rfoo

53 ms·

811.
by rfoo 5y ago
> probably the dynamic recompilation step that turns ARM code to x86 could be skipped I don't know if Switch could be emulated with Wine-like approach, if not, it would be tricky to intercept syscalls without an ARM-to-ARM DBT. Perf
812.
by rfoo 5y ago
> so I can debug consul election problems if it occurs Interestingly, reading this remind me of a HashiCorp Nomad marketing piece [1]: > "We have people who are first-time system administrators deploying applications, building co
813.
by rfoo 5y ago
> Instead of being hidden you can see how things work, sometimes you might even need to fix them Well, using proprietary system as a child made me a reverse engineer instead :P
814.
by rfoo 5y ago
Okay, how about I open an embedded WebView of https://translate.google.com/?text= ..., with the viewport carefully set to only show the translation results?
815.
by rfoo 5y ago
In this case, Telegram may just display the captcha and let the user solve it. That's likely also why Telegram doesn't proxy every translation request over their server: so that it is users individually requesting small number of
816.
by rfoo 5y ago
... congrats on reinventing Usenet?
817.
by rfoo 5y ago
> In past the Chinese government didn't send large numbers of people to camps based on their ethnicity. Before 2003 the Chinese government just randomly pull people off street and if they can't prove (i.e. by showing an ID card
818.
by rfoo 5y ago
See my sibling comment, if "the product" != log4j, Alibaba is then not required to report that log4j had a vulnerability. Do you mean by redistributing log4j they became a "network product provider" of log4j?
819.
by rfoo 5y ago
Thanks, you're right that they certainly are the vendor of their own vulnerable Java-based products. AFAIK when the bug became popular on Dec 9, there are still many Java-based services running by Alibaba Cloud remain unfixed, and it c
820.
by rfoo 5y ago
From my understanding, Chinese government didn't punish Alibaba according to the regulation discussed above. Given that the punishment is rather obscure and really weak (okay, your country's CERT felt pissed off and won't tal
821.
by rfoo 5y ago
> and then the government within 2 days. That's wrong. According to the text Alibaba is not required to report the bug to government at all. The 2 days term apply to "domestic network product provider" which would be ASF
822.
by rfoo 5y ago
http://images.mofcom.gov.cn/fms/202111/20211116131222501.pdf To save a click, relevant part from the PDF: 65 软件和信息技术服务业编号：216501X 技术名称：深度伪造技术控制要点：笔迹伪造技术、语音伪造技术、图片伪造技术、视频伪造技术、生物特征伪造技术以及其他伪造技术，伪造信息与被
823.
by rfoo 5y ago
Fortunately, demand for such bugs is pretty low ^, so, $1~2k I guess. ^ this is both a good and a sad indicator, it means the bar of post-exploitation for such a bug (on developers' boxes) is "sufficiently high" that your fav
824.
by rfoo 5y ago
While I'm not sure whether you're serious ;), to be clear: what annoys me is they don't really understand why we are having "someone pwned your phone via a series of memory corruption bugs" daily. Until those Rust e
825.
by rfoo 5y ago
Satire. Every time Github went down multiple people post on HN saying "every since they were bought by Microsoft, ...". As annoying as those Rust evangelists on every single memory corruption bug.
826.
by rfoo 5y ago
> - parsing "dot" have surprising effects - did't saw that in code, info after HN comments This is fake. There are no "parsing dot have surprising effects" part in this bug. Actually there is no bug at all . All
827.
by rfoo 5y ago
As a Chinese I don't need to open maps or search how large the island is, I learn that it is a tiny one from (printed) newspapers years ago. OTOH I don't have much confidence in the middle manager theory, either.
828.
by rfoo 5y ago
Bytedance uses Rust extensively in Feishu/Lark (which competes with Microsoft Teams). It is even listed at https://www.rust-lang.org/production/users From what I read (in Chinese), this "Monoio" is meant
829.
by rfoo 5y ago
> like some kind of post-processor for helm If you don't use Helm's "advanced" features, like helm upgrade etc. Try tanka [1]. [1] https://github.com/grafana/tanka
830.
by rfoo 5y ago
Well. I counted 27 SQLite files in my Chrome profile. On a PC though. But as they are used to store History, Cookie, etc. I guess on iOS/Android situations are similar. And that's one single app.
831.
by rfoo 5y ago
> a few large dependencies Unfortunately this does not match my experience :( Rust projects tend to depend on a lot of smaller, single-purposed (or, npm-y) dependencies, for example, Debian's ripgrep package has a X-Cargo-Built-Usin
832.
by rfoo 5y ago
> Why is indirect Internet access less of a problem for C than Rust/Go/etc? Because C codes tend to have less dependencies and shallow/more "clustered" dependency graph. To be fair, that's more or less due t
833.
by rfoo 5y ago
Sorry, I mean the special part is "the bug itself is a memory corruption". The second sentence is a quick explanation for those not in our bubble.
834.
by rfoo 5y ago
That's because these are "lessons learned" for how to catch these bugs, instead of "how to write more secure code". Because you can't.
835.
by rfoo 5y ago
> far, far easier to build than all of these C programs One of my friends who work on AIX machines without direct Internet access does not share the same view, though.
836.
by rfoo 5y ago
What's special here is the bug is a memory corruption, and memory corruption bugs in such libraries are usually instantly security bugs. Otherwise, the same story could be told as a generic software testing joke: "unit-tests are
837.
by rfoo 5y ago
Thanks, that's exactly what I'm seeking for. Before that I've never heard of projects which successfully did C to Rust transition, keeping its C API intact and could be used as a drop-in replacement. Glad to hear that there a
838.
by rfoo 5y ago
Yeah, this makes sense. I'm optimistic and would like to say we're already half-way there. From my PoV very few new projects were written in C in recent years, except those inherently-C (their purpose was to call some other librar
839.
by rfoo 5y ago
Genuine question: How to switch codes written in 2003 to Rust?
840.
by rfoo 5y ago
While I agree with your (general) point, I'm not so sure about the last paragraph. I mean, I would answer "yes" to your "being oppressed by the government" part. And, to some extent, everyone who lives in mainland C

More ›