comex

14 ms·

211.
by comex 1y ago
What do you mean by “HD music video”? If you mean a literal video, then today’s video and audio codecs are more efficient than what Flash used, not less. If the music videos were that small then they must have given up a lot in quality.
212.
by comex 1y ago
This is in the directory "com.apple.gm.safety_deny.output.summarization.cu_summary.proactive.generic". My guess is that this applies to 'proactive' summaries that happen without the user asking for it, such as summaries
213.
by comex 1y ago
No, passkey export is intended to be a thing and is becoming a thing. I'm not sure if Microsoft has implemented it yet but here is Apple's version: https://mobileidworld.com/apple-introduces-cross-platform-pa...
214.
by comex 1y ago
At least the ash won’t participate in uncontrolled burning.
215.
by comex 1y ago
Fair enough. In some sense you’re writing your own borrow checker. But (you may know this already) be warned: this has been tried many times for C++, with different levels of annotation burden imposed on programmers. On one side are the m
216.
by comex 1y ago
Probably >50% of exploits these days target use-after-frees, not buffer overflows. I don’t have hard data though. As for null pointer problems, while they may result in CVEs, they’re a pretty minor security concern since they generally
217.
by comex 1y ago
> I guess C might be able to get away with it due to the interaction with strict aliasing rules. But not for char-typed accesses. And even for larger types, I think you would have to worry about the combo of first memcpying from pointer
218.
by comex 1y ago
Well, sort of. The specific point Justice Oliver Wendell Holmes was making is pretty much the same as how it’s used today: some speech is so obviously harmful that it can’t be protected by freedom of speech. The problem is that Holmes was
219.
by comex 1y ago
> The retry times are integers. There's no reason the retry times have to be integers. But the number of retries has to be an integer.
220.
by comex 1y ago
I'd say that awk really is too weak. Awk has a grand total of 2 data types: strings, and associative arrays mapping strings to strings. There is no support for arbitrarily nested data structures. You can simulate them with arrays
221.
by comex 1y ago
In the comparison with Emscripten using wasm-decompile [1], the author appears to have forgotten to turn on optimization. Yes, if you run emcc with no -O option then you will get extremely bad generated code quality, similar to most C comp
222.
by comex 1y ago
Well, sure, standards compliance doesn't matter much on such a small device. Personally I'd be less worried about uniqueness and more worried about alignment. An address of -1 would violate alignment requirements on most modern t
223.
by comex 1y ago
The spec says that malloc(0) shall return "either a null pointer or a unique pointer". If it's null, it doesn't have to be unique.
224.
by comex 1y ago
If you call malloc(0) multiple times (without freeing in between) and get -1 each time, then the pointer is not unique.
225.
by comex 1y ago
Yes, that’s the OP’s main point, but their choice of examples suggests that they are also thinking about trusted input.
226.
by comex 1y ago
This is a tangent from your main argument about DoS. But when you talk about URL parsing in a linter or a regexp in logging code, I think you're implying that the bugs are unimportant, in part, because the code only handles trusted inp
227.
by comex 1y ago
The ruling suggests that "pirating a book that could have been bought at a bookstore" for the sake of "writing a book review" "is inherently, irredeemably infringing". Which suggests that, at least in the judge
228.
by comex 1y ago
The judge actually agreed with your first paragraph: > This order doubts that any accused infringer could ever meet its burden of explaining why downloading source copies from pirate sites that it could have purchased or otherwise access
229.
by comex 1y ago
Yes and no. In this case, the plaintiffs alleged that Anthropic's LLMs had memorized the works so completely that "if each completed LLM had been asked to recite works it had trained upon, it could have done so", "almos
230.
by comex 1y ago
The third-party doctrine has been weakened by the Supreme Court recently, in United States v. Jones and Carpenter v. United States. Those are court decisions, not new laws passed by Congress. See also this quote: https://en.wik
231.
by comex 1y ago
Interesting! But there’s a gap between aspirations and what was accomplished here. Early on in the blog post, the author mentions that "c2rust can produce a mechanical translation of C code to Rust, though the result is intentionally
232.
by comex 1y ago
Note that some CFI (control flow integrity) implementations will get upset if you call a function pointer with the wrong argument types: https://gcc.godbolt.org/z/EaPqKfvne You could get around this by using a wrapper
233.
by comex 1y ago
It should just be res.fn = (void *)fn; `res.fn` is of type `void *`, so that's what the code should be casting to. Casting to `func0Ptr` there seems to just be a mistake. Some compilers may allow the resulting function point
234.
by comex 1y ago
Recently, macOS added a built-in FUSE-like API: https://developer.apple.com/documentation/fskit No idea what the performance is like. However, over the last few years, Apple’s compilers have gotten even more enthusiast
235.
by comex 1y ago
The EFI environment does provide some basic drivers for the boot environment, but they all go away once the OS loads, except for a handful of functions such as EFI variable management. (Linux can also reuse a framebuffer originally obtaine
236.
by comex 1y ago
In theory, Binary Transparency ( https://binary.transparency.dev/ ) solves that among other things. To pass verification, an update has to prove that it's included in a public log of releases. But I guess Signal doesn&#
237.
by comex 1y ago
> Sadly there is not a simple way to integrate this to native loop constructs without macros and even then it is a bit ugly. I’ve implemented something like this before, without macros. It’s a little ugly, but not that bad IMO. If you w
238.
by comex 1y ago
Anthropic had a slip-up like this recently with a legal filing (totally unrelated to the report, just a similar example of bad citations). After being challenged by a judge, they said: > A Latham & Watkins associate located that art
239.
by comex 1y ago
More to the point, there’s a difference between the two statues. One of the points raised by the court in the current case is that IEEPA does not have that kind of “whenever the President shall find” language: > That may be true of the N
240.
by comex 1y ago
As a user, I hate Sparkle. At least, I hate Sparkle's default mode where you have to click "Install Update", then wait for the update to download, then authenticate, then wait for the update to extract, then wait for the app

More ›