158 karma · joined October 6, 2013
Do communities needs sticks to be driven one sided way like cows?
At this point it feels like they kind of defy their reason to be and are pretty misused.
Rule#1 of GUI every geometry manager will reinvent Tk/Tcl poorly saying it is crap.
https://hueniverse.com/2012/07/26/oauth-2-0-and-the-road-to-...
Whereas jails/zones/VM have a complexity that is mutualized, docker have a feature of being more flexible which comes at the price that you may introduce more escape scenari.
As a result like in cryptography, Docker is kind of a roll your own crypto solution, secured by obfuscation that may if you don't have a lot of knowledge on the topic your own poison.
From this article you can derive 2 conclusions:
- docker is good for a big business having enough knowledge to devote a specialized team for handling the topic, because FEATURES
- jails/zones are more adapted for securing small business
When you have the person actually having the bleeding edge knowledge, you can fund him or her to end the work and either publish it (prior act) or develop a usable result that can be patented.
But most of the effort, especially in countries with public education, has been supported by the taxes of the locals.
It is not USA the problem here. Europe and other place with public education are a bunch of bullied that are masochistic and love to be stolen.
When a company claims that it will only steal from foreign entities for your national interest, and never you because you are a special snowflake, it tend to lie.
A pathological thief will steal everyone as long as he is not stopped.
H1B is to get workers without loans from places where diploma have been paid often by public taxes.
Without loans you are more competitive than a worker having to reimburse them.
H1BrainDrain also have a power of captation of publicly founded research that can be patented. (That's why young PhD are so interesting)
It also undermines the competitivity of countries which miss their engineer and have to pay twice the knowledge they founded.
It also ostensibly discourage the workers from unionizing since they have no way of controlling a pool of workers that can leverage the offer.
On the macroscopic level H1B is possible because there is a distortion of competition on the job market.
H1B is heavily biasing the capacity of negotiation on the work market in favour of the companies which uses them.
A market in which you can not win and must play is not a fair game.
robotic voice You cannot. Ah ah! I am irresponsible since I do not qualify as having proven to understand what the public interest is, freedom or even humor... I am just a puppet in the hand of those who feed me with data and code.
[Klong] noises of a dwarf moving inside of the machinery.
robotic voice Let's have a nice chess game instead, and enjoy my mechanical Türk.
If you call linux: debian or ubuntu or centOS, even with unsafe defaults freeBSD is secured.
Compared to untuntu/debian/centOS freeBSD has got bleeding edge softwares coming from upstream. That is the power of SOURCE distribution. Theses packages being compiled it may suit you. I must admit FLAVORED packages (make.conf templates) make sense.
I remember being a linux sysadmins and building my openLDAP/python/php packages from source by hand that were 4 years old with envy wondering WHY?!
Since systemd and my migration to BSD I have no regrets.
PF, ipfw are way more powerful than any linux firewall tools.
I have upstream stable software in the stable distribution.
I don't have systemd.
I have jails... And I have no religion switching to openBSD for core servers that need security knowing I have very few knowledge costs in doing so.
And be it capsicum or privilege dropping I look at linux containers techno as a smoke screen for poor man's security through obfuscation.
My advice is be smart: don't trust me, but if you are in between experiment.
All they say is pages of trivia, and make no sense given how fucking stupid what they say is.
Just need some privacy, and lock picking will come without need for education to you.
Next day 7am: get into the truck, don't forget to sign the daily contract, pays is monthly at the end of the month. Come tomorrow at 7am, if you did your job correctly you will have another contract.
make menuconfig && make dep && make clean && make bzImage
It just work except when the System 7.5.3 was out and powerPC & 68K were coexisting.
The 'it just work' notably required to go in some arcane control to unfragment memory (yes RAM), and to do ctrl+ apple? + esc to kill unresponsive .... Adobe photoshop or illustrator on the PPC 7500 I used to maintain. THE application one needed.
The colometry profile for scanners and printers where not top notch, and well, real mac users (the one with a job) had to play with the devil switches and terminators on SCSI devices to put their work on external media...
We talk about graphist in the 90's here, not hardcore geeks.
The "it just works" was a lie. It was way more an expensive status tool.
The only stuff that differentiated mac users from PC users, was how much software they were cracking and sharing without any concerns or moral questions.
I sometimes feel the predominance of mac users among "top geeks" is a bad sign.
First steps of Steve Jobs back into apple was to kill the clones franchise.
My experience recently has been that all OS are having problems. Just to name a few : - HW vendors doing sub par drivers and documentations, and integration :you even have more than one HW for the same model; - ACPI - forced obsolescence of peripherals; - outsourcing is clearly related to loss in quality especially in HW; - too much packages and dependencies;
And still : most developers don't know how to do asynchronuous programming, and that is really a problem when everything is about handling events.
