Zamiel_Snawley

9 ms·

91.
by Zamiel_Snawley 3y ago
Neither are memory safe. Ada/SPARK would be another option but it doesn’t get any press nowadays, and I doubt there is much support from MCU vendors given that they don’t support the trendy languages.
92.
by Zamiel_Snawley 3y ago
Thank you for your insight!
93.
by Zamiel_Snawley 3y ago
Correct me if I’m wrong, but aren’t fonts rendered from vector graphics already? TTF and OTF are vector formats, correct?
94.
by Zamiel_Snawley 3y ago
At this point in time, I really don’t think there is a replacement for C in embedded systems. It’s been a while since I’ve looked, but the rust frameworks for STM32 are so much harder to use for directly interacting with memory mapped regis
95.
by Zamiel_Snawley 3y ago
How does mm wave 5G effect forecasts? Interfering with weather radar?
96.
by Zamiel_Snawley 3y ago
Which forecasts have become worse in Boston? 24 hour, 5 day, all of the above? This is surprising to me, because even when traveling across the USA, I've found the predictions to be very useful.
97.
by Zamiel_Snawley 3y ago
This article mostly discusses longer-term forecasts, but I have also been impressed with the quality and reliability of imminent-storm alerts. They have saved me from getting drenched in a rain storm or allowed me to pull off the road for a
98.
by Zamiel_Snawley 3y ago
Caps lock is such a waste of prime keyboard real estate, even for non-vim users! For those who don’t use vim, just switching caps lock and control is probably better so you can copy and paste with less contortion. For vim users, I highly r
99.
by Zamiel_Snawley 3y ago
You have convinced me to look in to Nim! Can you speak to the build system(s)? CMake is the bane of my existence.
100.
by Zamiel_Snawley 3y ago
Surely you mean 10cm?
101.
by Zamiel_Snawley 3y ago
Is the intended workflow to use dynamic linking when developing, and static(if you want it) for release? If so, that sounds reasonable to me.
102.
by Zamiel_Snawley 3y ago
Funnily enough, I can still understand your message without white space, it is just harder to parse. Doesn't that undercut your statement?
103.
by Zamiel_Snawley 3y ago
Thanks for the reply! I'd love to read more about your obfuscation techniques, I was under the impression that obfuscation is largely ineffective.
104.
by Zamiel_Snawley 3y ago
> specialized solutions are needed that provide protection even after the code was extracted. Anybody know what solutions they are hinting at here? Obfuscating binaries? Some kind of encrypted flash with on-the-fly decryption(but the dec
105.
by Zamiel_Snawley 3y ago
Yes [0][1]. [0] https://www.usenix.org/system/files/conference/evtwote13/jet... [1] https://youtu.be/Cl8q_356zZs?t=3013
106.
by Zamiel_Snawley 3y ago
While I agree in principle, I have tried a couple times(admittedly not very hard) to learn how to use seL4 and it seems unready for prime time. I don't think POSIX is the end-all-be-all, but it is what I and many others are familiar wi
107.
by Zamiel_Snawley 3y ago
And also, returning errors by value does not introduce hidden control flow! In python, you have no way of knowing what(if any) exceptions that a function may throw, so unless you catch everything you have no way of knowing where execution w
108.
by Zamiel_Snawley 3y ago
There is something ironic about there being an obvious typo in the subtitle(domponents instead of components). Regardless, I think these are generally good guidelines, but I'd not call the rules. Sometimes you really need the C preproc
109.
by Zamiel_Snawley 3y ago
Is there evidence that this was a concerted marketing effort? That behavior seems pretty consistent with the normal culture of the sector, vim vs emacs comes to mind. I have found rust difficult to learn, and I continue to develop and maint
110.
by Zamiel_Snawley 3y ago
I suppose my point was that Ada had missed it's shot-by the time GNAT came out, the buzz of an exciting new language expired before people could easily use it. I'm not familiar with the marketing that Mozilla did, but whatever the
111.
by Zamiel_Snawley 3y ago
I'm not sure, I only see static analysis and fuzzing workflows in the CI on GitHub [1]. [1] https://github.com/millert/sudo/actions
112.
by Zamiel_Snawley 3y ago
And yet, Rust is being taken seriously in many places where those languages have been unable to displace C. I wonder if it hadn't taken 15 years for a FOSS Ada compiler to become available, maybe it would have taken off.
113.
by Zamiel_Snawley 3y ago
As others have mentioned, there is a long list of sudo CVEs that are unrelated to memory safety. I didn't see it mentioned in the article, but I hope that they have mined the CVEs for tests to ensure they don't accidentally reintr
114.
by Zamiel_Snawley 3y ago
Automated burglar alarms are generally supposed to stop unattended property crime, not save lives. Fire alarms get an automatic and immediate response because it is a life threatening emergency, just like a car crash.
115.
by Zamiel_Snawley 3y ago
Automated security alarms are for protecting property, not saving lives. This is much more like a fire alarm, which does trigger an automatic response. In my view, we should be more lenient with false alarms when it could save someones life
116.
by Zamiel_Snawley 3y ago
Web scraping is protected by law[1], analogous to physically taking a picture in public. If they don't want people scraping their site, they can require an account and EULA. [1] https://techcrunch.com/2022/04/
117.
by Zamiel_Snawley 3y ago
Agreed, writing a scraper is simply worth the cost to get the training data.
118.
by Zamiel_Snawley 3y ago
Honestly, if they were just screwing developers of third party frontends, people probably wouldn't have cared that much. They are also screwing their moderators who use API-based tools, and people who need accessibility accommodations
119.
by Zamiel_Snawley 3y ago
If they had made prudent allowances for uses of the API other than 3rd party frontends, this likely would have been a much smaller deal. Moderators(who are doing tons of free work to make reddit a tolerable place) use API based tools to hel
120.
by Zamiel_Snawley 4y ago
One thing to note is that FTX.us is an affiliated company that is onshore in the US, that does have compliance requirements, and FTX.us is currently not believed to be insolvent/bankrupt. *This may not be true, there are rumors that I

More ›