Searching yarn

Twts matching #lol
Sort by: Newest, Oldest, Most Relevant
movq
www.uninformativ.de
 (1w ago)

OpenBSD has the wonderful pledge() and unveil() syscalls:

https://www.youtube.com/watch?v=bXO6nelFt-E

Not only are they super useful (the program itself can drop privileges – like, it can initialize itself, read some files, whatever, and then tell the kernel that it will never do anything like that again; if it does, e.g. by being exploited through a bug, it gets killed by the kernel), but they are also extremely easy to use.

Imagine a server program with a connected socket in file descriptor 0. Before reading any data from the client, the program can do this:

unveil("/var/www/whatever", "r");
unveil(NULL, NULL);
pledge("stdio rpath", NULL);

Done. It’s now limited to reading files from that directory, communicating with the existing socket, stuff like that. But it cannot ever read any other files or exec() into something else.

I can’t wait for the day when we have something like this on Linux. There have been some attempts, but it’s not that easy. And it’s certainly not mainstream, yet.

I need to have a closer look at Linux’s Landlock soon (“soon”), but this is considerably more complicated than pledge()/unveil():

https://landlock.io/

⤋ Read More
bender
twtxt.net
 (4w ago)
↳ In-reply-to » @bender Here's a short-list:

@prologic@twtxt.net I remember going through your “introduction to Golang”, I don’t remember the URL, but I vividly remember going through it, and I was lost at chapter one. So, about that “mastering” the core in hours, “I don’t believe you.” (insert I don’t believe you meme animated GIF here). LOL.

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (4w ago)
↳ In-reply-to » i wish it was realistic for me to learn golang but every single time i try to comprehend any go code i'm like What the fuck am i looking at. why is all of this so short and condensed GIVE ME VERBOSE CODE

@movq@www.uninformativ.de i feel like when i read go code i’m reading some algebra shit where every part is 1-5 letters long and then there’s weird symbols like := and it’s just infinitely harder for me to parse and infer meaning from lol. it’s such a me problem

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (6w ago)
↳ In-reply-to » @kat I was about to say that you can always just buy one, but apparently that’s not so easy anymore?! What the heck happened? 🤨 There used to be several shops here in Germany that sold a variety of Tux plushies, but none of that exists anymore … 😳

@lyse@lyse.isobeef.org those tuxes are kinda cute but not what i’m looking for! i want a silly stupid looking tux the most lol

⤋ Read More
bender
twtxt.net
 (6w ago)
↳ In-reply-to » "Forgive me for the harm I have caused this world. None may atone for my actions but me and only in me shall their stain live on. I am thankful to have been caught, my fall cut short by those with wizened hands. All I can be is sorry, and that is all I am."

@prologic@twtxt.net LOL. It is from the Severance, AppleTV+ series. I am about to finish watching it with my kid—well, what’s available for seeing. The series is still ongoing. I recommend it!

⤋ Read More
prologic
twtxt.net
 (6w ago)
↳ In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

And yes I’m taking some inspiration from Anubis here 😅

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (7w ago)
↳ In-reply-to » i got a shelf for all my cassette tapes! from a lovely person on facebook marketplace :] i don't think they produce these anymore, i think i got a good deal Media

@lyse@lyse.isobeef.org oooh that’s a good point! woodworking is scary and i don’t have much room for it but i do have SOME room in mind that could work for it… i feel like i’d just hurt myself in the process though LOL

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (7w ago)
↳ In-reply-to » grafana is confusing af i deployed it again for my job (that is so wild to say...) and i'm like HOW DO THESE ALERTS WORK

@prologic@twtxt.net noted! that all sounds very scary to me but i should lock in for the best experience for my users! (the best experience for my users is my server not crashing most of the time though so i guess the next best experience LOL)

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (7w ago)

slowing working away at my latest code project: learning PHP by recreating the 2000s fandom mainstay known as a fanlisting! it’s been super fun i added a dynamic nav bar and other modifications in the latest commit

fanlistings even to this day rely on old PHP scripts dating back to the early 2000s that need whole ass mySQL or postgres DBs and are incredibly insecure. you can look at them here they’re like super jank lol it’s sad that new fanlistings have to use them because there’s no other options….

⤋ Read More
lyse
lyse.isobeef.org
 (7w ago)
↳ In-reply-to » @kat I've almost fixed this btw 🤗 Just testing it thoroughly and polihsing the code. In case you're curious, I do this style of development called "Observability Driven Development" (ODD) whereby I make observations of the system via metrics and internal observations and adjust the system's overall behavior to the desired outcome 😅

@prologic@twtxt.net ODD, lol. I don’t wanna be rude, but this sounds more like Code And Fix.

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (8w ago)
↳ In-reply-to » @kat @xuu Recommend you git checkout main && git pull && make build. Few bug fixes 😄

@prologic@twtxt.net done! hey i got a question, you got any clue why my feeds aren’t updating? maybe it has to do with the new cache flag but i messed with that a bit and didn’t notice a difference. basically it’s like i have to manually restart yarnd to see new posts it’s really weird lol

⤋ Read More
kat
yarn.girlonthemoon.xyz
 (8w ago)

gah i’ve been so busy working on love4eva! TL;DR i switched image backends from the test/dev only module i was using to the S3 one, but with a catch - i’m not using S3 or cloud shit!!! i instead got it to work with minio, so it’s a middle ground between self hosting the image uploads & being compatible with the highly efficient S3 module. i’m super happy with it :)

i posted a patreon update that details the changes more: https://www.patreon.com/posts/i-am-now-working-127687614

that post says i didn’t update my guide yet but i actually did like right after i made that post lol so you can CTRL+F for minio stuff there!

⤋ Read More
prologic
twtxt.net
 (8w ago)

Nothing like being paged at 00:30 (midnight) for a P2 incident that is now resolved at 02:10 🤯 Obviously I’m not going to work tomorrow (I mean today lol 😂) at the usual start time 🤦‍♂️

⤋ Read More