Still, randomness being random, one day should happen that there are too much winers some years. Else, maybe the cheaters are on the other side of the game.
I was finding something was weired and coincidently used an old brower with one of my old credential in it. Just coincidence. I did not even cared.
The explosion of transitions with the number of states is unavoidable by nature. It requires thinking and design on paper before implementing.
Here is example of hpib that includes the FSM for the communication. These people did a great job and yes it is hard
Apparently he claimed to have been harassed by the police, but he also was said to be incoherent and violent in his behaviours.
Bruce Perens unnicely -at my opinion that is not the most reliable in the world- disclosed his mental illness. 1 day after on his blog and /.
The family also asked for discretion. A wish that has been followed by the majority of the community. Except people like me. Because, well, I wanted to understand.
I tried to see for similar cases with google news what happened, and a non scientifically screening of hundreds of case in the USA would tend to suggests that if the victim is categorized mentally ill then news about police violence does not seems to make it higher than local news.
I am just a little pea on the internet, I have no way to confirm my conclusions are right. It would require a true journalistic investigation to infirm of confirm the case.
The conclusion I drew for myself having attended FOSS for 10 years as a topic organizer in conferences is the level of freaks tended to be higher than on average. Still not a scientific conclusion.
I naively expected the community to be aware of that. My naive expectation is that the society would recognize the positive contribution of FOSS to the IT thus to the economy and thus would try to push harder on this case.
Apparently I am naïve or delusive according to the feedback I had on this story.
Well, I encourage people to make their own opinions and investigate with their own means.
I am still a tad disappointed in my expectations.
I am french, I have read Clinton's email, and I think they try to avoid investigations. And some have a lot on their plate.
On one hand I think the country will be better without them, on the other one I still hope justice will be made. And I would like the welcoming countries to be aware some millionaires are rich by bending rules.
Maybe I only had _under brained_ CTO, but I always had problems in details. And even though I have been an architect/sysadmin, recently I went back to coding for others, because I prefer coding.
I saw a lot of mess in signaling the error code, or changing how to return them (is it an 5XX error or a { "status" : "bla", "error" : ... }) or even using the "PUT/GET/POST/DELETE" correctly.
Wrong handling of cache too... of HTTP headers, media type... authentication ...
Also trying to make distributed transactional systems without synchronized clocks on server (and with unsecure NTP source because editing the default ntpd.conf is sooooo hard). And denying the need of FSM for distributed REST servers because REST is supposed to be stateless. (lol)
Or the specs of rest limited to a nice HTML page with one example of the "right case" and no descriptions of the types and no informations on how errors are handled.
On the paper REST is great. In practice ... Oh boy. It is the PHP of messaging.
4 in C when I code for fun or the lead says 4.
In fact 4 is a pretty decent visual aid and not to big for my use of 80 car/lines 25lines max per functions/method that I respect religiously and loosely) since 1998. I think being able to see the whole code without scrolling on a VT is kind of preparing yourself for the worst case (debuging in prod with vi/emacs or notepad) where attention is the key point under stress. Prepare yourself for the worst, the worst may happen.
In python, well, I pray that the lead does not mix tabs and space. Because, what a beautiful idea to have made indistinguishable characters significant. That is one of my huge beef with python as well as the inability to control the scope of variables (hence preventing strictures).
So I have strong opinions, but the lead wins when the lead is a benevolent dictator that proved to be right very often (like linus, theo, guido...).
The one who lead the project to its success makes the rules and as long as the project is going a way I like, I follow the guidelines happily.
If too many errors happens, the checksum can be correct even though the content is corrupted.
Hum... I know what you think: ThisShouldNeverHappen
When exploited by human it is called a collision attack. Works pretty well, so many people trust but never check.
As if one man was the Nation and that people had no rights on their own lives and could not have a free will.
These games are wrong on so many level.
Some RPG can transform your psyche, like the jail experiment in SF has proven. Civlization/colonization have let me with a bitter taste in the mouth as a player once I realized how it was making me think, in the real world.
Since then, I uninstalled all of these games.
I think this article about muv luv is right on spot : http://tay.kinja.com/why-the-muv-luv-saga-is-the-greatest-st...
REST is based on a lot of optimism. Security is based on a lot of pessimism.
Building is a sane balance between both. Basically, you build slow to secure stuff.
Remember cathedrals were built for centuries by dedicated generations of small teams of highly skilled non compromising masons.
