landr0id

7 ms·

61.
by landr0id 11mo ago
>However, as already implied in my article, you can get most of the guarantees without losing your sanity. Yeah sure, but what compares that gives you similar perf, safety, and language features to Rust? I'll use "safety"
62.
by landr0id 11mo ago
Rust has its issues and there are plenty of things to not like about Rust, but this article is giving me the impression that this person has not written much Rust. Unfortunately, many such cases with Rust criticism. > Memory safety is no
63.
by landr0id 11mo ago
If it wasn't obvious I am not serious. On the contrary I'm actively making contributions to jujutsu (none involving a quicksave command... yet)
64.
by landr0id 11mo ago
totally. the fact git-quicksave isn't a standard command that commits with an "Autosave" message is pretty short-sighted.
65.
by landr0id 11mo ago
Thank you. >By the way, could the nonsensical offsets be checksums instead? If you're referring to those weird "addresses" that quickly became irrelevant, there's a CRC32 somewhere in the header immediately after them
66.
by landr0id 11mo ago
For this file in particular I'm unsure. common.lin is a separate file which I believe is supposed to contain data common to all levels _before_ the level is loaded. There's a single exported object that all levels of the game have
67.
by landr0id 11mo ago
I agree and don't think there's any unused data. For `common.lin` for instance my parser reads it basically to the end and there's some small amount of data that's unused. I never actually quantified the amount but I&#x2
68.
by landr0id 11mo ago
>This is probably a linear (lin) record of how the data was loaded unoptimized from the disk. Yes, it's buried deep in the details but it's basically just every byte read being written in a linear stream to an output file. I do
69.
by landr0id 1y ago
It's a possibility. Graphene has some traction though and if a potential high-importance target is running the OS, Cellebrite wouldn't want to be doing emergency vulnerability research to respond.
70.
by landr0id 1y ago
>that doesn’t mean that editing or inserting values to dnsmasq as an unprivileged user doesn’t exist as functionality in another application or system. The developer typically defines its threat model. My threat model would not include a
71.
by landr0id 1y ago
I say "strangely" because honestly it just seems large for any application. I thought they might not be doing LTO or something but they do thin LTO. It's just really that much code.
72.
by landr0id 1y ago
Strangely it's the actual binary's .text section that's about 400MB. Time to dive in!
73.
by landr0id 1y ago
From a previous thread on this topic: https://news.ycombinator.com/item?id=23089745 >It's literally in past WebGPU meeting minutes: Apple objected to SPIR-V due to disputes with Khronos. Tint is a compromise, it doe
74.
by landr0id 1y ago
I love typing python commands that are 10x longer than a shorthand. Yes it's easy to set up an alias or shell command or whatever, but that's besides the point :p
75.
by landr0id 1y ago
I like my Moonlander, but if you want to see a real scam of a keyboard try buying (please don't) one of "WORK LOUDER"'s keyboards like the Nomad E. $350-500, gimmicks you'll never use, non-open-source firmware, chea
76.
by landr0id 1y ago
>Xbox One, 2012? Never hacked. Not publicly :)
77.
by landr0id 1y ago
Did you reach out to `git` commands to make changes to the repo? If you use jj in a colocated repo you should _only_ use jj to manage the repo to ensure it's kept in-sync with jj's data. If you messed up with jj commands, you can
78.
by landr0id 1y ago
Yes. There are plenty of folks who submit to the company I work for who live in regions of the world that are extremely low cost of living/salary (in USD terms) and most BB programs pay out fixed USD rates. It can be very lucrative.
79.
by landr0id 1y ago
Just search for vulnerability or 0day acquisition platforms and do some research into the companies. All of them are kinda shady but there are some which only sell to Five Eyes if you want to be “moral” You can also go through ZDI (owned by
80.
by landr0id 1y ago
I hate to be one of those people that asks “what differentiates this from X”, but is there a selling point for why I’d want to use this over https://github.com/theseus-rs/file-type if I’m in a sync + std context and do
81.
by landr0id 1y ago
Honestly one of the biggest selling points of jujutsu for me is its `op log`. You can fuck up your repo in git and that's it -- you're screwed. Or you find some extreme magic on the internet that saves you. With jj you just "
82.
by landr0id 1y ago
You can also use https://github.com/mstange/samply to make recording and viewing in the Firefox profiler easier. It will spin up a localhost server after the trace ends, the profiler uses the localhost server and nothi
83.
by landr0id 1y ago
https://github.com/GitoxideLabs/gitoxide
84.
by landr0id 1y ago
A myth propelled by people who don't understand security continually saying "Anyone can read the code, therefore it's more secure".
85.
by landr0id 1y ago
Do not under any circumstances use rlottie for your application if it consumes untrusted animations. It is not secure software and Samsung does not service security issues. *I will add though if you absolutely need to, use Telegram's f
86.
by landr0id 1y ago
Also https://github.com/burntsushi/biff
87.
by landr0id 1y ago
I had the same thought. The project's description: >secure HTML/CSS engine No offense to these folks, but I see no evidence of any fuzzing which makes it hard to believe there aren't some exploitable bugs in the codebase.
88.
by landr0id 1y ago
...this is for building apps targeting iOS and macOS on non-macOS platforms. Why would Android support be necessary?
89.
by landr0id 1y ago
So long as you're aware that you're not optimizing, it's fine. Trying to build something useful as a new Rust dev while worrying about lifetimes is going to be quite challenging, unless your intention is to specifically learn
90.
by landr0id 1y ago
>> being explicit and making the programmer make decisions >Why RAII then? Their quote is probably better rephrased as _being explicit and making the programmer make decisions when the compiler's decision might impact safety_

More ›