kllrnohj

3 ms·

31.
by kllrnohj 25d ago
And yet I just installed Antigravity, and it had a default checked box to also install Antigravity IDE. So someone still cares enough to try and juice the install numbers
32.
by kllrnohj 26d ago
Indexing into an array is direct pointer access, there's just an addition in front of it but it's hard to imagine that showing up at all in even the tightest of benchmark loops
33.
by kllrnohj 1mo ago
Apple's use of "Professional" is just a fancy alias for high end or premium, it in no way indicates anything about being "for professionals" (most extreme example: "professional" iPhone models) Hence why t
34.
by kllrnohj 1mo ago
If a process is allowed to execute code, it's always allowed to execute arbitrary code as well. Those two are fully intertwined, be it via dynamic executable code, ROP chains, because it has an interpreter, or because the initial binar
35.
by kllrnohj 1mo ago
> There's plenty of scope for harm just within the process, Of course, but the process has every right to decide for itself if it wants to take that risk. Just like it decides if it wants to take the risk of a memory unsafe language
36.
by kllrnohj 1mo ago
JITs are an attack surface in that process . They are still restricted to things that process was already allowed to do, no matter how badly implemented the JIT is. In this example usage, one would hope that authentication already happened
37.
by kllrnohj 1mo ago
No, you're not understanding mine. Nobody builds an OS/system expecting that every executable is perfectly well behaved with zero bugs and zero ill intent. Applications are allowed to run code. JITs just run code in that same pro
38.
by kllrnohj 1mo ago
No, it isn't. JITs don't grant capabilities abilities an equivalent interpreter doesn't already have. Allowing code execution allows code execution, that's it, that's the entirety of it.
39.
by kllrnohj 1mo ago
Nonsense, there's no "system wide implications". Mappings are per process, and W^X is just a strategy to help harden individual processes, not the entire system. There's no herd immunity here. JITs do not grant the abili
40.
by kllrnohj 1mo ago
> Android has always been more source-open than “open source”. The vast majority of community contributions that make it into the codebase are security fixes and small bug fixes. I believe this isn't actually about "Android&quo
41.
by kllrnohj 1mo ago
Even AOSP has selinux enabled by default with very comprehensive and scoped policies. That, along with app isolation and permission system, already leaves desktop Linux far, far in the dust on security.
42.
by kllrnohj 1mo ago
The remote tech support scam using screen sharing apps like team viewer is unfortunately very common and is basically why this exists. It's also patronizing to ask during setup or whatever if the user is dumb enough to get scammed li
43.
by kllrnohj 1mo ago
> Flutter has completely replaced it's rendering engine across all platforms And that new rendering engine is also why apps like Immich are unable to show HDR photos. Apple & Google both pushed broad support for that a couple ye
44.
by kllrnohj 2mo ago
LLMs make the dev environment almost irrelevant. llama.cpp supports AMD with both ROCm and Vulkan and that's nearly all that matters now. TBD how much AMD's AI Halo play will change things if at all, but they got a lot of positive
45.
by kllrnohj 2mo ago
That's fine, the device will have long since done the check-in and enabled the option. And it's not contingent on "vendor support" in the typical sense it's used. As in, this doesn't stop working after the 5-7
46.
by kllrnohj 2mo ago
Any storage device can die, that's why you have a robust backup system, right? Right...? :) But the flash storage in a phone is going to be the eMMC variety which typically means a proper controller and TLC NAND. Not as robust probably
47.
by kllrnohj 2mo ago
Building your own is cheaper, although not by a ton. Valve isn't taking a loss on them.
48.
by kllrnohj 2mo ago
Well they still just do the same thing GPUs do where bad clusters are disabled. There's going to be a balance there for how big the clusters are and how many tiers they'll offer, but that's a known problem which can be well m
49.
by kllrnohj 2mo ago
Larger wafers has been attempted for over a decade now and doesn't seem to be going anywhere. See the 450mm wafer section of https://en.wikipedia.org/wiki/Wafer_(electronics)
50.
by kllrnohj 2mo ago
Cerebras is literally the entire wafer, so it can't get bigger. So where is the jump from 30x to 100x coming from? Node improvements only yield like 10-20% gains these days...
51.
by kllrnohj 2mo ago
> Author talks about 4k video, but AI tells me that for "4K production mastering (ProRes 422 HQ, 4:2:2, 10-bit)" the rate is under 2Gbps. That'd be the rate for 1 stream at 1x playback. Multiple streams because of overlays
52.
by kllrnohj 2mo ago
it's hardly difficult to do that already. Like a Raspberry Pi Pico can be turned into a HID mouse rather easily: https://www.instructables.com/Raspberry-Pi-Pico-As-HID-Mouse... and yes, hdmi/displayport capture -&
53.
by kllrnohj 2mo ago
So the risk is the plug for that being yanked in the ~2-5 days between ordering it and unlocking it? So... not a big deal at all. Not even slightly lol.
54.
by kllrnohj 2mo ago
> Not before connecting it to the internet, even Pixels will go through hundreds of megabytes of data before allowing you to unlock them (see 0) oookay? Hardly seems like a big deal? It would indeed be nice if the unlocked phones were se
55.
by kllrnohj 2mo ago
> As if you didn't need any more proof you don't own "your" devices. Can you install your own OS? If yes, you own it. And Google consistently lets you do that. It other OEMs don't then direct your outrage at them
56.
by kllrnohj 2mo ago
It's primarily only the AAA multiplayer games that have that, not just AAA games in general . Just browse the Deck Verified page for example: https://www.steamdeck.com/en/verified & https://store
57.
by kllrnohj 2mo ago
Then I don't understand your argument. If you're just saying what could go wrong with heap corruption, then your vtable complaint also applies to storing function pointers in arena allocators in Zig? Zig doesn't have anything
58.
by kllrnohj 2mo ago
> You could write a JS engine with Zig-like idioms (arena allocation, static initialization) Arena allocators & static initializers are not novel. You'll find them in high performance C++ projects as well, such as LLVM or JavaSc
59.
by kllrnohj 2mo ago
> You can just do that, and then Zig is really no less robust than Rust. If you just don't write bugs, then yes all languages are equally robust, including assembly. Zig, like C, is simply not a robust language. I don't know wh
60.
by kllrnohj 2mo ago
Re #3: vtable pointers aren't mutable...?

More ›