rkv

> If you really want to go to sleep, use pause() or similar. An infinite loop eats up CPU cycles

Yes but an infinite loop + sleep is okay, right?

> ASLR: Debian: Work in progress (Stretch / 2017).

From the dpkg-buildflags manpage:

> Additionally, since PIE is implemented via a general register, some architectures (most notably i386) can see performance losses of up to 15% in very text-segment-heavy application workloads; most workloads see less than 1%. Architectures with more general registers (e.g. amd64) do not see as high a worst-case penalty.

Is this the reason why the adoption of pie is so slow? Does rust enforce hardening techniques?

I use this in my development VM's, great free tool.

Tree Style Tab for me. I remember reading that it is not a matter of someone porting it to chrome but that the chrome UI does not support such tab flexibility. Sad times..

> Binary package for OS X >= 10.7

But I get:

> You have OS X 10.11.6. The application requires OS X 10.12 or later.

??

Edit: Looks like this is a known issue[1].

1. https://github.com/keepassxreboot/keepassxc/issues/181

>This is a situation where C++ really shines

I agree but passing in the size is really not much of a deterrent.

Regarding spam, if you are experiencing DDOS then CloudFlare (or alike) can be used. If you are referring to comment spam on the WordPress blog there are plugins to mitigate this[1][2].

For brute force login attacks, use recaptcha[3] or TFA[4].

Security by obscurity is not always welcomed, but I tend to change my WordPress login URL's from '/wp-admin` and never use 'admin' or 'root' as a username.

There is nothing you can do about WordPress remote execution bug's or worm attacks. If your version is affected you are going to have a bad time. Just remember to keep your WordPress installation up to date and jail your WordPress files and web processes as a regular user (ex: www-data) and database credentials as a non-root user.

Regular backups. It is fairly easy to restore a WordPress site from a backup if the site ever is hacked.

I apologize if I didn't answer your question. This is a not an easy problem and WordPress is one of the most targeted web platforms out there.

1. https://wordpress.org/plugins/si-captcha-for-wordpress/

2. https://akismet.com/

3. https://wordpress.org/plugins/wp-login-recaptcha/

4. https://wordpress.org/plugins/wpclef

Maybe:

- $5 DigitalOcean droplet

- WordPress

- WordPress theme[1]

- WP Subscribe plugin[2]

1. https://justfreethemes.com/themes/landing-page/

2. https://en-ca.wordpress.org/plugins/wp-subscribe

This is awesome!

Lot's of confusion here on what GraphQL is actually trying to accomplish. In no way were the authors of GraphQL attempting to replace or enhance SQL with the GraphQL language; they are two completely different entities. GraphQL sets out to solve annoyances that people run into while building and maintaining large RESTful services.

I'm surpised at how many programmers I meet who don't use a password manager. In my work alone I have over 30 credentials to remember and they expire.

An aside, I use KeePass and strictly use it offline with a secret key and passphrase. Browser integration and mobile and desktop KeePass apps are not really polished and all have their own quirks. I've noticed a huge audience of 1Password and other password managers that store the passwords in the cloud. The apps and integration look good but I can't justify trusting somone else to handle my data. Am I being too paranoid?

>I actually have fondest memories for Meccano

What really hooked me was that they were so well suited for electrical components. Adding gears to the axle and making it turn on its own.

>What about permissions? What if the logged in user is only allowed to see certain fields? Do I make a table that describes every possible field and which roles can access it?

GraphQL is permission agnostic which allows you to develop your own methods. But there are a lot of nice implementations floating around [1].

>How do I know what's available to query, without reading docs?

Introspection[2].

1. https://github.com/joonhocho/graphql-rule

2. http://graphql.org/learn/introspection

- Look at "skeleton" or "boilerplate" projects on GitHub. Don't copy the first one you find, make sure you review a handful and study how people are using the language and eventually make your own. Bonus if the project is from a contributor of the language.

- Some languages and frameworks have a "best practices" guide.

- RTFM!

- Iterate. Your first attempt will always feel hacky. Revisit it after more studying and practice.

It was my understanding that you cannot change the host or port when invoking SimpleHTTPServer that way.

I'd argue no. While you still receive all the syscalls that are made within each container, there is no way to differentiate those calls from ones made directly on the host. So no filtering or analytics can be made for containers. This is a known issue of the audit framework in Linux.

Whoever taught this thing what an asparagus is really screwed us all.

I completely disagree. C++ was not created to extend or enhance C; its an entirely new language providing backwards compatability only for legacy reasons. Using C in C++ introduces deficiencies and dangers that C++ was designed to overcome. As a C++ developer I come across a lot of code where people still use things like FILE* and close the handle in a goto. That should be frowned upon, there is no advantage for this method vs. using a stream; which handles the file handle while being scope bounded. Promoting the use of C in C++ is something terrible misguided and plain wrong.

>What is the evidence of this? Even if "truth" follows misinformation on Twitter, there's so much noise, how do you find it?

Do you use twitter? I see a lot of misinformation and rumors started by "journalists" which gain a lot of popularity but seemingly disapear once the true source confirms or denies said claims. And it is easy to navigate this on twitter. I'm mainly talking about sports or entertainment news.

With other forms of media the turnaround time is no where near as fast to (1) notify the source and (2) have the original poster edit their article.

I'd be interested in operating this with you. I see the appeal and have my own customer-base that would definitely want this type of product.

Is there any difference between this and Debian+Pantheon?

Are there any differences between this and Debian + Pantheon?

Please do! Great work.

Yes, see[1]. Another user also reported the UI defects using the light theme as well on 10.11.6.

1. https://gitlab.com/marathono/marathono/issues/5

Great tool.

On OS X 10.11 using a dark theme causes the menulet to color the padding of the UI elements which makes it difficult to see the entries in the list.

We usually stick to the official Debian python-* packages (if they exist upstream). When they don't we use python-virtualenv[1][2] to pull specific versions and dependencies from pip into a virtual env.

Now when we build our Debian package (debian/rules):

  override_dh_virtualenv:
    	dh_virtualenv -p myproj --use-system-packages

[1] https://github.com/spotify/dh-virtualenv [2] https://packages.debian.org/jessie/python/python-virtualenv

Not OP but we use Jenkins for our CI which has a plugin[1] which fails builds if a threshold is not met.

[1] https://wiki.jenkins-ci.org/display/JENKINS/Checkstyle+Plugi...

For Debian users: apt-get install hwloc-nox

https://cgdb.github.io/?

Only problems I see with this are (1) Blinking (2) Might have to simplify vocabulary

Tried it out. Very sleek with a nice ui but I fail to see the benefit or even the use of it. Why not just use Excel where you have access to hundreds of features (charts, vba, lookup tables, better filtering/sorting, validation, conditional formatting)? My suggestion, after trying it out, would be to add API bridging where they can populate tables from external data. Adding the right features (like ones that are difficult for users to do in Excel) could give this app some traction.