topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Thursday April 25, 2024, 5:41 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - f0dder [ switch to compact view ]

Pages: prev1 2 [3] 4 5 6 7 8 ... 364next
51
Living Room / Re: Abusing Emoji on your computer filesystem
« on: July 15, 2018, 07:38 AM »
I wonder what kind of files are stored in the "🍑🍆" folder :P

52
I'm a bit late to the party, but...

^^ Good link. Thanks. And the author is right - it is FUD, and generally, wherever one finds FUD, one will usually find an accompanying $commercial and/or a political motivation, if not simply an "ulterior" motive.
The warnings about Spectre and Meltdown weren't FUD.

As Jibz said, the prime target isn't end-user machines, but stuff running in the cloud. Thing is, more and more stuff is being moved to cloud infrastructure - email, the ecosystems for software updates on everything from phones to server and desktop operating systems, payment processors, social media, every-friggin-thing. Being able to freely dump memory of other tenants on the infrastructure? TERRIBAD!

Fortunately Meltdown was "fairly easy" to fix, and without adding that big overhead... depending on workload and whether the CPU is recent enough to support the "Process Context ID" feature.

Spectre on the other hand? It's a can of worms where the lid has just been popped off. It's a class of bugs that's very hard to totally fix, because of the way modern CPUs work - unless we're willing to give up a lot of speed. I expect we're going to see a game of whack-a-mole for a while.

Spectre is a lot harder to abuse, and doesn't give the full, well, meltdown as Meltdown did. But it's still a serious issue, and it was exploitable by Javascript code running in browsers - i.e., something that can be used to target end-users.

This was not a case of cry wolf. It was a case of "we need to fix shit, now, before people outside the NSA, GRU and GCHQ start
abusing these flaws".

53
Haven't used it, wouldn't touch it with a red hot poker.

54
"LEGACY" used to be a good word, a word you would be pleased to see.
Not in the world of software, Curt :-)

55
General Software Discussion / Re: ERROR after upgrading Windows
« on: September 07, 2017, 11:58 AM »
Keep and lock - shows the pattern and outs the spammers.

56
Wordpress does seem to be a target/recipient of attacks disproportionately, but i think having a single install, with minimal 3rd party extensions, which was kept always up to date, would be more secure than having a large number of different frameworks that were sporadically updated if ever..
Emphasis mine.

Either you figure out a way to always auto-update to the newest version, while not breaking anything... or you have to do this manually, figuring out if an update will break things, looking for CVEs to see if you have to zomgupdatenow or if you can keep it on a regular schedule. You'll also have to prevent users from installing just any plugins, since that's how mass-defacements usually happen.

If somebody wants Wordpress, I think they should be going for a managed solution at Wordpress rather than dealing with it themselves.

57
I understand your headaches wrt. maintenance and security, but...

It would be more restrictive in format (i.e. mostly uniform appearance of user pages), but that could also be an advantage in terms of consistency, and would have the advantage of sharing visitors and popularity and being able to have a shared news/release page, etc.
I'm not sure this is an advantage - this loses uniqueness of dcmembers pages, and you might as well run the member pages off donationcoder.com then?

58
Living Room / Re: For those with a CrashPlan...
« on: August 29, 2017, 01:24 PM »
Apparently it's hard to get straight answers from SpiderOak - at least on twitter. They're weazeling around the pretty simple question of "are you throttling uploads?" :-(

59
The filesize and website-like interface are probably both explained by the fact that it essentially is a website. So in order to be portable it has to bundle an HTML engine, JavaScript engine, etc, for the consistent look across all platforms.
I wish people would stop doing this.

It's OK if you use the webby stuff for core functionality anyway, but it's bloated and borderline insane to bundle so much crap just because you're lazy.

60
I mean, resurrecting this old thread
I believe the thread was actually resurrected by a spammer, and the spam post got removed. But not before f0dder posted his response. :Thmbsup:
Bingo, Deo! - Otherwise I wouldn't have seen it.

Unless you're old or orphans, one will always end up missing friends or family, making the endeavour pointless.