That's the way you build security. At the right speed.
openBSD is a going a tad too fast, and is a tad too big, but it is still quite secure and functional.
The problem is industry is wishing to make it go faster by throwing more unqualified man power creating a Babel tower effect.
Well, it does not seems to work.
http://c2.com/cgi/wiki?KornShellStory
Let's wait to see if it has all the horrible features making it a security hole.
Whatever the DRM technique you have can always put in a low noise chamber a cam/microphone to make a close to the original reproduction by analogic means you can re-publish.
People used to enjoy watching videos in 1024x768x16bpp and hearing is satisfied with 46KHz
More than what can be achieved in AAD, or ADD chains.
DRM is a chimera. It costs money and IP laws are flawed at the contractual level.
Since Louis XIV when _lettre de Patentes_ where invented the deal was exclusivity granted to invest in new content versus free public domain when exclusivity disappears.
Disney/Sony music are recycling public domain in so called original works (Grimm tales, 1900 pop songs converted in Rap melodies ...) hence breaking the deal. And exclusivity is getting WAY overboard. As if chosen authors where the new nobility of culture, while street art is being stolen by galleries and real artists lives in misery.
Plus, except Gutenberg close to none public domain contents are cheaper than new one, while paying the artists are said to be the greatest expense.
Try to find the integral of Shakespeare, Molière, The 1001 night tales for a decent price.
What amaze me is the tendency for our society to call for more privacy that favors the more powerful, hence the more likely to be corrupted.
If we want make it easy for our leaders to be corrupted I definitively would call for more cryptography.
Me except the normal "shameful" stuff from the common people I want privacy to. Like anyone I have stuff I want to hide. But, it is okay if I get _caught_. I will not say everything I did is okay, because, I still have hurt indirectly people. There are stuff I want to hide to protect myself from the intolerant crowd.
But guess what, I have as much as I could went to present my excuses, and took responsibility for my own shitty actions. And for the stuff I should not be ashamed of, I don't see the need to hide it, in a democracy we have the freedom to fight for our opinions.
None of my stupid stuff requiring privacy have been leading to blood being shed, exploitation, or making the market noncompetitive.
With greater power/wealth should come greater transparency. And iPhone are definitively more expensive than most phones.
So let's remember that is often the look from the others that makes us more virtuous, and let us all accept to live in an house made of glass (except for the bathroom, and the bedrooms).
In a fair competitive market access to information is symmetrical. In a real democracy government are expected to be openly enforcing the choices of the voters.
In a world tending towards virtue, there is no need for more privacy.
The guy come with his values, has money, changes people life, and think it is okay because by his own standards he did good.
That's it. The one who got the power makes the rules, and who cares about the weak?
Why cannot they be born in another place? The deserved it. Not your fault. You were lucky at the lottery of life and why feel bad about it?
And then add a cynical layer of "look at all the improvement our culture/money is bringing the locals". How these ungrateful dare spit on money? Bringing the superiority of your culture while connecting with the nature unspoiled by the masses.
Why people don't understand that it is better dying having a job, than maybe be poor with but sharing your life with your beloved one? Surprising no?
Yes, why would people dare want to live in dignity when they are not born lucky?
Some people never amazed me at being so naively arrogant.
I really wonder why some people don't like this kind of attitude.
Btw, I would also like to live in dignity from a work that is reasonable without killing me. I have the right to not like to work especially when the sharing is far from being fair and I cannot see my wife.
So I think it is far from only Nepalese that may be angry in the world right now.
A map is not the territory it represents, but, if correct, it has a similar structure to the territory, which accounts for its usefulness.
— Alfred Korzybski, Science and Sanity (1933, p. 58)Mass transportation is an example of industry where half life is decades/century. Fast for this sector is slower than what the life expectancy of a coder represents.
Games made to support a product ad are ephemeral, 1 month. Faster than a new release of firefox.
Some dangerous radioactive isotopes are 10000 years. So nuclear plant related automation should not be using any CPU.
A citizen data should last for the government as long a citizen live. Government if they aim at remaining stable should consider the half life of their automation to be long, way long. Hence slow changes. Very slow
So do banks. But banks have to adapt with the speed of trades.
Fast and slow can be set by doing something agile hates: careful business analysis.
The problem is how we coupled all the businesses with insane costly rhythm that are forced down on every economical activities by the mean of noncompetitive business practices. Like useless obsolescence driven by HW monopolies, cheap energy, cheap regulated and poor education.
Do we really need 1 Pb hard drive when entropy predicts we will not be able to find any relevant information given we have to much data without increasing the means involves in costly ways?
We don't need fast changing technologies, we need boring, slow changing technologies that are reliable.