Viewing profile — marksomnian

To answer your question: > Does Debian already provide signature on .deb files (that is, provide a manifest of their hashes and and sign each)? Yes it does. If you look at https://…

That's exactly where I keep getting caught. I've looked at in-toto a number of times, and each time I've been left wondering "how is this better than a signed list of hashes?". Whi…

nginx (2004, ok, 22 years), ClickHouse (2016)

That data is in fact made publicly available by Network Rail: https://wiki.openraildata.com/index.php/TD though interpreting it isn't the easiest thing in the world...

It's not that unusual to have an interim CEO hold the reins (read: sign anything that needs the CEO's signature) while a permanent one is found.

In fact, uv's docs half-suggest this: > With uv, it turns out that it's often faster to omit pre-built wheels from the cache (and instead re-download them from the registry on each…

In my experience, the remote shell weirdness is usually because the remote shell doesn’t recognise ghostty’s TERM=xterm-ghostty value. Fixed by either copying over a terminfo with …

Site appears to be hugged to death, repo is: https://github.com/angristan/MacThrottle

Meta don’t use RSC: https://bsky.app/profile/en-js.bsky.social/post/3lmvwmr5rfs2... > We are not using RSC at Meta yet, bc of limits of our packaging infra (it’s great at different…

And `rails new` required me to install Ruby and Rails. I'm not sure what the point you're making is.

GitLab too: https://gitlab.com/gitlab-org/gitlab

Looks like the source the article is based around is https://www.diyphotography.net/develop-film-at-home-with-a-j... , which itself is a write-up of https://www.youtube.com/watch?v…

If I were a CodeRabbit customer, I'd still be pretty concerned after reading that. How can CodeRabbit be certain that the GitHub App key was not exfiltrated and used to sign malici…

> might be good to mention that for transparency, because people can tell anyway and it might feel slightly otherwise Devil's advocate: why does it matter (apart from "it feels wro…

I like this style. In a project I worked on we had CI reject any FIXMEs outright and any TODOs that weren't accompanied by an issue ticket[^1], so the hierarchy would be FIXME: I a…

O'Leary has form for this sort of ragebaiting - recall the non-stories about standing "seats" and paying to use the toilet.

> But a few instances were to conditionally set one piece of state whenever another piece of state was changed That use case is explicitly called out on the "You Might Not Need An …

From TFA: > Generally, this can be dealt with via policy and moderation to prevent abusive users from causing outsized load on systems, but these processes take time and can be imp…

> if a peaceful protest were to take place during the talk in question, we will not take action, provided the protest is indeed peaceful and does not disrupt the proceedings Would …

> Titanfall was a game that couldn't be made until the cloud What do you mean by this?

From an infosec perspective, as long as the queries are encrypted (with proper TLS verification), that angle is covered (though there are other considerations about data sovereigni…