dwattttt

36 ms·

841.
by dwattttt 3y ago
Apologies, I was confused by the reference to 32bit integer overflows for file sizes over 32gb.
842.
by dwattttt 3y ago
They're a little off when looking for 32bit overflows: unsigned 32bit integers top out at ~4gb, that kind of bug would've shown up much smaller than 32gb.
843.
by dwattttt 3y ago
It installs and runs a server stub over SSH (or into docker, or WSL), which lets it act as if you're working on a local project. Stuff like the built-in terminal is remote, building, debugging, etc all work remote.
844.
by dwattttt 3y ago
> What do you tell your junior & senior engineers to do differently? I tell junior & senior engineers to be careful about what assumptions they make of their environments, and to consider everything they depend on a potential lia
845.
by dwattttt 3y ago
> I still haven't heard anyone say what not having containers could win you. What types of code can you only write without containers? Code with one less layer of abstraction. If that layer is buying you something you need, it'
846.
by dwattttt 3y ago
The equivalents in memory safe languages raise more eyebrows. Segfault developing on a shared C codebase and it's a day ending with y. Segfault in a language that's meant to not let that happen? Or conversely if a patch turns up t
847.
by dwattttt 3y ago
In this instance then, it sounds like it has cached the source with a backdoor in it, and anyone using it is potentially exposing themselves to a very public problem right now.
848.
by dwattttt 3y ago
Can't you use @ to bind any part of the match you want to use? https://doc.rust-lang.org/book/ch18-03-pattern-syntax.html#-...
849.
by dwattttt 3y ago
D:\etc\your.conf would like a word, they seem lost and confused.
850.
by dwattttt 3y ago
The HotSpot JVM is already multithreaded, they understand how to write thread-safe code (I'm not sure which JVM(s?) are reported to be impacted, HotSpot was the first I found a result for).
851.
by dwattttt 3y ago
The distinction they might be going for is the difference between guarantees and helpful utilities; good utilities can provide guarantees, but there's a lot to be said for default-safe and a safety culture
852.
by dwattttt 3y ago
How do we know <anything>? Observations we can make plus models that relate those to the things we can't observe directly.
853.
by dwattttt 3y ago
More similar in that they force them to obey the regulations, yes. But regulations cover things like interoperability & anti-competitive behaviour, and here retaliatory actions. I'd very much like _all_ choices to be forced to beha
854.
by dwattttt 3y ago
This is the essence of Rusts lifetime analysis; a pointer to an object can't be live for longer than the object itself is. In this particular example, you'd make an object with a finalizer and hide the raw pointer inside of it. Th
855.
by dwattttt 3y ago
> PID is nice since it's idiot-friendly It may be idiot friendly, but boy do I wish the idiots who did the noise cancellation on my earphones had heard of integrator windup.
856.
by dwattttt 3y ago
I can't speak for others, but it absolutely has made life easier, on both small and large scales. Actually being forced to think about how long allocations and resources need to live turned random "takes days to figure out" b
857.
by dwattttt 3y ago
> What‘s wrong with configuring our platforms with a real, perfectly working programming language? Python's "you must execute arbitrary code to find out a packages dependencies", and the hell that makes working with their
858.
by dwattttt 3y ago
CET is both Indirect Branch Tracking and Shadow Stacks; IBT is the coarse towards CFI, but SSs are a direct ROP mitigation, but enforcing that any address returned to must have been CALL'd from.
859.
by dwattttt 3y ago
> Documenting a 'surprise' is not the same as eliminating it. I'm going to have to remember that one
860.
by dwattttt 3y ago
Try google.com, last month: https://support.google.com/websearch/thread/252500737/google...
861.
by dwattttt 3y ago
Just to add further context; this isn't apps being ported to an Xbox, they notionally need no porting; the Xbox is a "Windows" system. The only actor in this scenario is the platform developer figuring out how an existing API
862.
by dwattttt 3y ago
> The ones who got it wrong are irrelevant, because correct solutions clearly exist for all the potential problems. This is a pretty weak argument. Correct solutions exist for doing extremely unsafe things, but that doesn't mean usi
863.
by dwattttt 3y ago
> leads me to believe that such cars had negligently insecure encryption While accurate, the standard may not be as rigorous as you'd like to imagine; there was a time not long ago when a wire coat hanger was enough to unlock a car.
864.
by dwattttt 3y ago
"Admin"'s identity is the resource you're asking permissions to use. If don't want identities, are you going to manually authorize every file that needs to be interacted with? For a recursive delete of thousands of
865.
by dwattttt 3y ago
I believe the new window is to prevent SHATTER attacks ( https://en.m.wikipedia.org/wiki/Shatter_attack ), to ensure that a higher privileged process has a higher privileged Window. Is that not a concern anymore with thi
866.
by dwattttt 3y ago
> You can perform any computation you like in a single pass if you have enough compute time. You can't perform _any_ computation. A single forward pass through a neutral network can perform many classes of computation, and it can _a
867.
by dwattttt 3y ago
Semver doesn't stop people from depending on unstable/implementation-specific behaviour; it needs to be coupled with a strong mechanism for defining what behaviour is defined by an API, and the result is that "the bug" i
868.
by dwattttt 3y ago
> The carbon cost of the development effort almost certainly outweighed the cost of running the service I don't imagine you were going to put yourself into low power mode as the alternative to development time
869.
by dwattttt 3y ago
From the description, it allocates a buffer based on Content-Length, but copies the size of the buffer it received, thus writing out of bounds of the allocation.
870.
by dwattttt 3y ago
A sprinkle of entropy improves everything

More ›