nindalf

30 ms·

451.
by nindalf 3y ago
I've read the report and it seems balanced and fair. I liked that they tackled how improvements could be made on many fronts, taking different approaches in each one. They didn't go overboard with any assertion or recommendation.
452.
by nindalf 3y ago
How different is that from tech giants using their monopoly profits to develop software that they give away for free? You say AT&T gave away some software to universities. Similarly Google gives away Go (among many other projects) as FO
453.
by nindalf 3y ago
No I completely agree, fixing memory safety is not the only thing that needs doing, far from it. I agree with the White House report in particular, which spends time talking about the responsibilities of C suite execs in ensuring their soft
454.
by nindalf 3y ago
Their defensiveness makes sense in the current context where in the last few weeks organisations like the White House [1] and Google [2] are explicitly calling out the importance and imminent need of moving away from memory unsafe languages
455.
by nindalf 3y ago
> as Hurb explain in this article, between tooling and reasonable default, it possible to achieve pretty good level of safety in practice. This is the main contention. For those who believe in the technical leadership of the committee, t
456.
by nindalf 3y ago
I stand corrected that the issue wasn't fixed ( https://news.ycombinator.com/item?id=39680006 ). The issue was fixed, but no CVE by the C++ libraries. That reinforces the point that the author's attempt to equate 1
457.
by nindalf 3y ago
Yeah you're right, I originally said no action was taken because I was going off of my recollection of the original issue 2 years ago. When Rust released this blog post (Jan 20th 2022) the same issue had been fixed already in Python. W
458.
by nindalf 3y ago
> I think you do not really know what you are talking about here. Yeah, maybe. The reference says > The behavior is undefined if the calls to functions in this library introduce a file system race, that is, when multiple threads, proc
459.
by nindalf 3y ago
> It does not have a CVE associated since the issue was spotted within Rust stdlib first. I don't see why this is true. Are you saying that people with affected code would have seen a Rust CVE and then updated their C++ toolchains?
460.
by nindalf 3y ago
I don't know about this. There are a lot of people being paid by their companies to work on the C++ committee and on various compiler teams. The author of the post we're discussing is a member of the committee and this article is
461.
by nindalf 3y ago
Yes, no doubt - reducing the number of vulnerabilities is a good thing. What I'm worried about is that they merely reduce the number of CVEs , and call it a win for their safety initiative. It becomes a PR exercise more than technolog
462.
by nindalf 3y ago
Except the CVEs in Rust are far more likely to be low severity issues that C++ would never acknowledge to begin with.
463.
by nindalf 3y ago
> All languages have CVEs, C++ just has more (and C still more); so far in 2024, Rust has 6 CVEs [1], and C and C++ combined have 61 CVEs [2]. So zero isn’t the goal; something like a 90% reduction is necessary, and a 98% reduction is su
464.
by nindalf 3y ago
I didn't watch the episodes, I read the 16th century book Monkey , translated into English by Arthur Waley. Supposed to be a pretty faithful translation, which is why I was surprised by your comparison of Sun Wukong and Son Goku.
465.
by nindalf 3y ago
Honestly, a static site that accepted pull requests would cost nothing. Free code hosting on GitHub and page hosting on GitHub Pages or Cloudflare Pages. Literally $0, forever. It does take time and effort to review pull requests, but there
466.
by nindalf 3y ago
How?? The Monkey King is a trickster and quite frankly, mean to a lot of people. Goku is the exact opposite. The only thing they have in common is the extending rod that Goku would fight with as a child.
467.
by nindalf 3y ago
You know, when you put down Goku’s qualities like that, I think I understand why Tanjiro from Demon Slayer appeals to me. On some level the character calls out to the 10 year old me that was obsessed with Dragon Ball Z.
468.
by nindalf 3y ago
The government forcing you to reveal information you know is compelled speech. That’s a 1A violation, feels like.
469.
by nindalf 3y ago
Nothing except the Constitution. Seems like an open and shut 1A case.
470.
by nindalf 3y ago
I’m conflicted about this. On one hand, I adore his books and I’m sure this would be great, even if he didn’t think so himself. Reviews I’ve read suggest it’s good, though not as good as his best work. But I feel like I’m being disloyal if
471.
by nindalf 3y ago
How is this possible? Do you mean that the top 6% all get perfect scores and all get assigned 94th percentile, rather than 100th? Anyway, this isn’t true in my experience. 167/170 in math got me 94th percentile. Far from a perfect scor
472.
by nindalf 3y ago
It seems like you put a lot of thought and effort into this. Were you happy with the results? If you could put the entire book into the context window of Gemini (1M tokens), how do you think it would compare with your approach? It would cos
473.
by nindalf 3y ago
Go is 12 years old (1.0 in March 2012). Young compared to Java, but old enough for codebases to have gone through a few write-rewrite phases. Case in point - this thread is about code that Walmart got when it acquired a company founded in 2
474.
by nindalf 3y ago
Their ban is legal, not enforced in code. I wish them best of luck enforcing those terms and conditions against Chinese hardware makers in China. And even Nvidia would know that the European competition regulator would take a dim view of it
475.
by nindalf 3y ago
Haha thanks for the correction. Autocorrect got me.
476.
by nindalf 3y ago
The overall argument that Rust's use in embedded has a long way to go is fairly accurate. A foundational crate like embedded-hal reached 1.0 only 2 months ago, 8 years after Rust 1.0. On the other hand, this crate reaching 1.0 means th
477.
by nindalf 3y ago
Do you?
478.
by nindalf 3y ago
Since the author has gone viral I expect some netlify exec is going to take over and write this bill off to $0. In the words of Kramer “these big companies, they just write it off!” A moment of silence for the people who got DDoS-ed, didn’t
479.
by nindalf 3y ago
Accused by the Economist in this case. But they quote Palestinians who say the same.
480.
by nindalf 3y ago
It goes something like this. Well meaning people join government to solve the problem (homelessness). They can't do it on their own so they allocate money to local charities that run services for homeless, like soup kitchens and shelte

More ›