ago
If you buy a Steam Deck and just use it as a handheld console and never select "reboot to desktop mode" it will act just like a closed console. The exceptions compared to something like a Switch:

- For some games (usually those oriented around keyboard and mouse) you need to go and select one of the community control configurations, and maybe tweak it a bit. For example, I needed to do this with FTL to make it easily playable

- Occasionally (and I've basically had to do this once, in my 2+ years with a Steam Deck) you need to go and select a different Proton version to make it work. ProtonDB tells you what to do

This is all rare though. The vast majority of games have a control setup for using a controller, and they definitely do if they've ever been released on console. And they will Just Work.

rkangel commented on Valve is about to win the console generation   xeiaso.net/blog/2025/valv... · Posted by u/moonleay
Normal_gaussian · a month ago
Probably not. Kernel level anti cheat is the problem. I know BF6 isn't proton safe. Fortnite is the same.

GTA VI will probably run single player on proton fine, GTA V does. Multiplayer will probably not.

The multiplayer with kernel level anti cheat will keep Sony safe through at least another generation; Microsoft is less safe as they're so vulnerable this generation anyway.

rkangel · a month ago
There's a circular opportunity though - if the SteamOS market share gets anywhere, then it might become worth it for these developers to support anti-cheat on the that platform. Some systems (notably BattleEye) actually have Linux support, they just need to enable it, but there's no incentive for them to do so.
rkangel commented on I took all my projects off the cloud, saving thousands of dollars   rameerez.com/send-this-ar... · Posted by u/sebnun
rkangel · a month ago
The irony is that I went to read this article and encountered the Cloudflare error "521: Web server is down".

u/rkangel

KarmaCake day7612September 22, 2011View Original