brewmarche

vor 9 Stundendiscuss

If scoping were actually viable, public CAs could also sign your private intermediate CA with a name constraint and it would be trusted everywhere.

brewmarche

gesterndiscuss

Python for example, although nowadays you can simply install pip_system_certs to change that behaviour.

A lot of non-language tools bring their own certificate bundle as well, like uv, git, curl and Firefox. (I think they might all be the same Mozilla bundle even).

However, it seems like the situation here has improved slightly: git can read Windows certificates now once a flag has been set, Firefox has a flag for Windows and macOS, and it supports p11-kit. curl can be built with Windows/macOS support and respects OpenSSL environment variables. uv can be configured to use system-certs.

And obviously any VM or container has to be set up separately. That often includes stuff like pipelines in forges. As mentioned in the sibling comment, at least here it's definitely by design.

brewmarche

vor 8 Tagendiscuss

MacPorts is still around and is a perfectly viable package manager, I prefer it over homebrew

brewmarche

vor 9 Tagendiscuss

  Location: Germany (UTC +1/+2), EU citizen
  Remote: preferred
  Willing to relocate: no
  Technologies: C# and previously C++ and Java, prefer functional style and privately dabble with F# and Haskell. I know SQL, Azure, Docker, high performance computing (Monte Carlo simulations), see also CV
  CV: https://stash.ldr.name/wwtbh/rcv-202607-76ff.pdf
  Email: whoshiring-76ff /-\T ldr D()T name

I work in mathematical finance so a lot of domain knowledge in that area (derivatives, pricing, probability theory).

I am looking for work in other domains as well.

Happy to provide you with a full CV personally.

brewmarche

vor 10 Tagendiscuss

IIRC Apple actually helped with MacPorts in the beginning

brewmarche

vor 20 Tagendiscuss

And with ULAs (fd00::/8) you can pick your own prefix. Officially you should pick a random one to prevent collisions when you connect private networks, but you can choose something memorable if you don’t care about that

brewmarche

vor 20 Tagendiscuss

Now with Unicode we actually have even more:

NL Next line (from EBCDIC?)

LS Line separator (invented by Unicode)

PS Paragraph separator (same)

The Unicode standard says that in addition to CR, LF, CRLF and the above, vertical tabs and form feeds should also be treated as line separators.

brewmarche

vor 20 Tagendiscuss

I wonder why in Windows 10 and 11 there is no obvious way to cancel this dialog. You can press Esc, but there are no buttons to do it.

brewmarche

letzten Monatdiscuss

I was hoping for a small phone as well since I’ve read rumours about the display being 5.3in when folded. However it also said 7.8in unfolded, which implies 4.1in × 3.3in folded… quite big and squarish.

brewmarche

vor 2 Monatendiscuss

Your comment put me on a side quest to research the differences between i.e., e.g., viz. and sc. and I have to admit that I’m still not 100% sure

brewmarche

vor 2 Monatendiscuss

Looks like I forgot to answer the other half :) Yes you can pin a specific Python like `uv python pin cpython-3.14.0-macos-aarch64-none`, it will create a `.python-version` file which will be respected when you’re in the directory.

brewmarche

vor 2 Monatendiscuss

Yes you can set it via an environment variable (UV_NATIVE_TLS=true) or in your uv.toml (native-tls = true). However, check the docs, I think they are renaming it to sytem-certs.

brewmarche

vor 2 Monatendiscuss

Without HTTPS someone could alter the content, spread false information, inject ads, malware, and other stuff, redirect to some other site, …

(This is a general remark, but it goes for a blog post like this as well.)

brewmarche

vor 2 Monatendiscuss

I thought that podman uses jails under the hood on FreeBSD, but it is a guess. The podman code seems to reference jails: <https://github.com/search?q=repo%3Acontainers%2Fpodman%20fre...>

But jails of course are older and can be used on their own, I didn’t want to imply they’re the same thing

brewmarche

vor 2 Monatendiscuss

My experiences from dabbling with it a few months ago:

In general everything needs to be compiled for FreeBSD, but the ports collection is quite extensive. For example you will find Firefox, wayland, GNOME, KDE, xfce, … even dotnet was on there.

Problems arise with properietary stuff like Spotify, Widevine DRM etc. However, FreeBSD has a Linux emulation layer (providing syscalls), dubbed ‘Linuxulator’. I managed to run the Spotify Linux desktop client but the Spotify website wouldn’t let me log in, didn’t research further. AFAIK the emulator is limited though, not implementing all syscalls.

There is also podman for FreeBSD and in addition to running FreeBSD containers (using Jails under the hood I guess?) it can run Linux containers as well (using the Linuxulator in addition then?).

It also comes with a hypervisor called bhyve if you want to run VMs

There is a handbook on their website describing how to set up a system (including desktop environment) if you want to give it a go.

brewmarche

vor 2 Monatendiscuss

Also, some layouts use shift lock (so actually turning 1 into !) instead of caps lock

brewmarche

vor 3 Monatendiscuss

This sounds like the idea behind mutation testing

brewmarche

vor 3 Monatendiscuss

Maybe give terminal windows in vim a try? vim is not a terminal multiplexer, but if all you need is multiple terminals windows:

:term to open a terminal in a new vim window (or :vert term)

Standard window movements apply (by default the window prefix is Ctrl-W), most important are: Ctrl-W,{hjkl} to switch between windows, Ctrl-W,{<>+-} to resize windows, Ctrl-W,{HJKL} to move windows to edges, Ctrl-W,{qc} to (force) close windows

Enter normal mode of a terminal buffer with Ctrl-W,N: now you can perform vim motions and scroll the output

Enter insert mode with i and you can type into the terminal again

In insert mode: Ctrl-W "x to paste register x, Ctrl-W . to send a literal Ctrl-W. If too annoying, you can change the window prefix of vim

This goes for vim, neovim also has a terminal mode but it works differently I think

brewmarche

vor 4 Monatendiscuss

I think on the sending side, being able to send from others’ addresses is fixed by now: https://userforum-en.mailbox.org/topic/anti-spoofing-for-cus...

But it definitely used to be possible, I tried once with success.

Anti spoofing for incoming mails was not perfect the last time I checked either, but is a different issue.

brewmarche

vor 4 Monatendiscuss

Yes, you are right, quite literally, as RFC 6296 is marked ‘experimental.’

brewmarche

Submissions

How problematic is resampling audio from 44.1 to 48 kHz?

A Tale of Two Leaks: How Hackers Breached the Great Firewall of China [video]

When compilers surprise you

SIMD City: Auto-Vectorisation

When LICM [Loop-Invariant Code Motion] Fails Us

Unrolling Loops

comments