Tobu

12 ms·

61.
by Tobu 5y ago
More interesting to me will be when one of the ACME CAs will implement RFC 8657, ACME-specific CAA parameters. Currently privilege separation on a server or a TLS terminator doesn't do much for ACME privileges because an exploit anywhe
62.
by Tobu 5y ago
That was the explanation given for rigging medical school scores so 70% of doctors could be male: - https://www.theguardian.com/world/2018/aug/08/tokyo-medical-... - https://www.theguardian.co
63.
by Tobu 5y ago
glibc uses versioned symbols, symbols are visible in the blog post's `objdump -T` output if you scroll to the right. Then you can use `objdump -d` to disassemble and see the callers. The fact that the binary is build from Rust isn&#x2
64.
by Tobu 5y ago
Interesting that Linus comes from a family of journalists! (The same is true of Jon Corbet, who runs LWN) It did seem to become useful as the job shifted again and again from coding to reviewing to maintaining and setting maintenance standa
65.
by Tobu 5y ago
Well, the university of Minnesota managed to escape responsibility after multiple suicides and coercion of subjects of psychiatric research. From one regent: “[this] has not risen to the level of our concern”. https://www.startr
66.
by Tobu 5y ago
As far as I can tell, the papers he co-authored on Wikipedia were unlike the abuse of the kernel contribution process that started last year in that they did not involve active experiment, but passive analysis of contribution history. Doesn
67.
by Tobu 5y ago
That's still 10 thousand words you're linking to… I had a look at section §46.104 https://www.hhs.gov/ohrp/regulations-and-policy/regulations/... since it mentioned exemptions, and at (d) (3) insid
68.
by Tobu 5y ago
I've been doing this by implementing ResolvesServerCert, which has access to the ClientHello. It covers the acme alpn use case. Though you can't use it to pick other properties, like making an ALPN protocol conditional on SNI.
69.
by Tobu 5y ago
There's a categorization here (I don't have access to the triage spreadsheet though): https://github.com/ctz/rustls/issues/447#issuecomment-820719... It seems like there's been the most effort
70.
by Tobu 5y ago
There are two options at the moment [1]: - panic=abort (uncatchable) - panic=unwind. With the latter, you would need a catch_unwind at the FFI boundary. [1] https://doc.rust-lang.org/cargo/reference/profil
71.
by Tobu 5y ago
mrustc for bootstrapping, rust_codegen_gcc (which doesn't seem like it would make stage1 much harder to compile) once the rest of the compiler has been brought up, isn't that the more realistic plan?
72.
by Tobu 5y ago
What a time suck.
73.
by Tobu 6y ago
Dereferencing null is UB; there is no guarantee that it will compile to something that segfaults or that it won't be exploitable. This is unlike None.unwrap(), which is a guaranteed panic. Exploitable null dereference, for anyone who
74.
by Tobu 6y ago
git-absorb is another implementation: - https://github.com/tummychow/git-absorb - https://lib.rs/crates/git-absorb
75.
by Tobu 6y ago
In fact, Go is not even memory safe despite the GC. It has data races, which are exploitable. - https://blog.stalkr.net/2015/04/golang-data-races-to-break-memory-safety.html - https://golang.org&#x2F
76.
by Tobu 6y ago
Buggy AAA releases are currently the norm, but that takes a reputational and financial toll and doesn't make for happy developers either. Cyberpunk 2077 is the latest example.
77.
by Tobu 6y ago
--depth=1 (shallow clone, and implies --single-branch)
78.
by Tobu 6y ago
I don't know what this is doing here. ring is also hard to misuse, and more actively maintained by far.
79.
by Tobu 6y ago
Yes of course. I've been into contact improvisation, some partner dances, and acro, and the scenes are structured by social circles that are much broader that most romantic relationships. You become part of a scene by showing up regula
80.
by Tobu 6y ago
Inference works in all Romance languages, as well — it's a Latin word and this use is extremely close to its use in logic (going back to Aristotle). Anyway, I'd consider simple english a tool for introducing new concepts. Learning
81.
by Tobu 6y ago
A char is a scalar value, rather: https://doc.rust-lang.org/std/primitive.char.html
82.
by Tobu 6y ago
Sweet and to the point, thanks! Also of note, aside from finding the crate root and dependent crates (these are passed explicitly to the compiler, from Cargo most of the time), all of this is strictly part of the Rust language, and handled
83.
by Tobu 6y ago
Here's more about how this came about: https://github.com/pippinbarr/itisasifyouweredoingwork/tree/...
84.
by Tobu 6y ago
HTTPS is a really huge scope to tackle, and requires a lot of policy which OpenSSL traditionally hasn't encoded (how to root trust, for example — possibly involving system stores or custom ones, stapling, pinning…). Also, OpenSSL gene
85.
by Tobu 6y ago
Rust has the concept of "interior unsafe". The idea is that you build an abstraction and wrap away the unsafety. That abstraction has to be built defensively, which is enabled by the type system enforcing very powerful invariants
86.
by Tobu 6y ago
Indeed. For anyone still believing a NULL dereference (or any of the other UB that is in the C spec) is just a segfault, "What Every C Programmer Should Know About Undefined Behavior" is still required reading: http://b
87.
by Tobu 6y ago
As far as I understand, that Branco guy has had a lot of short-sighted attempts at getting into high-profile roles, with no consistent thread beyond that. Plus some pointless and spiteful attempts at getting into the limelight for all the
88.
by Tobu 6y ago
Here's the bug [1]; apparently someone made it so on purpose [2]. In related issues, I'd like switch to tab to be consistent so that ctrl-clicking on an awesomebar result always opens it in a new tab, instead of depending on wheth
89.
by Tobu 6y ago
That's the shortcut I use for bookmarking, get off my lawn.
90.
by Tobu 7y ago
If this documentation is accurate, Darling doesn't support raw syscalls either: https://wiki.darlinghq.org/documentation:system_call_emulati... Their Linux kernel module does seem to be XNU based, but it feels like poo

More ›