fay59

7 ms·

31.
by fay59 5y ago
The Flash authoring tools still exist, they’ve just been renamed Animate, and they export to HTML5.
32.
by fay59 5y ago
There is no Swift or Objective-C in the xnu kernel, so the answer to the first question has to be "no". To the second question, Swift is generally safe against these bugs except (1) in the face of race conditions and (2) when the
33.
by fay59 5y ago
This is your periodic reminder that not all problems have a technical solution. There probably is no bot scanning for this. If it’s ever enforced, it must be through manual human action.
34.
by fay59 5y ago
Probably important to mention that at the moment, TypeScript as a configuration format means anyone who writes a configuration blob for you has arbitrary code execution. This is rarely an issue in practice, though.
35.
by fay59 5y ago
There’s more to measure with allocators than how fast it can pump out memory. You’d probably want to check for memory overhead and heap fragmentation and various security considerations.
36.
by fay59 5y ago
For context, a worker on an H1-B can be in the US for a total 6 years. Within that time frame, their employer can sponsor them for a green card, which allows them to stay indefinitely and keep the job. However, through the lens of the gover
37.
by fay59 5y ago
I suspect that’s because they: 1- want to convince people still on Intel Macs to update 2- lengthen the news cycle when the first units are shipped to the tech press and _they_ run these benchmarks
38.
by fay59 5y ago
Charitably, “don’t want to be distracted by politics” means “the status quo works for me”. This doesn’t mean anyone at Coinbase is ill-intentioned, but given the status quo, there’s a lot of people it won’t work for.
39.
by fay59 5y ago
Outside of whether it would be feasible to move wealth to bitcoin before fleeing, discounting the existence of people who weren't miserable before they had to flee their decent existence due to war is insulting. You insinuated that all
40.
by fay59 5y ago
You must pay your taxes in national currency. That alone gives it value beyond trust.
41.
by fay59 5y ago
I loathe Bitcoin, but that’s vastly wrong. As one counter-example, the Syrian civil war didn’t only displace poor people who never had anything to begin with; it displaced a lot of middle class families, made of engineers and doctors and su
42.
by fay59 5y ago
Support can be effective even if it doesn’t come from a first party. As long as someone is signed up to fix your problems, it’s not an unsupported hack.
43.
by fay59 5y ago
People need to accept that the moment you’re face to face with a cop, software isn’t going to restore accountability on the spot or give you an edge against an adversary that has the monopoly of violence. If your threat model is that you sh
44.
by fay59 5y ago
Meat produced in New Zealand might be more sustainable, or ethically farmed, or have a smaller environmental transportation footprint if you’re in New Zealand, than meat from somewhere else. People paying premium for meat may be interested
45.
by fay59 5y ago
Same as with gaming search, it’s possible that spammers are catching up with the Google smarts, and from this point it’s unclear how to proceed.
46.
by fay59 5y ago
ARM already has several instructions that aren’t exactly RISC. ldp and stp can load/store two registers at a given address and also update the value of the address register.
47.
by fay59 5y ago
It’s clear that W^X isn’t “solving security”, but it’s not a bad idea just because it’s a low-hanging fruit. On Apple platforms, I think that it came to be as a natural consequence of the ability to toggle RX mappings to be RW without a sys
48.
by fay59 5y ago
It’s quite possible that you implied this, but I think that the true positives are the ones that had a mental health toll.
49.
by fay59 5y ago
The voucher that Apple can decrypt once enough positives have been received contains a scaled-down version of the original. How else would Apple be able to even run a second hash function on the same picture?
50.
by fay59 5y ago
For better or worse, opaque server-side CSAM models are the norm in the cloud photo hosting world. I imagine that the consequences would be roughly the same as if Google's, Facebook's or Microsoft's "secret classifiers&q
51.
by fay59 5y ago
Before they make it to human review, photos in decrypted vouchers have to pass the CSAM match against a second classifier that Apple keeps to itself. Presumably, if it doesn’t match the same asset, it won’t be passed along. This is explaine
52.
by fay59 5y ago
I would recommend @johnregehr, @shafikyaghmour and @trav_downs if you're new to the area. If you're particularly interested in rust, @myrrlyn, @ManishEarth and @steveklabnik are great follows. @jfbastien is a compiler dad-joker ex
53.
by fay59 5y ago
I’d leave this one out to the lawyers. I’m not one but I don’t think that the court will evaluate the number of lines of code required for help.
54.
by fay59 5y ago
I believe that Graydon left Apple a while ago, but following compiler Twitter, it’s pretty clear that the rust folks and Swift folks are usually in good terms.
55.
by fay59 5y ago
I like to think of LLVM as a piece of infrastructure, like neutral fiber wiring that any ISP is allowed to use. From that perspective, I’m a lot less concerned about having few options that I am about browsers. Although the diversity of C&#
56.
by fay59 5y ago
This is many steps removed from the current situation, which is that the feature rolls out in the US and photo hashes are provided by the NCMEC. Please describe how you think the system would work in China.
57.
by fay59 5y ago
But it’s not something that the NCMEC can do in secret. Apple gets the CSAM reports and decides whether something is worth sending as a tip to NCMEC.
58.
by fay59 5y ago
Matches aren’t automatically reported to authorities. They first go to Apple, and a match on an absurdly non-CSAM picture will be noticed. If it passes through, it will be reported as a tip to the NCMEC, which will also evaluate the picture
59.
by fay59 5y ago
I hope that there will be a transparency report for how many reports happened and how many were found to be false positives. Regarding China, the answer is probably “nothing”, but the system as it exists is not amenable to what I imagine th
60.
by fay59 5y ago
A change in policy regarding the pictures that are scanned is a change of NCMEC policy, which would be the same kind of high-level court dispute. I’m not knowledgeable enough to comment about other countries’ policies, but the fact remains

More ›