muvlon

6 ms·

61.
by muvlon 5mo ago
I specifically said data race, which is a known term of art and a type of language-level UB. It is separate from the races you're thinking about. Just like signed integer overflow or use-after-free, the compiler is allowed to assume
62.
by muvlon 5mo ago
With this technology's death, the thread of prophecy is severed. Restore a saved game to restore the weave of fate, or persist in the doomed world you have created.
63.
by muvlon 5mo ago
There is no uninitialized variable, I explicitly initialized it to 5. And yes indeed, C could do what Rust does and define the order of evaluation for function arguments. If the argument expressions are indeed side-effect-less, the compiler
64.
by muvlon 5mo ago
Fair enough! > And if it's not succeeded for 54 years, "try harder", or "just never make a mistake", is at least not the solution. And I 100% agree. UB is way overused by these standards for how dangerous it is,
65.
by muvlon 5mo ago
Yes there is tons of surprising and weird UB in C, but this article doesn't do a great job of showcasing it. It barely scratches the surface. Here's a way weirder example: volatile int x = 5; printf("%d in hex is 0x%x.\
66.
by muvlon 5mo ago
Ever since it's breached the mainstream, I think you can just append it to anything to make things sound funnier. It has mostly lost its meaning. "I'm breakfastmaxxing. I'm a cerealpilled bowlcel in my milk era. I'm
67.
by muvlon 5mo ago
There's a major caveat to the half-full view: You'll only stop adding new vulns that your model can find. A threat actor with access to a better model or more money to burn on tokens may yet find more. Some of them have deep pocke
68.
by muvlon 5mo ago
I don't know, are we actually going to be making coffee in the case of the AGI singularity? If you listen to the hardcore doomers, the misaligned superintelligence will curl a finger on its monkey paw and turn the planet into paperclip
69.
by muvlon 5mo ago
It can spread into safe code when you build an incorrect "safe" abstraction around unsafe code. Which the Bun Rust port apparently has.
70.
by muvlon 5mo ago
It's not surprising that a mostly straightforward translation to (partly unsafe) Rust exhibits UB. What is a bit disappointing is that the Rust code apparently has APIs that aren't marked unsafe but may cause UB anyway. When doing
71.
by muvlon 5mo ago
The logical next step is to replace the suicide hotline operators with AI. And maybe add a way for other people to gamble on the results.
72.
by muvlon 5mo ago
In my head, the levels are exactly swapped. Connecting two wires together reliably is harder than through-hole in my experience. Through-hole PCBs are actually designed for solder, so surface tension basically does your job for you. Also, w
73.
by muvlon 5mo ago
That's not really the culture of debian to be honest. Yes they run old major and minor versions, but they do ship patch updates as fast as they can. Even on debian stable, you absolutely are supposed to update all the time. The cultu
74.
by muvlon 5mo ago
Let's Encrypt has to be down for days before people begin to feel the pain. DNS is very different, it breaks stuff immediately everywhere.
75.
by muvlon 5mo ago
This is one category of good alerts, but not everything. I think alerts are to ops what tests are to dev. You have "unit alerts" for some small thing like the disk usage on a single host, "integration alerts" like litera
76.
by muvlon 6mo ago
While I hate suid as much as the next person, it's really not the problem here. The bug that is being exploited gives you basically arbitrary page cache poisoning. At that point it's already game over. Patching a suid program is m
77.
by muvlon 6mo ago
And the Pentagon has historically gotten away with damn near everything even in the judicial branch by appealing to national security.
78.
by muvlon 6mo ago
What problem is this actually solving? I've deployed DHCP countless times in all sorts of environments and its "statefulness" was never an issue. Heck, even with SLAAC there's now DAD making it mildly stateful. Don'
79.
by muvlon 6mo ago
This doesn't register as corpo talk to me, more tongue-in-cheek nerdy mission control talk. See also "rapid unscheduled disassembly".
80.
by muvlon 6mo ago
There are a bunch of subbrands but there are also a lot of genuine small Android phone companies, especially in China. Some of these serve some interesting niches that might now disappear due to this DRAM supply issue, e.g. Unihertz for ext
81.
by muvlon 7mo ago
Notably they didn't fully shed it, they compartmentalized it. They proposed to split the standard into two parts: r7rs-small, the more minimal subset closer in spirit to r5rs and missing a lot of stuff from r6rs, and r7rs-large, which
82.
by muvlon 7mo ago
> because addicts pay up. I think it turns out they don't, not really anyway. And that's exactly why Sora is dead. They figured out that addictive AI slop has been so thoroughly commoditized that you can get it on a ton of othe
83.
by muvlon 7mo ago
I actually think this isn't even surprising from OpenBSD philosophically. They still subscribe to the Unix philosophy of old, moreso than FreeBSD and much much more than Linux. That is, "worse is better" and it's okay to
84.
by muvlon 7mo ago
So you're saying instead of assessing the current capabilities of the technology, we should imagine its future capabilities, "accept" that they will surely be achieved and then assess those?
85.
by muvlon 7mo ago
As a Nix evangelist, I have to say: Nix is really not capable of replacing languag-specific package managers. > running arbitrary commands to invoke language-specific package managers. This is exactly what we do in Nix. You see this ever
86.
by muvlon 8mo ago
Sure, and that's useful but not revolutionary nor exclusive to 3D printers. You can use a milling to mill a bunch of pieces for a milling machine. You can use a PCB printer to print the PCBs for a PCB printer. A 3D printer is much, muc
87.
by muvlon 8mo ago
I get the feeling there is something interesting here, but the website seems myopically focused on syntax. It doesn't really tell me what this language is good at or how you'd expect people to use it.
88.
by muvlon 8mo ago
They are quite literally negotiable: https://isrg.formstack.com/forms/rate_limit_adjustment_reque... There are also a bunch of rate limit exemptions that automatically apply whenever you "renew" a cert: http
89.
by muvlon 8mo ago
Because with Next.js, Vercel was able to turn the frontend stack into also a really shitty backend stack. And it's particularly shitty at being deployed, so they're in the business of doing that for you.
90.
by muvlon 8mo ago
The world has not decided that spyware can't be produced. Mostly, the powers that be treat it like weapons of war. That is, companies can make and sell it as long as they only sell it to governments and only the ones that we like.

More ›