Now, let's forget this thread :-)

61
Anyone know of any good activities?
Drink until you forget the person.

62
Living Room / Re: For those with a CrashPlan...
« on: August 27, 2017, 03:19 PM »
Yes, Jibz, versioning (and retaining versions sanely!) is a very important part of backups for me as well. I don't view a product without versioning as a backup product.

Being able to set bandwidth limits is nice, I don't want a backup application to mess with my internet usage - but utilizing less than 10% of my pipe and taking forever to back up stuff is not optimal, either. And I do worry about how fast SpiderOak is able to restore...

I'm having a hard time finding a backup product that has a client (with a feature set) that I like, and the online storage (speed + cost) definitely is a hard thing to get right as well  >:(  >:(  >:(

63
Living Room / Re: For those with a CrashPlan...
« on: August 27, 2017, 10:37 AM »
Reading up on Backblaze, I'm not sure that's an option - the only restore option is download through a browser, not their client?!

Currently testing SpiderOak one. The UI is prettier than last time I tried it (but still custom stuff rather than system-native, *sigh*). It's slightly better memory-wise than Crashplan, but still weighing in at around 400 megabytes for the two running processes. And it's still ungodly slow - there's no network speed indicator in the application, but Windows task manager show between 2-3mbit/s. That's not terribly good usage of my 30mbit/s upstream.

Also, it seems that when you "Download" something from SpiderOak, if the files exist on the local machine, those will be copied rather than downloaded? My connection definitely can't do 300MB in a couple of seconds. This means I can't (easily) gauge how fast I'll be able to actually get my files in case of an emergency. Sigh.

64
Living Room / Re: For those with a CrashPlan...
« on: August 27, 2017, 03:41 AM »
I'm personally not really super interested in various cloud storage providers - that kind of stuff is interesting in its own right, but Crashplan was a backup solution. So I'm first and foremost looking for a new backup client that can fill the void... this does include online storage as part of the deal, whether the backup service's own or tight integration with some other provider.

Is Amazon's Glacier a proper backup destination, if it's your sole remote? I thought it was pretty slow + "expensive" to get stuff out of Glacier? One of the important things wrt. backups is testing your backup archives regularly, which doesn't seem to fit too well with Glacier's model...

Also, nice little Carbonite burn from the Backblaze offer ;-)
There are no extra charges and no limits on the size of your files — no matter how many videos you want to back up.

65
Yes, using a program based on stolen source code, with binaries compiled by an unknown party - what could possibly go wrong?  :huh: :huh: :huh:

66
Living Room / Re: For those with a CrashPlan...
« on: August 26, 2017, 06:14 AM »
I logged on to DoCo today for this reason as well.

Pretty shitty decision by the Code42 folks - sure, it's easier dealing with companies than regular plebs, but they could have kept the service running, and focused their marketing drones on recruiting companies.

What are the alternatives these days? I need something that offers me control over what to backup (preferably folder-based and with regex, or at least extension-based exclusions), a good amount of online storage, and ability to do simultaneous local backup is a plus. E.g. basically the CrashPlan feature set - something that's not Java-based and thus uses less memory would be nice.

I like SpiderOak's zero-knowledge philosophy, but their UI is quirky, and last time I used it (several years ago), it was both very CPU-intensive, as well as having really slow speed to their backup servers, from my location in Denmark.

I haven't checked if Carbonite suits those needs, but from the website it seems to be very focused on simple end-users.

67
I much prefer ssh for transport protocol for my VCS, since it allows me to do public-key based authentication instead of HTTPS user/password wank. It's the sane default choice.

68
It is a apparent that this is one of those things, like religion and politics, that people adhere to and have their own opinions on
That's what people who use filthy spaces would have you believe - us tabbers have the objective facts, obviously.

