Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
madmax96
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
11 ms
·
61.
▲
by
madmax96
6y ago
Microsoft acquired GitHub for $7.5 billion. How much is GitLab worth? How much money has Microsoft made selling Windows vs Linus off Linux? How much money does Apple make off iThings?
62.
▲
by
madmax96
6y ago
I'm not sure I follow. To me, recent polarization is a product of echoChamber * confirmationBias. e.g. (1) I subscribe to a trustworthy information outlet on $PLATFORM that reflects my beliefs. (2) I am recommended related untrusted co
63.
▲
by
madmax96
6y ago
How has Google monetized Chrome?
64.
▲
by
madmax96
6y ago
>A profiler can tell you when you should drop asynchronously Is there any profiler that does this today? What are the drawbacks with asynchronous drops?
65.
▲
by
madmax96
6y ago
I'm not sure I follow how it's possible that machines can be conscious but a sufficiently powerful Von Neumann machine cannot. Perhaps it's because I'm missing details (like what actually is integrated information and ho
66.
▲
by
madmax96
6y ago
What the author is really railing against is thoughtless critiques. Declaring software garbage is a usually useless contribution because it only identifies that software can be improved, which is almost always true. However, it fails to pro
67.
▲
by
madmax96
6y ago
So the original paper is sophistry because: >the author linked to many research papers by experts >wove an argument together out of all that research >The tone was authoritative and confident >it’s fairly long and comprehensive
68.
▲
by
madmax96
7y ago
A read into a character type. From 6.2.6.1¶5: >Certain object representations need not represent a value of the object type. If the stored value of an object has such a representation and is read by an lvalue expression that does not hav
69.
▲
by
madmax96
7y ago
Hi, I’m Max. I’m a second year PhD student in CSE at Ohio State with a focus on system dependability. My internship plans were altered due to COVID, so I need a new one. Right now, my interests are in software reliability in technology rang
70.
▲
by
madmax96
7y ago
Previously, I saw discussion around a similar bug where the community accepted that it is not legal for compilers to optimize with the assumption that a function never returns [1]. Obviously, if a compiler can prove a function always retu
71.
▲
by
madmax96
7y ago
Compiler sanitizers and tools like Valgrind can go a long way to help developers understand why a program is broken.
72.
▲
by
madmax96
7y ago
I think its worth pointing out that the Rust code is more broken than the Go code in this example. Because Rust is trying to come up with a sane way to display the filename (a) it prevents users from using encodings the language designers d
73.
▲
by
madmax96
7y ago
It works for most things. You can always try it for your usecase and see how it goes.
74.
▲
by
madmax96
7y ago
Have you looked at CRIU?
75.
▲
by
madmax96
7y ago
Be careful -- I'm under the impression that denials when performing H1B transfer applications are skyrocketing currently.
76.
▲
by
madmax96
7y ago
> I know that highly capable organizations, e.g. the Chrome and Firefox teams, do use state-of-the-art tools and practices in their browsers and get similar results to the Microsoft 70% number. Unfortunately, the threads grown too long a
77.
▲
by
madmax96
7y ago
Or that the exploit is so difficult it is practically impossible to attack. >but it’s just wrong Who’s moving the goal posts now? The parent was talking about vulnerabilities, not bugs.
78.
▲
by
madmax96
7y ago
>Nice hyperbole Not hyperbole. Most of these bugs are never known to be exploited by attackers. >Check the stats In your first link, there was one memory corruption vulnerability in Chrome last year. If we're looking at RCEs, CVE
79.
▲
by
madmax96
7y ago
> Microsoft has lots of state-of-the-art dynamic and static analysis tooling for Windows. Right. If you look at the linked article, the Microsoft Engineer claimed 70% of security bugs in Microsoft products are caused by memory errors. Do
80.
▲
by
madmax96
7y ago
It seems like the Windows ecosystem hasn’t benefited from the improvements made by the research community. For example, Valgrind doesn’t run on Windows. Cross platform applications (like the ones studied in the referenced paper) don’t have
81.
▲
by
madmax96
7y ago
The strong reason is given in the linked article. C is better supported, more stable, has more developers, and is better understood. Meanwhile many of these bugs could be caught by testing, which you should be doing anyway. You can also sur
82.
▲
by
madmax96
7y ago
C: >Programs written in the language often have security bugs arising from the language’s lack of memory safety. How often? “Have things changed now?: an empirical study of bug characteristics in modern open source software” suggests tha
83.
▲
by
madmax96
7y ago
Some of Dawson Engler’s work helps solve this problem, starting around [1]. In that, he shows us how to write custom compiler rules in a high-level language. These rules are sufficient to enforce that maybe type. In another paper, Engler (o
84.
▲
by
madmax96
7y ago
>If primitives don't map naturally to the hardware, then you have to build a runtime to emulate those primitives, just like GC'd languages do. That's only half the equation. Hardware cannot save you from semantics that are
85.
▲
by
madmax96
7y ago
>That you can program GPUs in a C/C++-like language does not entail that C/C++ is a natural form of expression for that architecture. It's not a matter of what is/isn't a "natural form of expression." T
86.
▲
by
madmax96
7y ago
>see how powerful and versatile GPUs have become because they didn't carry that legacy. GPUs are the best example for why C is a good lower-level high-level language, seeing how CUDA is programmed in C/C++. Do you have any exam
87.
▲
by
madmax96
7y ago
>If you care about these issues there's a lot of rules lawyering you have to do to be sure your code isn't going to break if the compiler is cleverer than you are. >A modern take on C should be much more explicit about seman
88.
▲
by
madmax96
7y ago
Then there’s the perennial problem of missing format specifiers for POSIX types like pid_t. Although you could argue that POSIX should mandate macros to appropriately handle them, the root problem is the same. The default integer types have
89.
▲
by
madmax96
7y ago
I believe GCC does support all of C99 and has for a while. https://gcc.gnu.org/c99status.html
90.
▲
Reconciling modern machine learning practice and the bias-variance trade-off
(arxiv.org)
2 points
by
madmax96
7y ago
|
0 comments
More ›