bonzini

56 ms·

691.
by bonzini 3y ago
The article is very skimpy on the details, but it is worth mentioning that this is not the first time Siberian languages have been linked to indigenous North American languages. Na-Dene and Yeniseian languages are theorized to be part of a
692.
by bonzini 3y ago
After 40 years of marketing for pickup trucks (that let manufacturers skirt emission regulations)?
693.
by bonzini 3y ago
I honestly don't know, but the fact that they give updates for 10 years is impressive compared to everyone else. I bought one in fall 2012 and it got the DSM 7.0 update on 2022 or 2023; even though the UI is really really slow, it give
694.
by bonzini 3y ago
I agree that Canadian crosses are necessary, but they affect a really small minority of programs and they are either not using Autotools (LLVM/clang, QEMU) or not going to migrate away from it (GCC/binutils/gdb). All I wanted
695.
by bonzini 3y ago
You can compute the integer square root in n/2 iterations where n is the number of bits in the source using just shifts and adds. For each step, check if a new bit has to be set in the result n_old by computing n2_new = (n_old + (1 &lt
696.
by bonzini 3y ago
You can decide what to test for, for example AC_CHECK_FUNCS([mlockall]) AC_CHECK_HEADERS([cpuid.h]) will define respectively HAVE_MLOCKALL and HAVE_CPUID_H.
697.
by bonzini 3y ago
This does not match my experience, pkg-config can be used for cross compilation. In Autoconf terms it's a "tool", not a "program". If you're cross compiling to Arm from x86, you can either create a separate arm
698.
by bonzini 3y ago
> Coming up with some very simple format for configure scripts which are easy to read, and which do some simple search+replace substitution on a Makefile seems very sensible, and would get rid of awful autotools, is a great goal however.
699.
by bonzini 3y ago
The semantics of fibers are difficult to define precisely. For example using thread local storage inside fibers can be problematic if a fiber sleeps in one thread and restarts in another, because the compiler is free to store something like
700.
by bonzini 3y ago
Where I live there's a mom and pop (well, mom and daughter) shop that sells relatively expensive clothes. They stopped accepting Amex because fees were too high, yet they basically apply a 5-10% discount by default if you spend enough.
701.
by bonzini 3y ago
- string vs. list "in" ('a' in 'a' is True, but 'a' in ['a'] is also True) - cannot know which object attributes are private or public (and some classes use settable properties so you can&#x
702.
by bonzini 3y ago
> Nothing prevents you from using the packaged libraries if you prefer them Nothing except, in no particular order: 1) only having one version of crates 2) mismatched features 3) new transitive dependencies that can be introduced at any
703.
by bonzini 3y ago
build.rs is easier to read, but it's the tip of the iceberg when it comes to auditing. If I were to sneak in some underhanded code, I'd do it through either a dependency that is used by build.rs (not unlike what was done for xz)
704.
by bonzini 3y ago
The difference is that in another language the build step is delegated to someone else who has packaged the code, and every version has presumably gone through some kind of audit. With Rust I have no idea what new transitive dependencies co
705.
by bonzini 3y ago
"started to cc himself" seems to be simply "contributing to a new project and not having git-send-email fully set up". By default git-send-email Cc the sender, though in practice it's one of the first options one ch
706.
by bonzini 3y ago
I am talking about my makefiles. They don't automatically build dependencies that I have no control on. Whereas building my crate can run code locally that no one has ever audited.
707.
by bonzini 3y ago
Packages in a Linux distro are not built on my machine, they are built by the distro in a sandbox. Every time I type "cargo build" I am potentially running arbitrary code downloaded from the internet. Every time I type "make&
708.
by bonzini 3y ago
That doesn't make build.rs any less of a juicy target for a supply chain attack. Arbitrary code downloaded from the internet and run at build time? That's a nightmare scenario for auditing, much worse than anything Autotools or CM
709.
by bonzini 3y ago
Rust is the worst in terms of build system transparency. Ever heard of build.rs? You can hide backdoors in any crate, or in any crate's build.rs, or the same recursively.
710.
by bonzini 3y ago
How many people read build.rs files of all the transitive dependencies of a moderately large Rust project? Autoconf is bad in this respect but it's not like the alternatives are better (maybe Bazel).
711.
by bonzini 3y ago
Unfortunately eval in a shell script has an effect on the semantics but is not necessary to do some kind of parsing of the contents of a variable, unlike Python or Perl or JavaScript. A $goo line (without quotes) will already do wo
712.
by bonzini 3y ago
For what it's worth the author is a PostgreSQL committer, he's not a security researcher but he's a pretty damn good engineer!
713.
by bonzini 3y ago
Yes, it's usually regenerated already. However even the source is often pretty gnarly. And in general, the build system of a large project is doing a lot of work and is considered pretty uninteresting and obscure. Random CMake macros
714.
by bonzini 3y ago
Or for some three letter party.
715.
by bonzini 3y ago
The right solution when using atomics is to use a binary semaphore instead of condition variables, and implement the wait as if (!cond) { sem.try_acquire(); if (!cond) { sem.acquire(); } } Though this
716.
by bonzini 3y ago
The last car I bought for 10k€ (not less than, in fact it was probably closer to 11) was a Chevrolet Spark in 2011. I remember that for 9k€ you could buy a Hyundai that didn't even have electric windows, but everything else was above 1
717.
by bonzini 3y ago
> An appropriate analogy is an illiterate artist. Or tattoos with Chinese/Japanese characters. More often than not they use the "wrong" character (even if it is technically correct) and the calligraphy is considered not ar
718.
War of the Wordles: did the New York Times go too far?(copyrightlately.com)
1 points by bonzini 3y ago|0 comments
719.
by bonzini 3y ago
Not necessarily making room for native companies, as the Silicon Valley giants have adapted. But they enforce certain rights, for example privacy, and if US companies (not just social media) do not want to comply they are forced to leave
720.
by bonzini 3y ago
Absolutely trees in disguise, in fact there are deterministic versions of skip lists that are equivalent to B-trees. An 1-2 skip list (where each pointer to next can skip from 1 to 2 pointers on the level below) is isomorphic to a 2-3 tree.

More ›