hsivonen

20 ms·

151.
by hsivonen 8y ago
> What about Linux and the BSD's? Linux distros typically use Mozilla's root list. > If Mozilla untrusts Fubar CA's root cert and the OS still trusts it, what happens? Then it no longer works in Firefox but works in oth
152.
by hsivonen 8y ago
32-bit ARM also having a problem doesn't mean it's not a problem.
153.
by hsivonen 8y ago
Also fun: whitespace after </body>
154.
by hsivonen 8y ago
As I understand it, Java has features that make the time complexity (in the O(n^2) sense) and the general implementation complexity (in the probablity of bugs sense) of the Java byte code verifier worse than WebAssembly validation.
155.
by hsivonen 8y ago
Some character properties need to be immutable and can't be set correctly until the committee has an actual character to analyze.
156.
by hsivonen 8y ago
Does the attack work if AMT has not been provisioned?
157.
by hsivonen 8y ago
A crate that I wrote, encoding_rs uses unsafe for performance purposes (probably a bit more than absolutely necessary). I'd be very unhappy if unsafe compiled to slower code. The unsafe bits intermingle with safe Rust to such a degree
158.
by hsivonen 8y ago
Likewise, it would be nice if on ARMv7 one could figure out if NEON is available without having to have permission to open a file under /proc.
159.
by hsivonen 8y ago
Multithreading isn't Rust's only performance benefit. Another is being able to write single-threaded code in a way that'd be too risky to do without the borrow checker making sure it's OK. (I.e. in C++ one would write so
160.
by hsivonen 8y ago
Ars Technica say $50, but it could mean a preinstall. https://arstechnica.com/gadgets/2018/07/cheap-surface-go-now...
161.
by hsivonen 8y ago
The U.S. has Fair Use, which adapts to novel cases. The EU has enumerated exceptions to copyright.
162.
by hsivonen 8y ago
TenFourFox isn't SPARC but PowerPC. Rust runs on PowerPC but not on OS X on PowerPC. OS X earlier than 10.7 lacks at least some thread-local facilities that Rust expects.
163.
by hsivonen 8y ago
As the very first language Python may be a good choice compared to Rust in the sense that one can learn to _program_ with a smaller risk of such up-front frustration as to give up altogether. However, after getting to the point of feeling “
164.
by hsivonen 8y ago
As with natural languages, if you want to learn language X, go learn language X and don't try to learn Y first. So if you want to learn Rust, learn Rust. In my experience, particular theory as in CS papers isn't needed for learnin
165.
by hsivonen 8y ago
In what circumstances does it actually matter to be able to get better compression than CCITT Group 4? For example, when is size such a deciding factor that it makes sense to forgo the compatibility of CCITT Group 4 in PDF and to use someth
166.
by hsivonen 8y ago
That doesn't explain it from the use case perspective. E.g. dereferencing a pointer with asterisk operator requires the pointer to be aligned, so unchecked things can still have requirements that need to be met.
167.
by hsivonen 8y ago
Aside from the aspect of restrict pointers being a footgun for C programmers who aren't used to them and apart from being able to convert C to unsafe Rust with e.g. Corrode, what use cases (within the scope of things that one has to us
168.
by hsivonen 8y ago
Are *const T and *mut T also restrict in C terms? (If not, why not?)
169.
by hsivonen 8y ago
By definition, a license that has Field of Use restrictions is not an Open Source license. Creative Commons NonCommercial licenses, for example, are neither Open Source nor Free Software licenses.
170.
by hsivonen 8y ago
LGPL is sensitive to linkage, which means it has very different effects on different programming languages. For example, it's stricter for Rust and Go (as those languages are typically used) than for Java and Python (as those languages
171.
by hsivonen 8y ago
The all caps part has an extra sentence, too.
172.
by hsivonen 8y ago
That license does not match https://opensource.org/licenses/BSD-3-Clause
173.
by hsivonen 8y ago
For a long time, but not anymore, Firefox Nightly called a function called TriggerQuirks() as the first thing in main() on Mac. The function faked the bundle id as a release build bundle id in order to get the Firefox-specific Mac OpenGL be
174.
by hsivonen 8y ago
Thank you. As a user, how (other than asking here) was I supposed to convince myself of the identity binding between “snapcrafters” and the GitHub org and to convince myself that trust in the correspondence between snapcraft.yaml and what I
175.
by hsivonen 8y ago
The risk here is not just going to the Snap Store. At least right now on Ubuntu 18.04 if you type a command that's not installed but is provided by a Snap app, the shell suggests that you install the snap the way it suggested an apt co
176.
by hsivonen 8y ago
Presumably it's https://github.com/snapcrafters , but what links the Snap Store identity to that GitHub org? Where does snapcraft.yaml get executed? On my computer? On Canonical's infra? On the packager's com
177.
by hsivonen 8y ago
How does one figure out who a given snapcraft packager is? E.g. Sublime Text says it's packaged by Snapcrafters. Who is that?
178.
On Comodo CA’s Recent Revocation of an SSL Certificate for KY-Based Stripe, Inc(comodoca.com)
4 points by hsivonen 8y ago|0 comments
179.
by hsivonen 8y ago
Couldn't the installer write the initial seed?
180.
by hsivonen 8y ago
What reasons are there not to implement the OpenBSD model where the bootloader passes the kernel a seed that the kernel generated previously?

More ›