lambdaone

14 ms·

511.
by lambdaone 3y ago
As other commenters have said, you can do it a bit at a time, converting non-core kernel code to Rust at the edges. Another route to memory (and other) safety would be the C -> WASM -> C route that effectively rewrites/transpiles
512.
by lambdaone 3y ago
Indeed. People who don't do these kinds of activity wildly overestimate their physical capabilities. Part of the reason for this, I think, is that Hollywood and TV depicts ludicrous levels of acrobatic and athletic capability as the no
513.
by lambdaone 3y ago
What makes Rust great is that its design drew upon decades of understanding of programming language theory and practice, and the designers took bold decisions based on that understanding to avoid the mistakes of other programming languages.
514.
by lambdaone 3y ago
Given that an estimated 70% of security vulnerabilities are currently memory safety errors, I think that justifies the use of Rust all by itself. But a far greater gain is that Rust is designed right from the start with tighter semantics wh
515.
by lambdaone 3y ago
This is good work, and I'm not quite sure why people are complaining about it; there clearly won't be any replacement of the traditional C sudo by this unless it's driven by distros and the community making it happen. Multipl
516.
by lambdaone 3y ago
In an ideal world, yes, they would by shut down in seconds. Yet BGP hijacks still occur in the real world; here's one from last month: https://slowmist.medium.com/analysis-of-balancer-bgp-hijacki... And you're cer
517.
by lambdaone 3y ago
Cool. Domain-limited CAs are a really good idea, and they don't need anything like dynamic downloading of CAA records.
518.
by lambdaone 3y ago
No, that's not needed at all. If the malicious actor can man-in-the-middle traffic to victimsite.com (say using a BGP hijack), they can serve HTTPS traffic to the end user from their MITM server, secured with a certificate issued to &q
519.
by lambdaone 3y ago
What a terrible logo design, and semingly no real buy-in from any major organization. I'm not surprised this doesn't have any traction. I think an IPv6-compliance logo scheme would be a good idea, but it should be driven by major
520.
by lambdaone 3y ago
Wikipedia policies explicity forbid using Wikipedia itself as a source for Wikipedia articles. See https://en.wikipedia.org/w/index.php?title=Wikipedia:RSPRIMA...
521.
by lambdaone 4y ago
Knowing some people who have done similar things, it's perfectly plausible, and doesn't read like fantasy to me. You're getting a glimpse into a niche subculture, like skydiving or rock climbing.