chc4

23 ms·

271.
by chc4 5y ago
I took a three months leave from work, unsure if I wanted to do the early retirement fuck around dance or not. I worked on a meta-JIT library for Rust interpreters ( https://github.com/chc4/lineiform ), roughly analogous
272.
by chc4 5y ago
Rust would help with bugs like the initial memory unsafety. Half the blog post is about resilience even in the face of memory unsafety though, especially since the entire point is that there only has to be one bug, in any legacy subsystem
273.
by chc4 5y ago
Lots of altcoins are fast and cost efficient. The reason they are, though, is because no one uses them, so none of the blocks are full and thus there's no competition to make your transaction in via fees/tips. It's the same
274.
by chc4 5y ago
It namedropping LuaJIT's Dynasm at the end was funny, especially since by the time I got to it I had forgotten there was a (2014) in the title. Pleasant surprise seeing the author call it a work-in-progress :) I recently tried using th
275.
by chc4 5y ago
It's worth noting that M4 was invented by Brian Kernighan and Dennis Ritchie. GNU M4 might be what you're using, but it is definitely not the original version, and you probably shouldn't attribute M4 to GNU any more than you
276.
by chc4 5y ago
tldr kinda. The most recent version of Ghidra has a plugin to try and construct classes via RTTI info. This still only helps if your binary has RTTI (e.g. there's a dynamic_cast anywhere) and Ghidra still doesn't handle OOP that w
277.
by chc4 5y ago
I like Ghidra more than IDA. Having "proper" type support is nice - IDA's struct and type annotation support always felt very hacked together and hard to use. Ghidra's typing and decompiler is good enough that I don&#x27
278.
by chc4 5y ago
3.5 billion for every DARPA project is a hilariously low number. DARPA projects are famous for having low budgets, completing under budget, and completing under time. It has an extremely worthwhile return on investment.
279.
by chc4 5y ago
Critical infrastructure is not the devices being hit by ransomware attacks. They are encrypting corporate networks, which do need to be able to run Outlook and use a web browser.
280.
by chc4 5y ago
WASM and Wasmer are not intrinsically anymore secure, except for simplicity, than any other editor plugin system. Vimscript and Emacs-lisp basically have the same security characteristics as using WASM for plugins. It's not a step in a
281.
by chc4 5y ago
It doesn't, nor does it use seccomp to mitigate against language VM security issues.
282.
by chc4 6y ago
Modern homomorphic encryption schemes only have a ~100x performance hit. That sounds bad, until you remember that computers are really fast and spend the majority of time doing nothing, and that the difference between writing a program in
283.
by chc4 6y ago
Video game cheats and anti-cheats are almost completely disjoint from remote code exploits like what are reported in the OP.
284.
by chc4 6y ago
This attack is pretty unrealistic. For one, China is extremely invested in Bitcoin, and if they were to seize equipement from miners it would be to drive up the price, not try to kill it. For two, pricing hash power as USD ignores that t
285.
by chc4 6y ago
Roblox is a game engine, though. All of the games hosted on Roblox are made in Roblox Studio, which is comparable to the Unity editor.
286.
by chc4 6y ago
I really, really doubt it's legal, or if it is not in a way that would be easily defendable in court. Disassembled code is not a clean room implementation, which is what's needed to reimplement e.g. GNU licensed code legally.
287.
by chc4 6y ago
The sequel to this, "To destroy the Earth"[0], is also very good. 0: https://qntm.org/destro
288.
by chc4 6y ago
A friend group and I all jumped ship to Matrix and Element literally like two weeks ago because Discord randomly banned the server admin for "spam and abuse", which is shorthand for "triggered an opaque heuristic, probably fr
289.
by chc4 6y ago
It's been relevant recently due to the SolarWinds supply chain hack, too, since the implant was inserted into the build process, so I've been seeing it a lot more too. It wasn't used to infect a compiler, but still makes peop
290.
by chc4 6y ago
Urbit using Ethereum as a global consistent PKI store seemed like a perfectly fine idea, until transaction costs for distributing those keys bloomed 11,000% in a year :(
291.
by chc4 6y ago
I'm not an expert, but there are C bindings: I was able to play around with a toy compiler[1] in Lua using lualvm[2] I also know of at least one compiler[2] that actually emits textual IR, and then builds and links .obj files from that
292.
by chc4 6y ago
There's a difference between pathologically high complexity functions and Turing completeness. Sub-Turing languages generally don't allow recursion or unbounded loops - your program is always making progress. Solving 3-SAT doesn&#
293.
by chc4 6y ago
From what I gather, most of this document is aspirational I think, and more a codified "style guide" for future code and ethos of the project. The part about naming things itself is a fairly big style change from only a few years
294.
by chc4 6y ago
I also grew up playing Roblox, and it's how I learned programming. I probably logged thousands of hours in script builders. My life definitely turned out very different thanks to Roblox. For those not in the know, script builders were
295.
by chc4 6y ago
Solana uses a custom Rust re-implementation of a custom C re-implementation of the Linux BPF VM for what appears to be licensing reasons. Notably, it's jitting all bytecode without a verifier or emitting runtime bounds checks [0]. I s
296.
by chc4 6y ago
That's not true. They are illegal primes because encryption keys are just pairs of prime numbers used for public key cryptosystems, so posting the primes that make them up is sharing the encryption keys and thus against DMCA. There i
297.
by chc4 6y ago
It's not smuggling a SIP session request via HTTP headers - even if it didn't look anything like HTTP it would be vulnerable to this attack, because the controlled fragment is arbitrary binary data from their POST body. The proble
298.
by chc4 6y ago
Browsers can add the SIP port (5060) to the restricted ports blacklist.
299.
by chc4 6y ago
God, that issue is a mess. Lots of people missing the forest (Rust and LLVM are breaking constant folding guarantees) for the trees (function pointer equality is weird).
300.
by chc4 6y ago
Urbit's programming language Hoon uses two character "runes" instead of keywords. Here's the standard library and compiler source, for example: https://github.com/urbit/urbit/blob/master&#x

More ›