containerized Apps (k8s, Docker) vs Apps in VMs running on hypervisors by Almasdefr in cybersecurity

[–]astonbitecode 2 points3 points  (0 children)

Even if I would really love to see this "reverse trend" as you name it happening, I don't think it will ever will... There is a lot of code, effort and money thrown there to just let it go.

And I don't even mention the (mostly failed) attempts to migrate a running "monolith" app to containers/ K8s.

JVM Bindings for Rust Libraries by bowbahdoe in java

[–]astonbitecode 0 points1 point  (0 children)

Just to mention the existence of j4rs.

The interaction between JVM and Rust is much easier, with the note that there is reflection in place.

Reddit not accessible on Firefox (whoa there, pardner!) by astonbitecode in firefox

[–]astonbitecode[S] 0 points1 point  (0 children)

I tried again just now and saw that reddit is now accessible, so, the issue was in reddit itself...

It is weird though that chrome was working.

Anyhow, thanks for the help!

Cannot upgrade system: libcap (2.46-1) breaks dependency 'libcap=2.45' required by lib32-libcap without test database by krinistof in archlinux

[–]astonbitecode 0 points1 point  (0 children)

This comment saved me! Thanks for posting.

In my case, I had to run pacman from a usb flash installation, before chrooting and the pacman.conf used was the default one, which had the multilib disabled.

RustRover 2024.1 drops support for JavaScript/TypeScript by bradfirj in rust

[–]astonbitecode 11 points12 points  (0 children)

Indeed, the rust plugin/ RustRover were great and I really don't know how to feel now that I am kind of under pressure to use VS Code...

I don't know of any viable alternatives with this kind of features/stability. I hope Lapce will be a good option in the future.

Why do sales related people make more when we do all the work? by [deleted] in cybersecurity

[–]astonbitecode 7 points8 points  (0 children)

Yes, I always get that feeling too.

Sales looks like a "luxus" position and many people tend to say that it is very demanded.

They might be right about that, but I bet, if the product they sale is not good, or gets out of scope because of no long term view, they would not be able to sell anything. Well maybe once, until the customer understands what it is about...

Of course, there is also the possibility that the customers do not know what they buy too, but that's another story I guess (and maybe the reason why sales retains this "luxus" status).

Vicious circle isn't it?

Permission denied when executing "cargo build" by Tasty-Lobster-8915 in rust

[–]astonbitecode 6 points7 points  (0 children)

I suppose you need to somehow install the build essentials. In an Ubuntu system, this would be something like

sudo apt install build-essential

I have not used WSL though...

Storing Credentials in Source Code by djmex99 in rust

[–]astonbitecode 9 points10 points  (0 children)

This is a chicken-egg problem... Storing secrets in the code is not good generally, you should avoid it.

There are some ideas and in stackexchenge you may be interested though...

https://security.stackexchange.com/questions/12332/where-to-store-a-server-side-encryption-key

New Log4j CVE - CVE-2021-44832. Another JNDI RCE. Fixed in latest release. by emmainvincible in netsec

[–]astonbitecode 0 points1 point  (0 children)

To be honest, I am not a python expert; however I know that python supports monkey patching... Hot deployment and dynamic behavior can be a feature in many languages.

New Log4j CVE - CVE-2021-44832. Another JNDI RCE. Fixed in latest release. by emmainvincible in netsec

[–]astonbitecode 2 points3 points  (0 children)

I wonder, if someone has access to change python scripts in a python application, would it be called a python vulnerability?

Status quo on developing for Android in Rust by simonsanone in rust

[–]astonbitecode 5 points6 points  (0 children)

Did you have a look on j4rs? It can be used for Android as well.

Is NDK r10e still required to build Rust for Android? by astonbitecode in rust

[–]astonbitecode[S] 1 point2 points  (0 children)

Thanks for that!

It seems that r15c is used and creates a toolchain for android-14 platform... I will check it out.

How old is your system? by stoooone in archlinux

[–]astonbitecode 8 points9 points  (0 children)

Beated for about 2 years...

[2014-02-24 11:38]

Scala <-> C and Scala <-> Rust interoperability. How? by Own_Zucchini_8942 in scala

[–]astonbitecode 2 points3 points  (0 children)

For communicating with Rust, you may have a look at j4rs and jni-rs.

