musicnarcoman

So the CodeRabbit application with access to application secrets still runs in the same virtual machine as untrusted code from the outside?

I think they meant each person has a public channel of their own.

As someone who made the mistake of printing keys only in human-readable format: ocr software is only so accurate.

So if you have more than a handfull of bytes you may have to actually read it "by hand" to fix errors.

These days I keep the really important keys both as a qr codes and also hex. But the hex is not pleasant to work with.

"Storage is cheap" if you do not have to pay for it. It is not so cheap when you are the one paying for the organizations storage.

Same thing for the "Product Brief" document that maybe goes into detail about the hardware.

The Media section does have some details such as whitepapers and a doctoral thesis. Still it would be nice to have specifications for the actual product if you are trying to sell it...

The git history is useful to find out: * The why, who and when of some change to the code or configuration. * Looking at older variants of code to see previous attempts to know what has already been tried. * git blame and git bisect for automated troubleshooting.

Yes. I run shared desktop login server clusters for students, DBUS is a bottle neck.

While I do not build LFS regularly or for production use, the security improvement typically comes from the fact that the end system is _super_small_ and focused. Less software means less attack surface.

Sure, compromised binaries are nasty but personally I do place quite a lot of trust with the distribution repos.

(PS, if you are reading this and contribute packages to distribution repos: Thank you!)

Ah yes, the dreaded page limit! I look for examples of working synthesis so I will still read it.

The question of fixed vs. infinite integers and observable sizes of datastructures is a dilemma that I do not know of any good solution to. Selecting fixed and observable sizes leads to efficient execution but risks making programs unportable (after they have been compiled and are distributed as object code).

Selecting arbitrary precision integers and no observable sizes instead requires a smart runtime/jit/compiler to get efficient execution.

Nice work, I will have to read the research paper later ("Tacit Programming Code Synthesis and Optimization with Genetic Algorithms").

One question, why did you decide to make the size of cells visible to programs (pointer arithetic)? Will that not lead to the same portability challenges that we have already had with C and C++?

Yes, `rot` is a higher order function that expects a function argument and returns another function as the result. In Scheme the car does not have to be a name.

> This makes no sense - how did the attacker get between gandi.net and their technical partner in order to MITM them?

On the top of my head, bgp hijacking perhaps?

> MITMs aren't magic

No. But do not trust the network. Ever.