hnlmorg

8 ms·

91.
by hnlmorg 2mo ago
Is that something people believe? I can’t say that’s a myth I’ve ever heard.
92.
by hnlmorg 2mo ago
Early PCs weren’t written in Rust.
93.
by hnlmorg 2mo ago
Yup. It’s a system that worked when it was relatively safe to assume a chain of trust. But it’s not scaling to the era of AI agents writing patches, nor the increasingly number of attacks against existing foundational packages. We really do
94.
by hnlmorg 2mo ago
If America had control over oil then there wouldn’t have been a war in Iran. Nor Venezuela. Western AI is a bubble. Whether it pops or just fizzles remains to be seen. I obviously hope for the latter. But either way it’s not sustainable in
95.
by hnlmorg 2mo ago
You’re not even attempting to discuss the topic, more interested in make meta attacks about me personally. So I think it’s now safe to assume you’re just trolling. In which case I’ll return the favour by adding you to the ignore list. Pity
96.
by hnlmorg 2mo ago
> No, you created two straw men and attacked them, then got upset at me pointing this out, while accusing me of doing exactly what you are doing. I’m not upset at you. I’m just saying you’ve misread the thread and then proceeded to make
97.
by hnlmorg 2mo ago
I was replying to someone who suggested sandboxing by raising a couple of places their suggestion falls short. Did you even read this thread? Or just assumed “anyone suggesting sandboxing wouldn’t work must be an idiot”? Because you’ve mana
98.
by hnlmorg 2mo ago
> Are you not concerned about an asteroid impact rendering you extinct during your next Rust build? Why not? That's the same level of relevance as your supposed concern. That’s a strawman argument and you’re still dodging the questi
99.
by hnlmorg 2mo ago
Smaller maybe. But it’s still an unacceptable risk. I refer you back to my example of compiled code being used by customers. Arguing that compromised code is safer when sandboxed really misses the real problem: that you’re running compromis
100.
by hnlmorg 2mo ago
Exploits can be shipped in any type of dependency. Remember the compression exploit that affected even SSH? The problem is your solution depends on the honor-system. Ie “trust me, because I’m just a YAML mashaller. Why would I want to injec
101.
by hnlmorg 2mo ago
That’s already easy to do. In fact most CI/CD pipelines already work this way. The problem is you still have a compromised executable at the end of the pipeline. So you haven’t actually solved much.
102.
by hnlmorg 2mo ago
> Yeah, let's hold up the entire world of offensive cybersecurity capability while you work on that. Sure they will wait. Nice sarcasm but you’re not actually addressing a solution to the problem I raised. > You don't. You s
103.
by hnlmorg 2mo ago
You add company packages to an exclusion list.
104.
by hnlmorg 2mo ago
Allocations can and do fail in Linux. To be clear: I’m not trying to defend Linux here. Just calling out the GPs BS when he said Linux is uniquely bad in POSIX.
105.
by hnlmorg 2mo ago
> What is your critique of their approach? It’s half arsed, brittle and far from user friendly. > Is it not the case that `go get` is the only one which doesn't even provide a way for the person downloading to run the downloaded
106.
by hnlmorg 2mo ago
Two problems with this: 1. There isn’t a single universal standard for sandboxing across all the different platforms that are supported by Rust. 2. Even if there were, if you’re compiling untrusted code then why would you trust the built ou
107.
by hnlmorg 2mo ago
Go took the same approach and ended up having to implement a halfarsed one when everyone started implementing their own.
108.
by hnlmorg 2mo ago
> Who says it needs to be desktop for proper memory management, servers and embedded can crash willy-nilly with OOM? The context of the thread is about the UX. And the OS crashing isn’t a better option than an OOM killer. Frankly, there’
109.
by hnlmorg 2mo ago
Oh I agree that the outages are unacceptable regardless of their “social media origin”. I also don’t buy their excuse that it’s due to increased loads due to AI. If that were the case then we’d see more patterns to the outages. But instead
110.
by hnlmorg 2mo ago
Yeah, Windows file system backend is highly object oriented and has a bunch of event driven hooks. Which is great for supporting tools like antivirus. But terrible for lots of small random writes (on area Linux and most UNIX systems excel a
111.
by hnlmorg 2mo ago
> I mentioned they aren't the only UNIX where this isn't a problem. You did. But without examples, it’s a meaningless throwaway. Personally, I can’t say I’ve pushed many other UNIX desktops that far that they’ve OOMed. Except m
112.
by hnlmorg 2mo ago
Agreed on all points. I think people often forget that GitHub is really more akin to a social network than it is a software development tool. By that I mean the stuff that makes GitHub great is all the same stuff that originally made social
113.
by hnlmorg 2mo ago
> The only argument I could entertain on this line of thought is that the US has reached it's peak (today) and may decline. That’s literally the point we are discussing ;) > An actual failure of a super power is britain. That&#x2
114.
by hnlmorg 2mo ago
macOS includes a GUI user land whereas Linux is just a kernel. So Apple can build a whole user-controlled GUI workflow around memory exceptions, which Linux cannot. Maybe what needs to happen is new Linux syscalls + signals for DEs to utili
115.
by hnlmorg 2mo ago
It might be now, but the default settings back in the 2000 and XP era were far from optimal.
116.
by hnlmorg 2mo ago
That’s not the case with Firefox. I’ve found a few idle YouTube tabs is enough to bring macOS to its knees. Though I do wonder if uBlock Origin is the hidden cause rather than Firefox itself.
117.
by hnlmorg 2mo ago
> The ideal would be to go into swap without becoming unresponsive, so that the user can quit a program of their choice to free memory. Linux already does this. The issue is when your swap is full too, or you’ve exhausted your RAM at suc
118.
by hnlmorg 2mo ago
I get memory related freezes on macOS all the time. And back when I was forced into running Windows, I used to get memory-related freezes daily. Literally daily. So I’m really not convinced the situation is drastically different there. I me
119.
by hnlmorg 2mo ago
SpaceX needed to happen because US had fallen behind the rest of the international community. And the USs advantage in AI shrinks year on year; presently estimated at only 6 months ahead. Also, all these technologies are owned by corporate
120.
by hnlmorg 2mo ago
I think the high upfront capital required to start out in the industry is a much much bigger hurdle than the regulation. You see the same problem in IT with hardware startups vs purely software ones. The moment you need to own something mor

More ›