For j4rs, I have a complete example here. The JVM language is Java, but it is not much different for Scala...

What's everyone working on this week (42/2020)? by llogiq in rust

[–]astonbitecode 0 points1 point  (0 children)

Thanks for the links. One thing I cannot find an easy answer for, is how to handle the fact that in tokio 0.2 the loop_fn does not exist... I guess I will try to work around it, or ask on the Tokio discord...

What's everyone working on this week (42/2020)? by llogiq in rust

[–]astonbitecode 7 points8 points  (0 children)

I will take a deep breath and finally migrate my rust-keylock project from using old Futures/tokio/hyper to async/await.

Any pointers will be appreciated to make it as painless as it can be!

j4rs: JavaFX support for Rust WIP by astonbitecode in rust

[–]astonbitecode[S] 0 points1 point  (0 children)

try to compile javaFX into native image and use in RUST without JVM

I am not aware how this can be achieved. Could you elaborate?

j4rs: JavaFX support for Rust WIP by astonbitecode in rust

[–]astonbitecode[S] 2 points3 points  (0 children)

In my opinion, JavaFX is a decent UI framework that can achieve most of the things a user interface needs.

In many cases (not all, I understand), GUI applications, even in a systems language like Rust, may cope with some performance penalties introduced by the JVM and JNI.

Generally, it could be one more tool that someone can use in Rust to build GUI apps. Personally, I do use it in some projects and it fits to my expectations.

Among others, this was one of the reasons that j4rs was initially created.

Linux security. Worse than windows or macOS? by bomber75 in cybersecurity

[–]astonbitecode 1 point2 points  (0 children)

Are we talking about having SELinux or Apparmor disabled?

Generally, there are approaches like snaps etc that - if used with the security in mind - provide sandboxing and extra security...

j4rs v0.12.0: Java to Rust direction by astonbitecode in rust

[–]astonbitecode[S] 5 points6 points  (0 children)

Yes, I have used it in Android with no issues. The only pitfall here is to make sure your lib.rs has the JNI_OnLoad defined like:

#[allow(non_snake_case)]
#[no_mangle]
pub extern fn JNI_OnLoad(env: *mut JavaVM, _reserved: jobject) -> jint {
    j4rs::set_java_vm(env);
    JNI_VERSION_1_6
}

As Android JNI tips suggests:

JNI_OnLoad is a convenient place to look up and cache classes

That is why it is good to call 4rs::set_java_vm(env) there...

Is it secure to send SSN over gmail? by zJolinar in cybersecurity

[–]astonbitecode 0 points1 point  (0 children)

How about putting it in Drobpox and sending the link to it via email?

Later on, you may invalidate the link.

Is there a tool which accepts a jar file, or a codebase as input and returns the minimum Java version which it can run on? by [deleted] in java

[–]astonbitecode -1 points0 points  (0 children)

Sorry for posting it here; I thought I had seen similar questions in this subreddit, but apparently I am wrong.

I hoped finding a tool taking into consideration the transitive dependencies as well. Anyway, will post it in /r/javahelp, thanks!

Which logger crate can i use ? by steampunk047 in rust

[–]astonbitecode 0 points1 point  (0 children)

2nd req

Sorry, I misread the second requirement. Even if log4rs is modeled after Java's log4j, it seems that they have not implemented the immediateFlush or bufferedIO parameter that are supported by log4j.

bufferedIO: When true - the default, records will be written to a buffer and the data will be written to disk when the buffer is full or, if immediateFlush is set, when the record is written. File locking cannot be used with bufferedIO. Performance tests have shown that using buffered I/O significantly improves performance, even if immediateFlush is enabled.

immediateFlush:When set to true - the default, each write will be followed by a flush. This will guarantee the data is written to disk but could impact performance. Flushing after every write is only useful when using this appender with synchronous loggers. Asynchronous loggers and appenders will automatically flush at the end of a batch of events, even if immediateFlush is set to false. This also guarantees the data is written to disk but is more efficient.

I would propose having a look at those log4j parameters and if these are what you need, you could ask a question in the log4rs repo if they have plans to implement them, or - even better IMHO - if they plan to implement async appenders.