humanrebar

9 ms·

61.
by humanrebar 3y ago
Autotools need to go away, but most of the underlying use cases that cause build system complexity comes down to dependency management and detection. The utter lack of best practices for those workflows is the root cause of complexity. Ther
62.
by humanrebar 3y ago
Compilers and programming languages tend to be under supported (or overcomitted?) for what it's worth. They're definitely not solo projects, but certain features and components can be basically that way. I take some of the recent
63.
by humanrebar 3y ago
What about debuginfod instead? Look up your source and even your debug symbols by your build identifier.
64.
by humanrebar 3y ago
The better fix would be to move to proper dependency management and depend on a version range of a dependency instead of hoping you can do a better job of modelling the same with strings hardcoded into a CMakeLists.txt.
65.
by humanrebar 3y ago
Universal support of SARIF by compilers would be most of that.
66.
by humanrebar 3y ago
I'd prefer if the ecosystem standardized on some dependency management primitives so critical projects aren't expected to invent buggy and insecure hacks ("does this strong parse?") in order to accurately add dependencie
67.
by humanrebar 3y ago
The argument is that various steps in the backdoor relied on hacks and tech debt in autotools that are taken as arcane but normal, like detecting whether certain dependencies exist by trying to compile snippets of code. Instead of, you know
68.
by humanrebar 3y ago
Yeah, a libertarian would let you buy penicillin from a pharmacist without a prescription, so you wouldn't need an ER visit to see a doctor to get the obvious prescription written before next week.
69.
by humanrebar 3y ago
Routine dental care is routine, so calling it "insurance" is really odd in my opinion. Insurance isn't mainly providing protection against tail risk when it comes to eye care, dental care, and even predictable routine checkup
70.
by humanrebar 3y ago
Gradual and targeted rewrites are at least an order of magnitude more affordable.
71.
by humanrebar 3y ago
Yeah, that's a valid take. But if that's true, then Rust isn't giving them an edge (yet?). So it isn't the most important engineering task. If you're saying there's no technical path to success for Mozilla... w
72.
by humanrebar 3y ago
Well, pay attention and hold them accountable. But Microsoft (for instance) certainly has incentives to avoid being the next Boeing or Volkswagen with respect to being excellent box checkers that end up missing the mark on the outcomes thos
73.
by humanrebar 3y ago
Mozilla also has struggles staying competitive with its core products. The main criticism of Rust as a solution to safety concerns is about that kind of outcome. Obviously Mozilla's challenges are multifaceted and don't boil down
74.
by humanrebar 3y ago
> I don't know about this. There are a lot of people being paid by their companies to work on the C++ committee and on various compiler teams. The standards document isn't the same as a C++ implementation. The implementations a
75.
by humanrebar 3y ago
> ...the actual output of the standard's committee is so far behind The committee just publishes documents. It is actually far ahead of C++ implementations. The committee would probably move faster if there were more attention (and
76.
by humanrebar 3y ago
Or you can flip it around and ask why there isn't a body in the C and C++ community funding tangible advancements in the security and safety problem space the way the Python Foundation and Rust Foundation are.
77.
by humanrebar 3y ago
He addresses this point in the article as well, discussing risks that that language community gets too fixated on one kind of safety while attackers shift to other concerns like supply chain, code injection, or leaked credentials.
78.
by humanrebar 3y ago
CMake can detect when new source files are added and rerun itself. You need to know how to spell that option when globbing though.
79.
by humanrebar 3y ago
CMake supports globs. It just has notes in the reference docs about why that can lead to slower build times or even incorrect builds (like undetected new files) in some cases.
80.
by humanrebar 3y ago
Now add an address sanitizer pass, reasonable unit tests, and wire it up to CI so you don't accidentally break things or trash memory.
81.
by humanrebar 3y ago
But C ships to all sorts of places, so why would C limit its options by limiting its support to its own package manager?
82.
by humanrebar 3y ago
If you're writing C, you might not want tools written in higher level languages required for your build environment. This is why you still see a lot of important C project support autotools even though it's a pretty awful develope
83.
by humanrebar 3y ago
I'd rather go the other way and not require a prescription for a breathing machine. They're not habit forming and you won't OD on breathing.
84.
by humanrebar 3y ago
C++26 is slated to include std::breakpoint and a couple related features. I'm expecting we'll see more portable and consistent tech for writing recoverable assertions going forward. https://en.cppreference.com/w&#x
85.
by humanrebar 3y ago
The entities and their destructors still have names that the compiler and linker understand. Programs just can't name them.
86.
by humanrebar 3y ago
I'm the opposite. There's no clear notion of status, remaining concerns, priority, etc. in an email thread.
87.
by humanrebar 3y ago
Swift is an interesting option, though that interop requires dropping support for non-clang toolchains, and I don't see that happening any time soon. I mean, it makes sense for code that exclusively targets Apple platforms, and maybe t
88.
by humanrebar 3y ago
I expect wider convergence on better build tools like CMake has made it relatively easier to perform custom build time logic like code generation without disrupting consumers of projects by changing or otherwise adding complexity to the bui
89.
by humanrebar 3y ago
Also less objectification of women in the update.
90.
by humanrebar 3y ago
Could be worse. Other companies sell diabetes, lung cancer, and debt.

More ›