johncolanduoni

7 ms·

91.
by johncolanduoni 10mo ago
Even open-source software has to deal with the moving target that is ABI and API compatibility on Linux. OpenSSL’s API versioning is a nightmare, for example, and it’s the most critical piece of software to dynamically link (and almost ev
92.
by johncolanduoni 10mo ago
I don’t know about calling them fatal, but inculcating a culture that believes the flaws are inescapable laws of reality is probably key.
93.
by johncolanduoni 10mo ago
Next to Newark Airport too. He’s lucky they didn’t throw the book at him - they could’ve hit him for reckless endangerment.
94.
by johncolanduoni 10mo ago
Where were we talking about the UK? All anyone said in this message chain was HFT (and NIST).
95.
by johncolanduoni 10mo ago
The victim firm would definitely notice, they’d tell the FCC, and their investigators will show up with a device that literally points them to wherever the jammer is. If you do this for stupid, silly reasons you will get fined[1], if you do
96.
by johncolanduoni 10mo ago
The parent was saying HFT firms would do this to other HFT firms. They would care about doing this kind of thing - it’s not a white collar crime. And foreign adversaries would care about doing this during peacetime, especially for very uncl
97.
by johncolanduoni 10mo ago
Deploying a GPS jammer in civilized territory is a great way to go to prison.
98.
by johncolanduoni 10mo ago
I don't have an issue with `unsafe` - Java has the mythical unsafe object, C# has it's own unsafe keyword, Python has ffi, etc. The title of that blog post - that there is no memory safety without thread safety - is not quite true
99.
by johncolanduoni 10mo ago
There are functions on many C allocators that are explicitly for non-trivial allocation scenarios, but what major operating system malloc implementation returns NULL? MSVC’s docs reserve the right to return NULL, but the actual code is not
100.
by johncolanduoni 10mo ago
I’ve used RocksDB for this kind of thing in the past with good results. It’s very thorough from a data corruption detection/rollback perspective (this is naturally much easier to get right with LSMs than B+ trees). The Rust bindings ar
101.
by johncolanduoni 10mo ago
Somewhat unrelated, but I just looked at the RustFS docs intro[1] after seeing it here. It has this statement: > RustFS is a high-performance, distributed object storage software developed using Rust, the world's most popular memory
102.
by johncolanduoni 10mo ago
No non-embedded libc will actually return NULL. Very, very little practical C code actually relies only on specified behavior of the spec and will work with literally any compliant C compiler on any architecture, so I don’t find this partic
103.
by johncolanduoni 10mo ago
Your priorities do not match that of most kernel developers or most operators of network-connected Linux systems (even if we ignore Android). So I don’t think your problem is with Rust at all, you’ll need to fork Linux if you want the proje
104.
by johncolanduoni 10mo ago
What number of CVEs is Rust kernel code allowed to have before we have good evidence it’s a categorical failure? Do you turn off KASLR for your Linux machines because there exist CVEs it doesn’t protect against?
105.
by johncolanduoni 10mo ago
Please explain how it adds to the discussion about different ways to broaden supported Rust target architectures. Because both have the word Rust in them?
106.
by johncolanduoni 10mo ago
That was definitely me, you got me. How did you know from my comment about a potential Alpha LLVM backend?
107.
by johncolanduoni 10mo ago
Even more fun is that some of those (IOMMU and ACPI version) depend on motherboard/firmware support. Inevitably there is some bargain-bin board for each processor generation that doesn’t support anything that isn’t literally required f
108.
by johncolanduoni 10mo ago
I worked on a Ruby codebase that moved to Rust - I think that part is mostly cargo-culting cool things in the news to be perfectly honest. There’s type safety advantages, but if Ruby’s performance envelope was even conceivably acceptable fo
109.
by johncolanduoni 10mo ago
I wonder how good a LLVM backend for these rare architectures would have to be for that to be “good enough” for the kernel team. Obviously correctness should be non-negotiable, but how important is it that the generated e.g. Alpha code is p
110.
by johncolanduoni 10mo ago
One C bug was not taken as clear evidence that we need to abandon C and switch to Rust. Hundreds of thousands of very similar bugs, over decades, in common code patterns were. I’ve never understood how other C or C++ developers could seriou
111.
by johncolanduoni 10mo ago
And the kernel is infamous for being picky about the C compilers it can be successfully built with - clang couldn’t build a working kernel for a long time, and it was mostly relying on subtle GCCisms.
112.
by johncolanduoni 10mo ago
RDMA for new AI/HPC clusters is moving toward ethernet (the keyword to look for is RoCE). Ethernet gear is so much cheaper that you can massively over-provision to make up for some of the disadvantages of asynchronous networking, and i
113.
by johncolanduoni 10mo ago
The problem with that solution is that EV already showed that a two-class system of certificates that only really differ in slight UI hints is not useful. Normies never had any idea what the green bar means, and even unusually savvy users a
114.
by johncolanduoni 10mo ago
Client-side OCSP makes it too easy to track users. OCSP stapling largely solves that (plus the latency/fail-open issues) by having the server staple a recent OCSP response to the certificate during TLS negotiation. If OCSP stapling had
115.
by johncolanduoni 10mo ago
> No, it's literally nothing, since you can just create whatever TLS cert you want and just MITM anyway. > What do you think you're protecting from? Passive snooping via port-mirroring? Yes, exactly. For datacenter to datace
116.
by johncolanduoni 10mo ago
Even if the extension isn’t malicious, it creates a new attack vector that can affect users. If whatever URL the script is remotely loaded from is compromised, now all users of that extension are vulnerable.
117.
by johncolanduoni 10mo ago
Most browser extensions don’t need to insert script tags that point to arbitrary URLs on the internet. You can inject scripts that are bundled with the extension (you don’t even need to use an actual script tag). This is one part of manifes
118.
by johncolanduoni 10mo ago
I’m not sure there’s much more juice to squeeze here via automated or semi-automated means. They could perhaps be doing these kind of human-in-the-loop reviews themselves for all extensions that hit a certain install count, but that’s not a
119.
by johncolanduoni 10mo ago
I’m here to inform you that you perhaps missed the second-order sarcasm of the post you responded to. Hopefully the chain ends here.
120.
by johncolanduoni 10mo ago
> Or opt for door three: Ignore how CA/B Forum’s relentless ratcheting burdens ops into forking browsers, hacking root stores, or splintering ecosystems with exploitable kludges (they won’t: they’ll go back to “this cert is invalid,

More ›