jupp0r

8 ms·

61.
by jupp0r 2y ago
I would imagine false positives could be a huge problem. The behavior if a violation is detected is to gracefully terminate the program, so you could end up with more (but less exploitable) crashes than without FORTIFY_SOURCE.
62.
by jupp0r 2y ago
C can be memory safe, you just need to not write memory bugs in it. These 18345 heuristics, compiler warnings and macros might help a little.
63.
by jupp0r 2y ago
Well look at a map of Barcelona. Hotels are in the middle of residential areas throughout the city. Not sure what the permitting process has to do with any of this. Hotels take up land. Land that could be used for residential housing. Permi
64.
by jupp0r 2y ago
Of course hotels are competing against residential housing. They take up land that could be used for residential housing instead.
65.
by jupp0r 2y ago
Following your logic, why not ban hotels?
66.
by jupp0r 2y ago
The term is populism.
67.
by jupp0r 2y ago
1. An actual kitchen that's good for cooking complex meals. This is great for family trips on holidays. 2. 3+ bedrooms. Good luck finding that in Hotels. 3. Things like private hot tubs or pools, BBQ in the backyard, etc are almost unh
68.
by jupp0r 2y ago
1. microservices also create security boundaries 2. microservices living in monorepos is common
69.
by jupp0r 2y ago
Or you just use a language with support for clear module API boundaries (vs something like Ruby where without bolt on hacks, every piece of code can call any other in the same process).
70.
by jupp0r 2y ago
If you are using Chrome, it's also a combination of multiple well separated processes talking via RPC with each other, which is pretty similar to microservices, although the separation boundaries are more influenced by attack mitigatio
71.
by jupp0r 2y ago
This pertains to SMS, not RCS. We've already known for three decades that SMS are not end to end encrypted.
72.
by jupp0r 2y ago
How can this article not mention "encryption" even once when that's the major point of contention?
73.
by jupp0r 2y ago
Slightly off topic feedback: find a different name. There are too many products named Thread or Threads out there, it's impossible to Google and doesn't convey much information about your particular tool.
74.
by jupp0r 2y ago
Do you have a source for this? I have read quite a bit about climbing in the Himalayas and I have never heard of Sherpas climbing at high altitude in the 1920s.
75.
by jupp0r 2y ago
Nobody had ever climbed mountains that high. There were no truly competent people around at that time, at least not competent in high altitude mountaineering.
76.
by jupp0r 2y ago
It has been argued that programming in general has nothing to do with software engineering [1]. [1] https://www.oreilly.com/library/view/software-engineering-at...
77.
by jupp0r 2y ago
In the set of errors that cause production outages, inefficient algorithms is a pretty small subset though. I still think it can be a useful proxy for other things you might value in engineers though.
78.
by jupp0r 2y ago
"it'll fill up relatively easy (compared to the market it is in) so you'll often have relatively low vacancy (but even one month empty is paid for by ten months rented." You are assuming that the marginal cost of turnove
79.
by jupp0r 2y ago
How can even a large share (70% are mentioned in the article) of landlords have full control over supply? This is different from the railroad or telco cartels of the past where it is really hard for new players to get into the market. Getti
80.
by jupp0r 2y ago
Any actor outside of this cartel could exploit this by creating more supply and getting ahead of the cartel members by renting units out at (real) market rate though.
81.
by jupp0r 2y ago
This doesn't make sense in a few ways: 1. You won't increase rents for existing leases, these need to be up for renewal so you can make changes to them. 2. You are assuming that you control the whole market. Even if 70% of landlor
82.
by jupp0r 2y ago
"Landlords adopt RealPage recommendations on pricing 80-90% of the time, which explicitly drives up revenue by holding apartments off the market. " Can somebody explain how holding apartments off the market is driving up revenues?
83.
by jupp0r 2y ago
This is only true to some degree though. People can (and do) move to other areas of the country when cost of living becomes too expensive. They buy land and build on it themselves. It's not like there is a fixed housing stock and a fix
84.
by jupp0r 2y ago
This is not a bug, it's a feature. You have the ability to handle errors at defined points. As reality is such that errors can happen at any of these points, being able to gracefully handle them is as good as it gets. If you want to co
85.
by jupp0r 2y ago
"Ruby is not alone in this" Agreed. My point was rather that this is not Ruby's only dangerous shortcut.
86.
by jupp0r 2y ago
Do you have an example? My impression of the Go standard library is that they picked a pretty decent compromise of abstraction levels over the various OS facilities they use under the hood.
87.
by jupp0r 2y ago
This might shock you, but you don't have to have a global monopoly on making bad design choices in order to do so.
88.
by jupp0r 2y ago
I'm not surprised, the whole language (Ruby) and ecosystem favors "ease of use" (ie the ability to write code fast) over correctness in so many places. Subtle details that other languages would require you to handle in order
89.
by jupp0r 2y ago
Agreed, mentioning the login name of the compromised account seems really unprofessional and unnecessary.
90.
by jupp0r 2y ago
It's surprising that SnowFlake didn't pay the $20M ransom. Seems like a no-brainer compared to the reputational damage this would cause.

More ›