laumars

93 ms·

931.
by laumars 5y ago
What is the black screen issue?
932.
by laumars 5y ago
Firstly, I’ve not been condensing. And yes, I did say that at the start of the conversation. Sorry I’d forgotten about that part because this conversation had taken a tangent on discussing other specifics in security. I do stand by my comme
933.
by laumars 5y ago
The domain matters a lot here though. If you’re talking about bugs in Chrome then yeah, you’d expect it to be weighted towards buffer overflows. But if you’re taking about bugs in a build script someone has written, then I’d wager human err
934.
by laumars 5y ago
You’re making strawman arguments. None of the points you’re proving are anything I’ve disagreed with. Try reading the thread again
935.
by laumars 5y ago
That’s literally the point I’m making.
936.
by laumars 5y ago
> The last study I saw was that 52% of security vulnerabilities were still basic memory safety vulnerabilities. Memory safety isn't the only thing, but it's still the biggest thing. My point wasn’t that memory safety isn’t a
937.
by laumars 5y ago
> I said that the majority allow untrusted execution. If you consider your engineers laptops to be trusted you're thinking about networks the way people did ~10+ years ago. i never said anything about trusting engineers laptops. L
938.
by laumars 5y ago
> If I have owned a dev and can push code to a branch I can likely execute code in their build environment. But then you’re also executing that code as a trusted user. Ie the real hack is owning the dev. > This is how the vast majo
939.
by laumars 5y ago
The page has been changed since my post. It originally called them “replacements”, which paints a totally different picture. From reading the GitHub Issue thread regarding the name change, it sounds like various people on Reddit were making
940.
by laumars 5y ago
No, I’m arguing against that mindset. The git repository is what raises the “Replaced It In Rust” argument.
941.
by laumars 5y ago
More sense in one regard but less sense in another. If you’re curating a list of alternative software that is acknowledged not to be mature in all instances, then the arguments for making it Rust specific become moot since it’s no long a cu
942.
by laumars 5y ago
My point was if you’re exposing your build system to untrusted individuals inputting untrusted data then you’ve already lost the game. Rust won’t save you from a RCE bug because you’ve already granted them RCE from the beginning. An overflo
943.
by laumars 5y ago
“A lot” is certainly a subjective term and thus open to interpretation. One might argue that the entirety of the collection isn’t “a lot” since it only amounts to 34. Others might argue that 17% is “a lot” as it’s that means near enough 1 i
944.
by laumars 5y ago
> I find it more interesting to ask the question "why do people spend so much hobby time writing interesting programs in Rust?". Probably for the same reason people spend so much hobby time writing interesting programs in oth
945.
by laumars 5y ago
That’s not true at all. 2 of the 3 biggest security vulnerabilities I’ve had to deal with in my career were completely unrelated and wouldn’t have been prevented had software been written in Rust instead. Also half the software mentioned in
946.
by laumars 5y ago
Half those applications are going to have other classes of new bugs simply because it’s new code and they’ve had less people audit the code. Plus some of those original tools were already written in safe languages like Haskell.
947.
by laumars 5y ago
I get the point of wanting to use safer languages but I feel this list somewhat misses the point and looks more like some misguided worship to a single language. For example a lot of complaints that can be made about C and C++ don’t apply t
948.
by laumars 5y ago
Oh man this brings back memories. Remember when Microsoft used to hardcode acid compliance into IE even though Trident didn’t support half those features in on any other website?
949.
by laumars 5y ago
VSCode does have a spellchecker. I rely on it myself because my spelling is abysmal (despite the lack of trying).
950.
by laumars 5y ago
Diversifying used to be the norm (eg Thorn EMI, Virgin, etc). It’s more of a modern trend to specialise in one field.
951.
by laumars 5y ago
Great, another non-discoverable key combination I need to memorise. You can guarantee I’d have forgotten that by the time I next need to use it. GUIs are meant to be simple for discovering features. I really dislike how Apple hides away all
952.
by laumars 5y ago
Using “real” in a company name making virtual reality products is entirely understandable given “real” is exactly the type of jargon people use when describing how effective and immersive a particular product in VR is. Yes, Epic had a game
953.
by laumars 5y ago
You say that, but similar articles about Google directors and such like have historically generated a lot of upvotes and conversation. Yet this and others have been flagged to hell and back the moment it reaches the front page. The fact tha
954.
by laumars 5y ago
You don’t need to challenge every instance of vague similarities. The law actually states that but for some reason that clause gets overlooked by nearly every casual reader of HN in favour of the popular misconception that companies have to
955.
by laumars 5y ago
Compared to two weeks(!!!) by sea, which was the norm back then, two days sounds really impressive.
956.
by laumars 5y ago
Anyone who regularly works with FOSS. Which was the target demographic being discussed to begin with.
957.
by laumars 5y ago
You can’t input paths for starters. That means you can’t open dot files or navigate dot directories. Of which there are a great many in FOSS. The answer is to open up a terminal and run ‘open .blah’, which is just an appalling work around t
958.
by laumars 5y ago
> I'm sorry, but no Linux DE I've ever used beats macOS in terms of stability. The file explorers are also a joke and frequently changing. Dolphin on KDE hasn’t changed in 10 years and is far more functional than Finder. Fran
959.
by laumars 5y ago
I remember your original article. Those images in this one are directly taken from your page aren’t they?
960.
by laumars 5y ago
Coincidentally there was a discussion about this yesterday. I agree with a lot of what was posted in it so might be easier to share that: https://news.ycombinator.com/item?id=27059551 This branch in particular addresses you

More ›