Ygg2

19 ms·

331.
by Ygg2 11mo ago
Saying no is a privilege. It's easy to say if you have other options. It's extremely hard to say if others depend on you saying yes.
332.
by Ygg2 11mo ago
> I'd go further and say you're not a senior if your code isn't good you shouldn't be a senior. You say that until you are tasked with doing impossible - three lines, all perpendicular, five green, two anti-green, sev
333.
by Ygg2 11mo ago
I might have linked the wrong PR. Well here is the full context. https://news.ycombinator.com/item?id=44766771#44809551
334.
by Ygg2 11mo ago
I thought people knew andrewk was an ahole? I thought that was his supposed charm? Like Linus. I mean https://github.com/ziglang/zig/pull/24317 wasn't that long ago.
335.
by Ygg2 11mo ago
Yeah, but it's not immune to supply chain attacks. Counting on maintainers of dpkg is not that different from counting on maintainers of random crate package.
336.
by Ygg2 11mo ago
They care how long you take to patch your versions. Delaying patching by 7 days will affect it.
337.
by Ygg2 11mo ago
> countless articles explaining what should be done instead (e.g. https://kerkour.com/rust-stdx ) Don't make me tap the sign: https://news.ycombinator.com/item?id=41727085#41727410 > Centralized p
338.
by Ygg2 11mo ago
> why clap isn't std at this point. Too big for many cases, there is also a lot of discussion around whether to use clap, or something smaller.
339.
by Ygg2 11mo ago
I don't buy this line of reasoning. There are zero/one day vulnerabilities that will get extra time to spread. Also, if everyone switches to the same cooldown, wouldn't this just postpone the discovery of future Shai-Huluds?
340.
by Ygg2 11mo ago
NPM is the largest possible target for such an attack. Attack an important package, and you can get into the Node and Electron ecosystem. That's a huge prize.
341.
by Ygg2 11mo ago
But you also need the latest versions to avoid zero-day attacks.
342.
by Ygg2 11mo ago
No. Unless you find a chunk of antimatter or a way to break the laws of physics.
343.
by Ygg2 11mo ago
Didn't all Windows from 95 onwards preload explorer?
344.
by Ygg2 11mo ago
> Couldn't drivers be built on some abstraction that would simplify some work? That's like asking the alchemist to publicly publish their manuscripts. In an ideal world, yes. However, we don't live there. Until a few years
345.
by Ygg2 11mo ago
Not if everyone decides to 's/.unwrap()/.expect("Shouldn't happen")/g' in the code base. Or the good old: let x = match res { Ok(x) => x, Err(_) => unreachable!(), }
346.
by Ygg2 11mo ago
Ok, and? API being the same is kinda the Windows selling point. That said, there are API differences - DirectX12, Bitlocker, etc.
347.
by Ygg2 11mo ago
> If the `.unwrap()` was replaced with `.expect("Feature config is too large!")` it would certainly make the outage shorter. It wouldn't, not meaningfully. The outage was caused by change in how they processed the queries.
348.
by Ygg2 11mo ago
> When Rust got popular, I was a bit confused by people talking about how great Result it's essentially a checked exception without a stack trace. It's not a checked exception without a stack trace. Rust doesn't have Java&
349.
by Ygg2 11mo ago
Free geld is a deflatory value, if you don't produce 1% of all value monthly there is less currency available, which means less currency has to cover same assets. But each month you are being taxed, on your liquid assets.
350.
by Ygg2 11mo ago
It's made by Jetbrains thankfully.
351.
by Ygg2 11mo ago
I meant it's not malicious compared to similar offerings. If anything, Microsoft has been extremely generous when it comes to support. Albeit not so much today (more on that later). It's a half-joke that the only stable ABI on Lin
352.
by Ygg2 11mo ago
Malicious? It's almost 20 years old (it will be in 2029).
353.
by Ygg2 11mo ago
> Other vectors probably mean a single vector: external entities, XXE injection (which comes in several flavors), remote DTD retrieval, and quadratic blowup (a sort of twin to the billion laughs attack). You aren't wrong though. The
354.
by Ygg2 11mo ago
> The billion laughs attack has well known solutions (basically, don't recurse too deep) You can then recurse wide. In theory it's best to allow only X placeables of up to Y size. The point is, Doctype/External entities do
355.
by Ygg2 11mo ago
Wait. They are going along with a XML parser that supports DOCTYPES? I get XSLT is ancient and full of exploits, but so is DOCTYPE. Literally poster boy for billion laughs attack (among other vectors).
356.
by Ygg2 11mo ago
> Borrow checking is basically a synonym for affine type system. No? It's more akin to flow analysis with special generic types called lifetimes. > The same outcome can be achieved via affine types, linear types, effects, depende
357.
by Ygg2 11mo ago
> Great C interop, first class support for cross-compilation, well suited for arena allocators. C interop and arena allocators aren't hard requirements for a kernel language. In fact, why would a kernel in <INSERT LANG> need t
358.
by Ygg2 11mo ago
That kind of is a bit load bearing. The differences are pretty huge. Plus, borrow checker is nowhere to be found. Cyclone is more C with a few tweaks (tagged unions, generics, regions, etc.).
359.
by Ygg2 11mo ago
> Rust is not designed for low level system programming / embedded systems like Zig is. Pray tell, with Rust already being used in kernels, drivers, and embedded what makes Zig better suited for low-level systems? More chance to exp
360.
by Ygg2 11mo ago
Easy is a relative measure. How familiar is a language to previous knowledge?

More ›