comex

15 ms·

181.
by comex 1y ago
Well, if everything is immutable like in Haskell, then you don't really run into the problems described in the blog post in the first place. You can live with Rust's "no mutable aliasing" rule instead.
182.
by comex 1y ago
True. To be fair, CHERI guarantees only security, while borrow checking (when it works) guarantees both security and correctness. If you write to a freed pointer or out-of-bounds, CHERI guarantees that your write either crashes or lands s
183.
by comex 1y ago
I’m pretty impressed, but also skeptical. There’s a contradiction in this post. Near the beginning of the post is a list of use cases for mutable aliasing. "Back-references", "doubly-linked lists", "delegates&quot
184.
by comex 1y ago
Nit: ‘Emoji’ is actually a native Japanese word, not a loanword based on ‘emoticon’. The resemblance was originally pure coincidence, though it probably does help explain ‘emoji’’s rapid adoption in English.
185.
by comex 1y ago
> This should be a warning sign to any game wanting to have community servers. This is not a feature you leave running in the background. It requires maintenance. Which, to most game developers, looks like a great reason to not have comm
186.
by comex 1y ago
Yeah, the complaint is pretty bizarre, or at least unclear.
187.
by comex 1y ago
To be fair, even if there is/were a team, I don’t know that writing a new backend from scratch would be a good use of their time. pytype apparently started before mypy or any of the other Python type checkers existed. [1] But at this
188.
by comex 1y ago
As does Swift. However, both languages have significant limitations on bidirectionality, mainly due to their embrace of dot syntax. If you write `foo.bar`, the compiler can't look up `bar` without first knowing the type of `foo`. So
189.
by comex 1y ago
Why can’t things remain backwards compatible forever? In the 35 years that the Web has existed, browsers have come pretty damn close to meeting that standard. The one huge exception is the removal of plugin support around 2015, and the co
190.
by comex 1y ago
This reads as significantly AI-assisted and repetitive. And some of the points are really questionable, like claiming “Color management becomes inconsistent” when X11 doesn’t even support HDR, claiming that Linux containers and namespaces s
191.
by comex 1y ago
To be fair, microkernels are also highly successful in embedded devices and auxiliary processors. It’s just that you don’t usually directly interact with them. For example, Intel ME runs MINIX, and Apple’s Secure Enclave Processor runs L4
192.
by comex 1y ago
IPC libraries often specifically avoid zero-copy for security reasons. If a malicious message sender can modify the message while the receiver is in the middle of parsing it, you have to be very careful not to enable time-of-check-time-of-
193.
by comex 1y ago
Because if the minimum wage is too high, employers can't afford to pay it, so it will just result in reduced employment rather than wages going up, aka economic "deadweight loss". That much is obvious. What is in question is
194.
by comex 1y ago
If you're evaluating JSON as JavaScript, you also need to make sure none of the objects have a key named "__proto__", or else you can end up with some strange results. (This is related to the 'prototype pollution' a
195.
by comex 1y ago
> Each model’s responses are ranked by a high-performing judge model — typically OpenAI’s o3 — which compares outputs for quality, relevance, and clarity. These rankings are then aggregated to produce a performance score. So there's
196.
by comex 1y ago
Yeah, there's a 'Reference saved memories' option you can turn off in the settings. (Despite the name, it turns off both referencing existing memories and making new ones.)
197.
by comex 1y ago
You can write a parser for an IDL, but you can’t reasonably write a parser for C++. So you have to move the definition of whatever types of methods or fields you want to reflect on into the IDL, instead of defining them natively in C++. (
198.
by comex 1y ago
Not backend.
199.
by comex 1y ago
Are you talking about private examples or do you have one to share?
200.
by comex 1y ago
Yeah, that’s not nearly the level of big I was thinking of. It’s not a browser or WhatsApp or Word. Admittedly, Go is popular among developers. And there are some public examples of client-side attacks targeting developers and security re
201.
by comex 1y ago
Are these exploits publicly documented?
202.
by comex 1y ago
Where? Within, as I said, “the type of consumer OS or client-side application that typically gets attacked”. It has to be a component of either a big application or a big OS, or something with comparable scope. Otherwise it would not lik
203.
by comex 1y ago
You’re a cryptography person. So you know that most theoretically interesting cryptography vulnerabilities, even the ones that are exploitable in PoCs, are too obscure and/or difficult to get used by actual attackers. Same goes for h
204.
by comex 1y ago
> Once the system reaches normal security level, even root cannot tamper with these logs without rebooting into single-user mode What stops the attacker from just editing /etc/rc.securelevel and then doing a normal reboot?
205.
by comex 1y ago
But how will that actually work? Your stackless coroutines proposal talks about explicit primitives for defining a coroutine. But what about a function that's not designed for any particular implementation strategy - it just takes an
206.
by comex 1y ago
Pornhub has in fact been doing such a thing. https://www.pornhub.com/blog/age-verification-in-the-news
207.
by comex 1y ago
Nope. A key aspect of this ruling is that it's about "sexual content that is obscene to minors but not to adults". "Adults have the right to access speech obscene only to minors [..] and submitting to age verification
208.
by comex 1y ago
There are constitutional limits on when state courts can exercise jurisdiction over people not physically located in the state. https://en.wikipedia.org/wiki/Personal_jurisdiction_in_Inter... > Personal jurisdiction
209.
by comex 1y ago
It shows the author is willing to publish content that looks right at first glance but falls apart upon closer inspection, lacking rigor and consistency. That same description could also apply to your average amateur cryptosystem, which te
210.
by comex 1y ago
I would have thought it came from the concept of 'raising an issue' or even 'raising a stink'.

More ›