HackerTrans
TopNewTrendsCommentsPastAskShowJobs

JCattheATM

522 karmajoined ano passado

comments

JCattheATM
·ontem·discuss
It is true. The do surface level protections, but have nothing to really lock down a system. What do they provide that can restrict an attacker who managed to compromise a remote service that wasn't using pledge or unveil? On other OS's, you can set things like append only, limit files being readable by particular processes, whitelist paths or executables from where the system may execute, etc etc etc.
JCattheATM
·ontem·discuss
> I'm damn sure I've never seen a piece of openbsd marketing in my life

Kind of weird for you to defend a product if you've never even been to their website.
JCattheATM
·há 3 dias·discuss
> aggressively bring in new security features like pf, OpenSSH, W^X enforcement, pledge(), arc4random(), ASLR, so many other things.

I'd say OpenSSH is a great tool, arc4random was great and pledge is interesting although doesn't do much for code that wasn't compiled with it (and they are still really lacking in ways to lock down apps for a 'security focused' OS), the rest is just their implementation of stuff that already existed not something they innovated.

Most of their reputation comes from a time when linux distros and windows had every service enabled and exposed by default, it just developed it's own momentum the way many myths do.
JCattheATM
·há 3 dias·discuss
Well, that's where OpenBSD falls short, it lacks facilities to really enforce defense in depth - even NetBSD has some better features in this regard.
JCattheATM
·há 3 dias·discuss
Pretty sure you're familiar with their claims.
JCattheATM
·há 3 dias·discuss
No one is claiming that, they are at least setting a foundation for that to be possible though.
JCattheATM
·há 3 dias·discuss
It's not too late to start now, similar to how Linux did a few years back.
JCattheATM
·há 3 dias·discuss
> OpenBSD's security stance being the stuff of legend,

More so their marketing.
JCattheATM
·há 11 dias·discuss
I know a lot of Russians, but all of them left and are critical. Can't say I know any Russians in Rusia, but papers such as Meduza report on and give interviews with them frequently.
JCattheATM
·há 11 dias·discuss
> Heh.. Russia has "elections" too.

The 'heh' indicates a misplaced smugness.Our elections actually result in a change in leadership. There is a lot of yammering, but no evidence the US is about to become an actual dictatorship.

> So easy to point and jeer and say "they're bad, but over here the circumstances are different!"...

Because they are drastically different. You're just trying to downplay that because it breaks your entire argument.
JCattheATM
·há 11 dias·discuss
> I can say that about Americans.

Eh, you'd be wrong. It's a different issue in the US, half the population believe and vote for nonsense, the other half are strongly against it.

> What proof do you have, or do you "just know it"?

Friends with Russians, and try to read useful sources like Meduza. It's absolutely very much the case that most of that population are brainwashed and believe the state propaganda.

> Meanwhile in Russia, protesting will get you arrested and probably be sent to the frontline (as a man) or prison (as a woman).

Yes, so an armed uprising is necessary if voting is not an option. But if there is no will, there will be no effort.

> Meanwhile in America, there's a political party using the Nazi playbook to subvert democracy and succeeding.

America will still have elections, and we won't have to deal with our Putin-wannabe again after their term is up.
JCattheATM
·há 11 dias·discuss
Except most Russians support their government and believe its lies...
JCattheATM
·há 12 dias·discuss
Adding back a reply someone deleted because I think it adds to the conversation:

>

    He never made the argument that goto was considered harmful (the title was not his), the letter itself is a solid argument for why the unbounded goto (as opposed to the, typically, function or lexical scope restricted goto) creates programs that are hard to comprehend. He also, if you read the letter, does not argue for abolishing goto, it's part of the larger case of going toward structured programming.

    If you learned programming after about 1990 (probably some time in the 1980s was the real inflection point, but by 1990) you would have been learning structured programming and the argument was moot, because it had won. Every major language used after that time (outside of assembly languages which are inherently unstructured as a language) was already using structured programming so the argument seems superfluous or you end up having people compare the goto he describes to the modern restricted goto, which is not something he would have (strongly) argued against (though certainly against its overuse in some cases).
JCattheATM
·há 17 dias·discuss
I'm in my 40s, wasn't coding in the 70s. Horrible use of code is a different thing from removing something entirely, though. Just that almost every language removed goto as a response is kind of amazing to me.
JCattheATM
·há 17 dias·discuss
I honestly never got why in college his opinions were just taken as mandates. I never bough into the "goto considered harmful" argument, for example.
JCattheATM
·há 29 dias·discuss
It's just silliness. Judge the code on the merit of the code, not deciding to reject it if you learn it was constructed with the aid of AI.
JCattheATM
·mês passado·discuss
> Maybe it's also brain damage of using too much Windows (with wsl). But there I have a different problem: It's easy to install and configure stuff, but it's everything else than minimal.

You could make your own tiny Windows 'distro' building on Tiny 11.
JCattheATM
·mês passado·discuss
> my computer gave it a red underline so I decided to do that.

Why? You were quoting text so it would never be confused for yours anyway.
JCattheATM
·mês passado·discuss
Which programs can be configured in this way? Something custom you wrote?
JCattheATM
·mês passado·discuss
That's what I have in my setup, six titlebar buttons: send to other screen, sticky among workspaces and always on top in addition to the base 3. Can't imagine ever using something that gives me less control again.