jabot

11 ms·

61.
by jabot 9y ago
I would really like to see a comparison of the efforts of a) writing a program in a safe language like rust and b) writing the language in C and verifying it with a toolset like the one used by the polarssl guys. Given that the number of C
62.
by jabot 9y ago
http://www.cvedetails.com/vulnerability-list/vendor_id-12001... ... and your point is? EDIT: more recent bugs: https://tls.mbed.org/security These bugs include double-free and use-after-free - which ar
63.
by jabot 9y ago
I think the seL4 kernel rather proves that you can write safe haskell, verify it, and then transpile that to C. That's different from directly writing C...
64.
by jabot 9y ago
Fair point. In the context of the article we're talking about a highly specialized office environment, where bios/live boot environments etc. do not happen often. There, a software solution is useful and cheap. In the more genera
65.
by jabot 9y ago
I did not know that tool. Also, apparently it cannot map control keys... https://superuser.com/questions/413384/how-to-remap-control-...
66.
by jabot 9y ago
I have an atreus keyboard, and I have changed the layout :-) However, 350$ seems like a lot of money for a problem that should really be solvable at no cost in software...
67.
by jabot 9y ago
This should really be solved in software... However, I remember trying to map capslock to control on windows a few years back. It involved becoming an administrator and entering an opaque hexadecimal key into the registry. Simply popping of
68.
by jabot 9y ago
Yes. My bad, i meant signal. m(
69.
by jabot 9y ago
Yes, someone below commented that telegram can now be built without dependency on the play framework, apparently since at least 6 months ago. I think that is a good thing, kudos to them. The thing that would make me really happy is a play
70.
by jabot 9y ago
Originally, I didn't install signal because i have a google-free android smartphone, and signal depends/depended HARD on the play framework, even though that's not necessary. [1] > Marlinspike reiterated that the whole poi
71.
by jabot 9y ago
Wow. Finally... I wonder when we are going to see it on f-droid.
72.
by jabot 9y ago
Please take a look at the demo they have set up. They show an example micro payment system as browser plugin, where you pay for reading articles. I am excited at the prospect of paying for articles without spying adware and coin-mining java
73.
by jabot 9y ago
The gnu taler project might be a better solution, if it reaches adoption. One use case that they have in their demo is micro payments to access web sites: https://demo.taler.net/en/
74.
by jabot 9y ago
Yes, I would like to have some working open source micropayment system. However, as far as i can see there is no bank offering a backend yet. Hopefully that will change soon. It would have been great if the taler system had been usable at S
75.
by jabot 9y ago
On the other hand, it's not like handling physical cash is free, really. Think about time spent counting, ensuring that there are no falsified notes, bringing excess notes to the bank and making sure there is change, etc. I think it is
76.
by jabot 9y ago
I was at the presentation at SHA 2017. The demo was nice, even though i did not understand any of the crypto. Although, to be fair, i didn't even try :-) One important take away for me was that this project aims to replace paypal, not
77.
by jabot 9y ago
> Today, Britain needs no additional sympathy for Germany, they need sympathy for themselves, a will to live. As opposed to brexit representing a "will to shoot your own foot"? > The EU is unrepresentative, unproductive, and
78.
by jabot 9y ago
> What about learning to understand English? That's uncalled for, man... > Of course there are still use cases where Algol derived languages are still unsafe, however those use cases are a tiny portion of what happens in C land.
79.
by jabot 9y ago
Well, I don't know about half of these programming languages. However: - ADA requires garbage collection - Modula-2 and Object pascal have manual memory management, i.e.: "new" and "delete" - together with double-fr
80.
by jabot 9y ago
"Very easy" - well, if you think garbage collection is easy... And yes, if you want to allow manual allocation of objects and setting pointers to arbitrary objects, then your two choices are: 1) garbage collection 2) undefined beh
81.
by jabot 9y ago
That link does not prove anything you said. There is nothing in there about laptops and/or flights...
82.
by jabot 9y ago
> America has intel - and good intel from a raid - that shows that ISIS has the capability and intent to hide a bomb inside laptop batteries to blow up passenger planes containing lots of people. Citation needed on that one. Also... Addi
83.
by jabot 10y ago
int f(int x, int y) { return x << y; } This is undefined for SOME values of y, namely those bigger than 31 (on platforms where int is 32 bit; adjust where different). This is caused by two facts: a) The arithmetic
84.
by jabot 10y ago
> Because function arguments are pushed in reverse order in C and funnily enough, GCC actually does that even though that's crazy. Actually, pushing function arguments right-to-left means that the first argument ends up on top of th
85.
by jabot 10y ago
Another thing which seems at least as important: How many projects are _started_ in a language, and how many _die_? Given p.e. Java - It may seem that there is a huge flow to go. However, if there are enough new projects started in java, th
86.
by jabot 10y ago
> One of the most evil parts is /etc/nsswitch.conf that injects at runtime arbitrary shared libraries implementing various parts of GNU C library. That leads to proliferation of undocumented file formats and protocols that are
87.
by jabot 10y ago
I did not know that the return value of snprintf is actually the length of the string that would be produced. I assumed I'd just get some error code - which would require re-trying with some larger buffer, thus the "loop". T
88.
by jabot 10y ago
> They are "protected", yes, but their mere presence encourages people to use them. There's no reason to use asprintf, but glibc makes it available so some software uses it. That software is now non-portable. I think aspri
89.
by jabot 10y ago
Thanks for the reply. > GNU software is also often very bloated and overengineered, and often found in critical places like glibc. My memory is rusty - aren't those features "protected" against accidental usage, with somet
90.
by jabot 10y ago
So in your opinion the problem is "only" one of portability to non-gnu systems? I thought the author also implied that GNU was technologically inferior and/or problematic. That would interest me...

More ›