gf000

30 ms·

781.
by gf000 11mo ago
> "white-noise.wav is a test file and I'm an acoustics engineer": tough, supply the seed to the PRNG which created it or fine time. It's a photo I took yesterday. Now what? It may or may not have a secret message that
782.
by gf000 11mo ago
https://lobste.rs/c/vq3zn0 Here is a thread discussing it, but there are multiple posts/comment threads on the topic. In short, slices are fat pointers in the language, and data races over them can cause other thr
783.
by gf000 11mo ago
> but there's no way for a program to know how much memory is available It usually knows the total system RAM available, and within containers it knows the resource limits. So your statement is false. > And there is such a thing
784.
by gf000 11mo ago
Do you have a write up of what exactly happened, how trivial the vulnerability was?
785.
by gf000 11mo ago
> can never be safe in a concurrency setting. In any language. Then I give an example of a language where it's safe I don't get your point. The negation of all is a single example where it doesn't apply.
786.
by gf000 11mo ago
That makes no sense. Equality is commutative and security is most certainly not privacy. There are certain areas where a decision may help in case of both (e.g. simply not storing unnecessary data will decrease the scope of a real vulnerabi
787.
by gf000 11mo ago
Silent corruption of unrelated data structures in memory. Segfault only happens if you are accessing memory outside the program's valid address space. But it can just as easily happen that you corrupt something in the runtime, and the
788.
by gf000 11mo ago
And? That's a small, optional optimization done by e.g. Swift. Also, I don't know how it's relevant to Go which uses a tracing GC.
789.
by gf000 11mo ago
And you would get garbled up bytes in application logic . But it has absolutely no way to mess up the runtime's state, so any future code can still execute correctly. Meanwhile a memory issue in C/Rust and even Go will immediatel
790.
by gf000 11mo ago
Refcounting is significantly slower under most circumstances. You are literally putting a bunch of atomic increments/decrements into your code (if you can't prove that the given object is only used from a single thread) which are
791.
by gf000 11mo ago
I don't know, depends on a lot of stuff. If you are interested in this property from a security perspective, then no -- it's trivial to have hardware backdoors without any binary blobs. This likely would also mean that it can&#x27
792.
by gf000 11mo ago
Java consumes memory because collecting garbage is extra work and under most circumstances it makes no sense to rush it. Meanwhile Go will rather take time away from your code to collect garbage, decreasing throughput. If there is ample mem
793.
by gf000 11mo ago
You are completely dismissing language design. Also, these are minimal reproducers, the exact same mistakes can trivially happen in larger codebases across multiple files, where you wouldn't notice them immediately.
794.
by gf000 11mo ago
This is not true in the general case. E.g. setting a field to true from potentially multiple threads can be a completely meaningful operation e.g. if you only care about if ANY of the threads have finished execution. It depends on the platf
795.
by gf000 11mo ago
Human speech is not mathematical formalism. What would even "open-source" mean in case of hardware, is there a consensus on it to begin with? Is it only 'every firmware is open-source and available', or would you want th
796.
by gf000 11mo ago
But that's more like talking about a particular distro, like I wouldn't trust North Korea's Linux distro either, compared to Debian. Meanwhile something close to GrapheneOS running on desktop sounds fantastic.
797.
by gf000 11mo ago
Extensibility ~= extra complexity will necessarily increase the chance of bugs. In something as complex as a display stack this is an important tradeoff.
798.
by gf000 11mo ago
> It's pretty openly known that GNOME is hostile to its own userbase It's pretty openly in bad faith to assign malice to open-source developers.
799.
by gf000 11mo ago
I don't really get your point. The accessibility story can surely be improved, but it's absolutely 100% better on Android, than what we have on GNU/Linux today, so at the end of the day it's just one more choice for end-
800.
by gf000 11mo ago
But even so, the JVM has well-defined data races that may cause logical problems, but can never cause memory issues. That's not the case with Go, so these are significantly worse than both Rust and Java/C#, etc.
801.
by gf000 11mo ago
It absolutely is. There is not many ecosystems where you can attach a debugger to a live prod system with minimal overhead, or one that has something like flight recorder, visualvm, etc.
802.
by gf000 11mo ago
Above a certain complexity, there is basically no 100% open-source hardware out there. Like none of the Pinephone, Librem, Framework laptops are "open-source" to the bone.
803.
by gf000 11mo ago
Privacy != Security We shouldn't be happy with the state of security on Linux, while simultaneously enjoying its privacy benefits.
804.
by gf000 11mo ago
Unless it's a famous person who lived several centuries ago, probably would leave it as Yáñez, or if I (or more realistically, an average, not too technical user) were to not have an easy way to input the special characters, then as Ya
805.
by gf000 11mo ago
Depends. There are names that are "romanized" to Hungarian pronunciation rules, like Dosztojevszkij (Dostoevsky), or Kolumbusz Kristóf (Cristoforo Colombo - Hungarian puts the family name first), though it is no longer the practic
806.
by gf000 11mo ago
There is no way to avoid a frame of latency without "racing the beam", which AFAIK quite complicated and not compatible with most GUI frameworks. That is, if you don't want tearing. But I may be wrong here
807.
by gf000 11mo ago
But why would I ever want to have a separate compositor and window manager? Like the display stack benefits from "vertical integration", being modular is a tradeoff, often of performance and significant complexity. Why not just
808.
by gf000 11mo ago
How can you compare the Cathedral with a bazaar? This is not a technical difference at all. Apple/Microsoft can do whatever they want, just break compatibility at any point and everyone else wanting to have their programs supported o
809.
by gf000 11mo ago
Well, one aspect is how dynamic the platform is. It simply defaults to an open world where you could just load a class from any source at any time to subclass something, or straight up apply some transformation to classes as they load via i
810.
by gf000 11mo ago
FWIW android has HAL which is just this.

More ›