goldsteinq

9 ms·

61.
by goldsteinq 5y ago
Your suggestions about revolution lack any specific actions, your suggestions about immigration are simply way to get killed. “Lol just figure out how to overthrow heavily militarized government” is completely ignoring the obvious truth tha
62.
by goldsteinq 5y ago
Your suggestions completely lack any specific actions. What exactly do you think could be done by unarmed and disorganized (because Council of Europe didn’t care when Navalny was jailed despite ECHR decision) Russian people? Please, elabora
63.
by goldsteinq 5y ago
Please, do tell me the most effective way to overthrow the Russian government. I’m a member of protest movement since my high school and I assure you that if you have some option none of us are aware of, I’ll carefully consider it. Also ple
64.
by goldsteinq 5y ago
So you’re saying that all Russian people should just die horrible death trying to go unarmed against National Guard (the force that exists specifically to beat up and torture protestors)... ...or just be shot trying to illegally cross the b
65.
by goldsteinq 5y ago
How exactly you see a revolution of unarmed people against fully armed people that have no problem with hurting and killing others? Do you really think that average Russian has enough money to leave the country?
66.
by goldsteinq 5y ago
It’s nearly impossible to organize a large scale protest in Russia. All the opposition leaders were jailed or murdered and even just posting info about protests is a criminal offence. There’s also a problem with many people being indoctrina
67.
by goldsteinq 5y ago
As an independent observer on the last Duma (lower house of Russian parliament) elections, I can tell with certainty that these elections were rigged. Upper house of the parliament is not elected.
68.
by goldsteinq 5y ago
Russian government systematically shuts down free press, murders or imprisons leaders of oppositions and rigs elections. The last elections to the Russian parlament were obviously rigged, and yet international community recognized them as v
69.
by goldsteinq 5y ago
I like Markdown, but I don’t like proprietary Electron apps.
70.
by goldsteinq 5y ago
The hard part isn’t \section{Introduction}, but horrible hacks like \makeatletter you need to do something non-trivial.
71.
by goldsteinq 5y ago
CSS is kinda Turing-complete, but you need an external tick. And running SQLite compiled to CSS would probably be unusably slow.
72.
by goldsteinq 5y ago
The answer to all of these is “install backup brakes and refuse to start unless both primary and backup brakes are working”.
73.
by goldsteinq 5y ago
Except this version doesn’t compile. I’m not sure that it’s possible to get it to compile: type-level Idris is actually a _subset_ of Idris and pattern-matching non-ADTs is half-broken on the type level. You can also observe this problem in
74.
by goldsteinq 5y ago
Read permission for a specific (non-system) directory is probably fine.
75.
by goldsteinq 5y ago
I did answer directly: this exploit requires run permission with any argument and write permission to any directory. It allows malicious script to escape sandbox and execute arbitrary code outside of it.
76.
by goldsteinq 5y ago
Yes, it exploits `--allow-run=whatever` + `--allow-write=whatever` to execute arbitrary code outside of the sandbox. The problem with the Deno security model is that it’s hard to predict how granting any specific permission would affect ove
77.
by goldsteinq 5y ago
Yep, trying to restrict the access to a system on the API level instead of the OS level will inevitably lead to problems like these (Deno is doing worse than it could though). If you want to isolate your program, you should use an OS-level
78.
by goldsteinq 5y ago
It’s arguably worse than Node because Node doesn’t pretend to provide any security. With Deno you may be tempted to think that permission to run specific command actually means that program can’t run some other command (it can, and doing th
79.
by goldsteinq 5y ago
Deno’s permission system is broken, you shouldn’t rely on it. Deno developers consistently ignore security issues, high priority bugs take months to fix. https://github.com/denoland/deno/issues/11964 https:&
80.
by goldsteinq 5y ago
Tor exit nodes are public and given that SearX traffic is easily distinguishable from normal traffic, you're once again in a very unique group of people who use SearX + Tor setup.
81.
by goldsteinq 5y ago
The problem with self-hosted search engine is that they make you _very_ unique: you’re the only client of the ”backend“ engine with that (static and non-NATed) IP. Furthermore, you’re now one of the small group of people with ”hosting“ IPs.
82.
by goldsteinq 5y ago
You still can use Unicode in comments and string literals. You just can't use non-ASCII characters in identifiers. Unicode in identifiers is just a bad idea. 1. It creates a security consideration with confusable identifiers (and lints
83.
by goldsteinq 5y ago
You can just do `#![forbid(non_ascii_idents)]` in Rust. It'll prevent this kind of attacks completely and you shouldn't need non-ASCII idents anyway.
84.
by goldsteinq 5y ago
Option<u64> would look like tagged union in memory, so one bit "tag", 8 bytes u64 and padding. If type inside of Option<_> has invalid values (like references which can't be null) one of these would be used for No
85.
by goldsteinq 5y ago
Python has operator overloading and is generally pretty complex language. It's better to think of Go as C, but with greenthreads and GC. And having to type tons of boilerplate for any trivial task isn't "expressive simplicity
86.
by goldsteinq 5y ago
> There's no function coloring and all functions are asynchronous. There's another form of function coloring, "does this function take context or not". - It's easy to call function-without-context from function-w
87.
Program in C (Parody song) – fasterthanli.me(fasterthanli.me)
3 points by goldsteinq 5y ago|0 comments
88.
by goldsteinq 5y ago
Good. Being able to handle emojified uwu-ified bee movie script is important.
89.
by goldsteinq 5y ago
Or, one could embed Lua, which has simple syntax and built for that exact purpose
90.
by goldsteinq 5y ago
> It can't handle 78kb worth of emoji-fied uwu-ified bee movie script apparently

More ›