roblabla

34 ms·

361.
by roblabla 6y ago
That's correct. aes-gcm (and by extension, aes and polyval) and chacha20poly1305 were audited. See https://www.reddit.com/r/rust/comments/fa8a96/audit_of_the_r...
362.
by roblabla 6y ago
https://github.com/mdn/content/blame/53ba7ccaf34f639208791a9... Isn't your entire article here? The history is there...
363.
by roblabla 6y ago
This project looks great! In a similar vein, I've been using Fantoccini[0] for web browser automation task to great success! It uses the webdriver protocol under the hoods, which means it works with Chrome, Firefox, Edge (both the old
364.
by roblabla 6y ago
> In the general sense, no, not yet, of course, but in one sense, Zig is probably more production ready than Rust, for example on embedded systems with obscure architectures where OOM-safety is essential. I mean, FWIW, Rust is fairly rea
365.
by roblabla 6y ago
Rust hasn't fundamentally changed all that much in the end, the only notable exception being `async`, and I feel like that's a pretty big success so far, being used far and wide from web servers to embedded task scheduling. I do n
366.
by roblabla 6y ago
WinDBG Preview's TTD works really well, it's a really solid alternative to rr... if you can get past windbg's terrible ui/ux and piss poor discoverability. I really hope someone makes the TTD stuff available from vscode
367.
by roblabla 6y ago
LFS is kept up to date. It has systemd and sysvinit variants, and the latest version was published in september. Thank god for this, because it's one of the only source to get a comprehensive list of all the components running on a Lin
368.
by roblabla 6y ago
Google has also been experimenting with using Rust within Chrome[0]. They're working on autocxx to make C++/Rust FFI much smoother[1]. [0] https://www.chromium.org/Home/chromium-security/memory-safet...
369.
by roblabla 6y ago
As an example of this, on the Nintendo Switch, games run on three cores dedicated to the game, while the rest of the OS tasks run on the fourth core. Furthermore their scheduler gives precise guarantees about the scheduling order of threads
370.
by roblabla 6y ago
It's GNU/Linux, you can build apps however you want. The PureOS distro is based on Gnome so GTK is the blessed framework for app development. However, Qt works just as well, and is used a lot in KDE's Plasma Mobile. And if th
371.
by roblabla 6y ago
The rust compiler team now tracks LLVM performance, see [0]. They are able to spot regressions as soon as they get merged, and petition to get the change reverted or performance fixed when the impact is large. This has been fairly successfu
372.
by roblabla 6y ago
No, it's not a security mechanism period. Public/Private APIs aren't part of the security model, it's a way to prevent app breakage in their ecosystem due to applications using unstable APIs.
373.
by roblabla 6y ago
> to have effective sandboxing, you need to restrict the APIs that a device can call, which means blocking the ability to generate and run arbitrary machine code on-device. Please, no, this is not how security and sandboxing works at all
374.
by roblabla 6y ago
I just received my Moonlander a couple days ago, after using an Ergodox Ez for a year. It's a joy to use. It's slim, has a good palm rest, can tent, and having the thumb cluster take an angle when tenting the keyboard is a killer
375.
by roblabla 6y ago
I don't think WASM can write to its code memory to self-decrypt. At some point, the WASM has to create a DOM node containing the decrypted script, at which point you can process the code.
376.
by roblabla 6y ago
It's hard to make sweeping claims without knowing what this exact bug looked like (and the associated chromium issue isn't public yet, I believe). Generally speaking, memory-safe programming languages (Java, Safe Rust, Python...)
377.
by roblabla 6y ago
Aaah, well, thanks for explaining, because the joke went totally woosh over my head :^).
378.
by roblabla 6y ago
Getting DMCA'd doesn't mean anything more than somebody submitted a letter saying "I believe this content infringes my copyright, please take it down.". It does not establish guilt. Just because the RIAA cries foul doesn
379.
by roblabla 6y ago
> Downloading a copy for personal use would often fall under fair use. Downloading a copy for personal use isn't even copyright infringement - for copyright infringement to happen, you'd have to then share that copy you made. F
380.
by roblabla 6y ago
First, piracy is not a breach of EULA, it's copyright infringement, which are entirely different beasts. Second, breaching the EULA of a hardware product might be breaking the law in the US, but in the EU, hardware products cannot be b
381.
by roblabla 6y ago
This is an article about MDN, not Mozilla. How exactly does MDN bring money? Do you suggest MDN should be a revenue source? Or do you expect Mozilla to maintain the MDN for free eternally just because? This is seriously entitled. Mozilla ga
382.
by roblabla 6y ago
> Most of the times, the AMP site is faster Except AMP sites usually aren't faster. They just get preloaded[0]. If google preloaded non-AMP sites (which is technically feasible, there has been browser extensions doing this since age
383.
by roblabla 6y ago
Only if people are willing to pick up the maintenance when Microsoft stops working in the open. Now TBF, there are a lot of forks and quasi-forks (VSCodium, Eclipse Theia) that there's hope that there are orgs and people outside micros
384.
by roblabla 6y ago
It's only a problem if you don't do your research before buying. There are a lot of laptops with stellar linux support, some even advertise it. Some laptops have shitty windows drivers too. Whatever you end up buying, you should r
385.
by roblabla 6y ago
You enforce it on the main providers. For Android, force Google to supply the backdoor (In Google Play Services), for Matrix force the hosted Element.io instance to provide it. Even if the project is open source and development is distribut
386.
by roblabla 6y ago
They're the messenger. The idea behind an ad hominem is to attack the messenger instead of the message - whether the messenger is a human or corporation doesn't really matter. Who's behind the argument doesn't matter, if
387.
by roblabla 6y ago
Oh, this could be really useful for debugging actions! A lot of time when a workflow fails, I wish I could ssh into the failing build to investigate what went wrong. With this, I could save the whole build tree in an artifact, and restore i
388.
by roblabla 6y ago
It has saner defaults for a lot of workflows. Two small examples: stashing prompts you for a name (instead of defaulting to a useless name), and commiting will show the diff of what you're committing on the side (similar to commit -v).
389.
by roblabla 6y ago
The walled garden is not what protects your email, 2FA SMSes or bank details. The OS sandboxing and permissions system do that. The two are often conflated, but the two concerns are orthogonal really. Heck, you could easily imagine a system
390.
by roblabla 6y ago
A software dev won't need to understand it. Apple's and Google's legal team would. Your average software dev doesn't run an app store

More ›