gpm

30 ms·

601.
by gpm 10mo ago
> How did you get from "That way" to thinking I claimed that C, by default, handles allocation failures? I think you might want to reread the line you quoted directly above this, That way of writing code, i.e. "write[ing]
602.
by gpm 10mo ago
I'm not saying "automatic", I'm including "sanitizer retursn an error" as default - that's not what happens in C (or at least any C project I've worked on). You have to actively remember and choose to
603.
by gpm 10mo ago
> > C doesn't force you to check the allocation at all. > No one ever claimed it did; You specifically said > Every allocation must be checked at the point of allocation ... > the default is to check the returned value f
604.
by gpm 10mo ago
> Every allocation must be checked at the point of allocation, which is "the default" C doesn't force you to check the allocation at all. The default behavior is to simply invoke undefined behavior the first time you use
605.
by gpm 10mo ago
Handling OOM gracefully - i.e. doing anything other than immediately crashing and/or invoking undefined behaviour - is absolutely not the default in C. It's possible. But very very few projects do.
606.
by gpm 10mo ago
Isn't Anna's Archive already run anonymously? So they sort of did...
607.
by gpm 10mo ago
Oh look, an article which isn't titled what you claimed, or about what you claimed, and doesn't include an animation. Who? And I still don't see the moral relevance of any of this to choosing not to link to a site that has ha
608.
by gpm 10mo ago
Your point is that... Wikpedia editors choice to have articles about sex acts is morally inconsistent with a choice not to have direct links to a site a based around harassing, stalking, doxing, etc that has been directly tied to multiple s
609.
by gpm 10mo ago
As much as I'd like to claim the values [1] that Wikimedia (the foundation behind wikipedia) supports as a progressive - I think they're quite independent of the progressive/conservative spectrum. [1] https://wikim
610.
by gpm 10mo ago
Having a sense of morality is not a problem. Good for them.
611.
by gpm 10mo ago
You already do, to the kernel. It's probably not much more costly to do so an extra time in userspace.
612.
by gpm 10mo ago
It's also widely acknowledged that elections in Russia are rigged, and yet the US was quite angry at Ukraine over Russia's (false, as it turned out) claim that Ukraine attacked Putin...
613.
by gpm 10mo ago
Because that wouldn't benefit Putin personally as much as the status quo? And he's the decision maker. Dictators routinely make decisions where they hurt their country to keep a much bigger slice of the pie for themselves...
614.
by gpm 10mo ago
Pretty sure they are saying "more vulnerable to" not "guilty".
615.
by gpm 10mo ago
Free bandwidth. (Also the very good sibling-answer about tunnels).
616.
by gpm 10mo ago
I'm not 100% sure the semantics here are nailed down - but I think there's no guarantee that `a` continues to exist after assignment to `b`. The value in it has been moved out of it after all... The memory which was used for the
617.
by gpm 10mo ago
> The compiler does not and cannot check if these strict requirements are enough for the intended "safety". Right? It is the judgement of the programmer. Yes*. It's up to the programmer to check that the safe abstraction t
618.
by gpm 10mo ago
I'm pretty sure that every example except example-3 in the readme intentionally invokes undefined behavior - if that helps you picture how it works ;)
619.
by gpm 10mo ago
> This is the koolaid I am not willing to drink. > If you can add safety very carefully on top of unsafe stuff (without any help from compiler), why not just use `c` and add safety by just being very careful? There is help from the co
620.
by gpm 10mo ago
> you need the borrow checker guarantees to implement downstream compilation steps. You don't technically. The borrow checker doesn't effect the semantics of the program (like, for example, type inference does) and the rest of
621.
by gpm 10mo ago
The unsafe keyword doesn't disable the borrow checker... it lets you interact with different pointer types that aren't borrow checked, but if you're using the normal reference types in rust the same guardrails are still in pl
622.
by gpm 10mo ago
> "safety" does not show up in types It does in rust. An `unsafe fn()` is a different type than a (implicitly safe by the lack of keyword) `fn()`. The difference is that unsafe fn's can be encapsulated in safe wrappers, wh
623.
by gpm 10mo ago
In terms of a one off product without active support - the only thing I can really imagine is a significant use of formal methods to prove correctness of the entire runtime. Which is of course entirely impractical given the state of the tec
624.
by gpm 10mo ago
I think you should consider adjusting the marketing to reflect this. "untrusted JavaScript" -> "JavaScript", "Secure sandboxing with CPU (100ms) and memory (128MB) limits per worker" -> "Sandboxing w
625.
by gpm 10mo ago
None of this mitigates the fact that apriori you don't know if you're being served the same package manifest/packages as everyone else - and as such you don't know how many signatures any given package you are installing
626.
by gpm 10mo ago
That looks cool, which might just be the point of your comment, but I don't think it actually changes the argument here. You still have to trust the app store to some extent. On first use, you're trusting f-droid to give you the c
627.
by gpm 10mo ago
Eh... The set of people who can maliciously modify it is the people who run f-droid, instead of the cloud provider and the people who run f-droid. It'd be nice if we didn't have to trust the people who run f-droid, but given we
628.
by gpm 10mo ago
Second hand book stores and libraries the world over have made it work
629.
by gpm 10mo ago
Like when you buy or sell a second hand book without getting permission from the copyright holder to distribute their copyrighted material, which would otherwise be necessary.
630.
by gpm 10mo ago
Sure, maybe anyways but let's assume it is, the parties to that contract are the manufacturer and the copyright holder. The contract allows the manufacturer to distribute it to the distributor without requiring the distributor to agree

More ›