For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | dsp_person's commentsregister

Also have realized at some point that reviewing the PKGBUILD and code in github repo still doesn't check whether the github release files are compromised.

Build it yourself or bust

One thing that bugged me when I made a community plugin was that you have to attach non-git-controlled files to the release (e.g. main.js).

To check if any community plugin is safe, it seems like you'd have to not only review the code on github, but also analyze the github release files to be sure nothing malicious packed in there.

Maybe I'm misunderstanding something about the process, I'd appreciate if anyone could confirm or explain otherwise.


The recommended way to do this is via artifact attestation:

https://docs.github.com/en/actions/how-tos/secure-your-work/...


Thanks that's interesting. The docs are aimed at developers, but I'm curious about the use case for the end user.

So would a user have to do some kind of `gh attestation verify PATH/TO/YOUR/BUILD/ARTIFACT-BINARY ...`? (assuming the plugin dev provides an sbom?)


In the near term artifact attestation will be visible to users in the directory, and part of the overall scorecard of a plugin.


When I was on ubuntu it was easy to uncomment a couple lines in /etc/inputrc for this


In a pinch one way to deal with memory leaks is to wrap the offending work in a multiprocessing pool, forcing it to live in an ephemeral process


Indeed, I introduced this [0] as an option for every Python integration that runs on the Datadog Agent.

[0]: https://github.com/DataDog/integrations-core/pull/12986


I've been thinking about playing with something like this.

I'm curious to what limit you can randomly replace words and reverse it later.

Even with code. Like say take the structure of a big project, but randomly remap words in function names, and to some extent replace business logic with dummy code. Then use cloud LLMs for whatever purpose, and translate back.


it's pretty tempting when it's one of the few ways to watch 4k netflix and the likes


Ya I regret updating mine. The UI both significantly slowed down, and lost the chance to root :(


I just rooted one that was updated last week. Never say never. Just search for faultmanager...

though it is a cat and mouse game


I'm on webOS24 with 23.20.68, and CanI.RootMy.TV says it was patched in 23.20.68


Can I use something like syncthing to easily backup the recordings and transcripts off my phone?

Google's Recorder app makes this a big PITA if I don't want to enable upload to cloud storage, there is a very tedious manual way to export recordings.

I really just want plain old data and to be able to copy or delete files via the filesystem. And not be required to use some cloud service.


The app is 100% open source so you could add that feature if you wanted to. We'd love a PR for that!


now I wanna try running office 2013 in wine

running a VM just for occasional office use is annoying to deal with

edit: activation is probs the main issue


Cool to see C++ reflection getting somewhere.

> The Docker image includes clang-p2996, Bloomberg’s experimental Clang fork that implements the reflection proposal. As P2996 moves toward standardization, expect this to land in mainline compilers.

Possible to use that C++26 compiler just to do code generation for the binding code, and then use any other compiler for your actual build? I suppose alternatively could use a parser. Is the reflection code easy to work with in comparison? A year or two ago I spent some hours pulling my hair out trying to do some reflection in C++ until I gave up and spent the 20mins needed to write a python script to read my source files and do the code generation I needed.


Btw, it seems that the reflection implementations are progressing quite fast. There is already a gcc version with reflection support that is available on compiler explorer: https://www.reddit.com/r/cpp/comments/1ojbv1a/gcc_implementa...

Will add support for it as soon as I have some time to spare!


The P2996 definitely provides a way to work with reflection, the syntax can be a bit weird at first, but it gets more and more familiar. They have some cool examples here (https://isocpp.org/files/papers/P2996R13.html)

This idea of using C++26 compiler just for codegen sounds interesting. Will definitely give it some thought, thanks for the suggestion (:


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You