;)

69
Someone mistyped a . for a /  :huh: (they are quite close together on a US keyboard layout :P)
Yes, yes! That was... definitely!... what happened ;P

70
I don't do much with Python.  However it does seem much more natural to type a block by hitting Enter, then Tab rather than holding down the shift key and hitting a curly brace.  At the end of the block you hit backspace to back off the indentation rather than again holding down the shift key and hitting another curly brace.  I didn't find it all that problematic when using an editor that knows Python.
I don't find adding braces is much bother, and it removes ambiguity - if a language uses indentation for semantic purposes, you run a higher risk of stupid bugs. Especially if you copy/paste snippets of code from the intarwebs, and who doesn't these days? :-)

You're either using a very, very narrow monitor (for professional development I've been on 120 columns with plenty of real estate for an IDE for 5+ years), or having crazy amounts of indents.
I guess you don't use end of line comments much.
Indeed, I don't.

I find that when I use proper variable and function names - which requires extracting well-defined, single-purpose functions - I don't need end-of-line quotes for anything. The code reads pretty naturally, and when I need comments, it's usually a larger block describing why somethign is done in a special way, performance considerations, external API/service quirks, whatever.

So use an editor that has a hard tab/spaces option.  I don't get the controversy.  But for people who may type in the < 30 wps range hitting shift brace combinations is distracting and causes a lot of lint since it is easy to get a bracket when you want a brace.  Also I notice many IDEs, at least in free tools, lack a reformatting indentation parser(such as Tidy.)  When I used Delphi 5 I found it liberating to just type in the code all messy and hit the function key for Delforex to indent and capitalize according to rules etc..  If everything lined up chances were good I did not have any typos.
The controversy is a people thing, and it's already mentioned above. Tabs means flexibilty, spaces means people shoving their preferred indentation size down your throat.

71
As Deozaan says, it also means that you (you special snowflake!) is trying to dictate how wide my indents are supposed to be, instead of letting that be up to my editor settings. Editor settings that probably vary depending on whether I'm on a machine with big monitors, or editing in Vim through SSH.
Not really.  If that's what the team decides on, then that's what the team does as a rule.  And when others come into the team, they adhere to the standard.  Right?
It sucks if the team has made the misguided decision to use spaces, but yes.

72
I consider languages insisting on indentation for semantics (like Python) to have made a really bad choice in that regard. The intention might have been to make program structure clearer, but it's dictatorial "we know better" that doesn't belong in a language, and it ends up causing more troubles than it solves.

I hate it when source wraps to the next line or kicks in the horizontal scrollbar just because there were a few nested blocks generating a bunch of white space.
You're either using a very, very narrow monitor (for professional development I've been on 120 columns with plenty of real estate for an IDE for 5+ years), or having crazy amounts of indents.

I've been using tab-is-4-spaces indenting for some 15+ years, but I'm considering changing that to oldschool 8, since it forces you to reduce indentation - preferably by splitting your code into shorter, coherent functions.

73
Using spaces for indentation is stupid.

It's treating a semantic piece of information as visual formatting, and that by itself should be enough to disregard space-formatting.

As Deozaan says, it also means that you (you special snowflake!) is trying to dictate how wide my indents are supposed to be, instead of letting that be up to my editor settings. Editor settings that probably vary depending on whether I'm on a machine with big monitors, or editing in Vim through SSH.

I've never seen indentation be a problem for VCS (any of the modern ones, anyway - pre-subversion days don't count), unless you've got non-team-players that insist on reformatting files instead of sticking to the project standard.

The only place where you might need "consistency" is if you have tabular data represented as code - and that's easily solved by tabs-for-indent, spaces-for-alignment, which is a fine compromise until everybody is using automagical IDEs that don't care about source representation and do on-screen format based on language rules :-)

74
The administrative shares that have been part of Windows for a long time have been a staple for remote file management for IT pros.
s/pros/skiddies.

Sure, they're useful for legit admin actions, but they're one of the first things I disable after I install Windows :)

75
Living Room / Re: Password Managers ... vs. Not
« on: June 06, 2017, 01:13 PM »
I disagree.  By insisting on funky characters that make you shift mode on touch keyboards they can always say you made a typo when entering.  Even if they are the ones who changed what you typed.  It amounts to asking the service provider for permission to use your own account.
What on earth are you on about? :huh: :huh: :huh:

Pages: prev1 2 [3] 4 5 6 7 8 ... 364next