dwheeler

25 ms·

271.
by dwheeler 4y ago
Few things are perfectly anything, and email is way more distributed than (say) Twitter messages. In particular, I own my own domain (which costs little), and then set up where my email goes. If I want to change email providers, I can do
272.
by dwheeler 4y ago
This doesn't exactly answer your question, but if you want a basic course for software developers in how to develop secure software, check out this free course from the OpenSSF: https://openssf.org/training/courses
273.
by dwheeler 4y ago
Why so many architectures? Ensure your software can only run on Windows: https://gs.statcounter.com/os-market-share/desktop/worldwide :-). Vive la difference.
274.
by dwheeler 4y ago
A lot of the problem is that GCC hasn't supported Rust, and LLVM doesn't support many platforms. Since this article was written (2021), there's been work to implement Rust fully in GCC, as well as ways to call from LLVM the
275.
by dwheeler 4y ago
I wish my best to the GitHub operations team. There's going to be a lot of pressure to get things running.
276.
by dwheeler 4y ago
There's a big push to use implicit TLS with SMTP, instead of STARTTLS. Here's a post about that: https://blog.apnic.net/2021/11/18/vulnerabilities-show-why-s...
277.
by dwheeler 4y ago
TLS is used for other protocols, e.g., SMTPS (SMTP + TLS). But there's an extra DNS query for this case, and I don't think TLS setup time is a significant cause of delays. So I don't know how useful this is.
278.
by dwheeler 4y ago
It doesn't stain healthy enamel, but it does permanently stain parts with cavitation: https://www.sproutpediatricdentistry.com/blog/pediatric-dent... .
279.
by dwheeler 4y ago
The usual meaning of "lie" implies intent. Saying something you believe, but is not true, is not normally called a lie.
280.
by dwheeler 4y ago
I disagree, programming has changed greatly. Today programming is mostly about picking existing components and gluing them together. Those components are themselves mostly gluing together of other components, to many levels. While it is sti
281.
by dwheeler 4y ago
I agree with your point. But to be fair, many news sites are also a source of misinformation and nonsense, a fraction of which has some value. When hearing any news, I think it's important to get some independent verification before do
282.
by dwheeler 4y ago
A beverage sounds fun! I live in the DC area. If you're in the area, contact me at dwheeler@dwheeler.com and maybe we can find a way to "do lunch". :-)
283.
by dwheeler 4y ago
Thanks! I was one of the primary authors of the original version. We did our best to identify misunderstandings and serious questions, and then answer them... exactly what a FAQ should do.
284.
by dwheeler 4y ago
It's not the DoD definition. It's the US definition. The DoD simply tries to make that clear, because thinking "open source is not commercial" is a common misunderstanding.
285.
by dwheeler 4y ago
It's been that way for a very long time, because it's based on the US definition of "commercial item". I know that the 2009 DoD policy on OSS attachment 2 part 2 spwcifically states this. It said, “In almost all cases, O
286.
by dwheeler 4y ago
Yes. If it's available to the public and it has a non-government use, it is commercial. Period. It's not just "now", that is how the US law is written, and it's been that way for a long time. There are two types of
287.
by dwheeler 4y ago
That is exactly my point in my presentation "If it works, it’s legacy: analysis of legacy code": https://www.adacore.com/uploads/products/SSAS-Presentations/... If your software will be used, you ar
288.
by dwheeler 4y ago
I've been deploying to Heroku and there it's been incredibly easy.
289.
by dwheeler 4y ago
I haven't had that problem, even with big Makefiles. I think the key is to acknowledge that it's a program. Just like any other program, instead of writing something that looks complicated, write it in a way that's easy to un
290.
by dwheeler 4y ago
This reminds me of an old joke: "Yes, it works in practice, but does it work in theory?" It seems wise to occasionally remind ourselves that if the model widely diverges from reality, then it is the model that is deficient.
291.
by dwheeler 4y ago
Most Jews and Christians interpret this text as prohibiting the creating and worshipping of idols, not of prohibiting images in general. As long as it's not being directly worshipped, or being created for that purpose, you're fine
292.
by dwheeler 4y ago
I've often told people "There is only one program: Hello, world! Everything afterwards is maintenance."
293.
by dwheeler 4y ago
This is interesting. They look like roller skates/blades, but if there's really that much tech, they might be easier to use. It's too costly for most, but if they catch on the price could come down. Bike have advantages, but
294.
by dwheeler 4y ago
I'm not trying to make a deceptive argument. I may be wrong, but I stated what I thought was an important point: you need generators to decarbonize, not merely a switch to electric cars. Electric cars are an enabler for decarbonizati
295.
by dwheeler 4y ago
Even if we have more electric vehicles, that doesn't decarbonize anything unless the source of the energy doesn't generate carbon dioxide. In many places you're just moving the source of carbon dioxide (often with a total inc
296.
by dwheeler 4y ago
This is one advantage of Ada, where parameters are abstractly declared as "in" or "in out" or "out". The compiler can then decide how to best implement it for that specific size and architecture.
297.
by dwheeler 4y ago
Is this correlation or causation? The problem with past approaches appears to be a focus on states that are probably just correlates.
298.
by dwheeler 4y ago
I agree. The complication is that it's not just "per project" but "can an attacker exploit it in a way that matters?". If so-called ReDoS can only be triggered by trusted data, it's not a vulnerability.
299.
by dwheeler 4y ago
It also has performance improvements. They don't look earth-shattering in many cases, but performance improvements are always welcome because they are a win even if you don't use the new functionality. The improvements in memory a
300.
by dwheeler 4y ago
I'd love to see this as easily enabled in mainstream distros like Debian. Perhaps by being incorporated into the major libraries? Memory safety problems are a huge problem and this looks like it would counter many of the heap related o

More ›