dcsommer

7 ms·

31.
by dcsommer 2y ago
CWE Top 25: https://cwe.mitre.org/top25/archive/2024/2024_cwe_top25.html Out of bounds write and read are more prevalent then UAF. There are multiple types of bugs that can produce OOB read or write though.
32.
by dcsommer 2y ago
Zig brings developer velocity benefits over C, but developer velocity is not the reason R4L exists. Until Zig has an easily segmented part that is memory safe, there is no demand for its potential benefits in Linux. Memory safety is the onl
33.
by dcsommer 2y ago
Thank you for your educational service. I hope we can streamline money to teachers better as a country so we don't keep losing institutional knowledge and experience like yours.
34.
by dcsommer 2y ago
What's to say it wouldn't have been even worse workout the money? I don't think you can draw that conclusion from just this data point. That said, education certainly needs major reforms. I like how Sweden is going full Luddi
35.
by dcsommer 2y ago
Accepted cryptography is also security through obscurity. The thing is that the amount of obscurity must be quantified. Cryptanalysis allows one to calculate these quantities of "obscurity." Then, a full study of effectiveness com
36.
by dcsommer 2y ago
Sounds fascinating. Anywhere I can read more about the build-up to this moment? Has David Wiltshire written about this?
37.
by dcsommer 2y ago
A conspiracy involving thousands of people lying and no one speaking up over many years (it's been over 9 years since the acquisition) is incredibly unrealistic. Your hypothesis that WhatsApp shares the addressbook with Meta is not at
38.
by dcsommer 2y ago
This is not me making some grand new commitment. It's right in the privacy policy and also summarized here: https://faq.whatsapp.com/1303762270462331 > We need your contacts to provide the service, but don’t share
39.
by dcsommer 2y ago
This is absolutely not true and would immediately trigger lawsuits across the globe. WhatsApp and Meta data separation is extremely strict. Source: I work at WhatsApp and also https://faq.whatsapp.com/1303762270462331 >
40.
by dcsommer 2y ago
GP seems to be implying hot swapping, not Erlang, is unreliable. To which, from my experience using it in Erlang, I heartily agree is fraught. Inconsistent state across nodes is much harder to reason about. When you _must_ ensure consistenc
41.
by dcsommer 2y ago
ePD in 2002 mandated cookie banners well before GDPR in 2018. But yes, point taken that well intentioned regulation can be poorly implemented and have negative repercussions.
42.
by dcsommer 2y ago
How many systemd CVEs are memory or thread safety related?
43.
by dcsommer 2y ago
I'd love to hear more about the relationship between Buck2 and Bazel such that they share a conference. Sure, they are quite similar systems and both use Starlark DSL, but is there a long term vision of these projects belonging "t
44.
by dcsommer 2y ago
I'll find out in due time when my kids get older, but I think #1 is overblown due to #2. It probably varies by region, but there is so much demand for "back to the roots" where I live, that I don't think this will be as
45.
by dcsommer 2y ago
I think you are thinking of the concept of "explicitness" not "expressiveness".
46.
by dcsommer 2y ago
GP was proposing a different situation where the source code is not changing or changing very rarely. If you have a high churn codebase, obviously the maintenance experience will worsen dramatically after machine translation (at least with
47.
by dcsommer 2y ago
Remote code execution + local privilege escalation to own your device. Just last week on the RCE front: https://thehackernews.com/2024/05/new-chrome-zero-day-vulner...
48.
by dcsommer 2y ago
Yup. We've finally been able to consolidate the redundant flow/congestion control in the HTTP multiplexing and TCP layers while solving the head-of-line blocking problems. It only took 15 years (2009 was SPDY)! HTTP has been aroun
49.
by dcsommer 3y ago
AirBnB should tie the cleaning fee to your rating, perhaps a cleanliness dedicated rating.
50.
by dcsommer 3y ago
I love this idea! I can't wait to try it with my son when he gets a couple months older. By the way, what you have there is a glockenspiel. A xylophone is made with wooden bars, not metal as you have. It's a common mistake!
51.
by dcsommer 3y ago
In the presentation there are links to multiple companies observing a consistent 60-70% of high severity security issues being attributed to memory safety issues. These are companies that are organized, well resourced, etc. Rust eliminates
52.
by dcsommer 3y ago
> you can eliminate these bugs by getting better at writing code. No, the data doesn't show this. This is the "anger" response to being confronted with the reality of the inherent insecurity of C and C++. https:/&#x2
53.
by dcsommer 3y ago
Mars has weather, unlike the moon. Will the samples really still be there a decade or two from now?
54.
by dcsommer 3y ago
It's not necessarily the case that because AI can destabilize truth, that it can also re-stabilize truth. It's much easier to burn something down (e.g. trust) than build it up. c.f. second law of thermodynamics, etc.
55.
by dcsommer 3y ago
Any alternative car culture to "bigger and taller is better" is welcome in my book.
56.
by dcsommer 3y ago
Many parts were. Overall, though, I am glad it exists compared to the before-times.
57.
by dcsommer 3y ago
Except for the Obj-C related parts of Swift!
58.
by dcsommer 3y ago
Video games are very different today. There are far more social and gambling features built-in to addict users than in the old mostly-single-player days. I'm not convinced you've disproved video games as being part of the problem.
59.
by dcsommer 3y ago
There are so many alternative explanations to go through before it "has" to be social media. Already mentioned was time spent outside. For instance, video games are (also) a huge drain on time spent outside.
60.
by dcsommer 3y ago
Please refrain from ad hominem and guilt by association.

More ›