roblabla

35 ms·

391.
by roblabla 6y ago
On one hand, from an idealistic point of view, I agree, and am a very, very big believer of having actual, carefully designed ABIs for kernel (and inter-process) communications. On the other hand, the structures required to do syscalls via
392.
by roblabla 6y ago
> I think some systems don't have a stable kernel interface. The system-provided libc is that interface. In fact, a lot of systems don't have a stable kernel interface, Linux is the exceptions here. In Microsoft Windows, one mu
393.
by roblabla 6y ago
So there's an interesting parallel in Rust with clippy, which is a linter that uses internal compiler data structures to parse and find the things to lint. This makes clippy very powerful, but very, very prone to breakage. Eventually,
394.
by roblabla 6y ago
macro_rules! cpp_call { ($($tt:tt)*) => { unsafe { $($tt)* } } } Yeah, not pretty, but it works :P
395.
by roblabla 6y ago
Or maybe people should read the post instead of reading too much into the title?
396.
by roblabla 6y ago
To be fair, they could be asking for the identities in order to summon them as witnesses against twitter. I don't hold much faith that this is the intention though...
397.
by roblabla 6y ago
Both can be correct at the same time. Pirating a movie is copyright infringement, not stealing. Digital lending is currently legally gray-zone, but the pragmatic end-game for lenders is to make it so a physical book can be digitally lent so
398.
by roblabla 6y ago
Site isolation and origin isolation are separate concerns. In the "origin isolation" model, you need to ensure different origins are in different processes, and that their data don't leak from one to the other. In site isolat
399.
by roblabla 6y ago
> With all due respect, I have personally had contracts with Comcast in the past and have experienced firsthand how well they honor those -- and I am certainly not the only one! Consumer contracts? Because Mozilla having a business contr
400.
by roblabla 6y ago
Ah, can't edit the comment anymore but: RCE: Remote Code Execution. It's fairly straightforward, but basically any vulnerability that allows you to run (native) code without physical access to the phone (e.g. when a user visits a
401.
by roblabla 6y ago
For the most part, yes, it's much harder to get ACE today than it was 20 years ago, and even then ACE doesn't actually grant you any fancy capabilities on a modern phone. To get ACE, you will generally need a couple of primitives,
402.
by roblabla 6y ago
A code execution vulnerability isn't enough. To work on truly any website, they need: - A remote code execution vulnerability. There are almost certainly multiple vulnerabilities at play here, since long gone are the days where a singl
403.
by roblabla 6y ago
OP specifically said the constraining mechanism was unique , hence why GP (and myself) are curious about what makes it more interesting/powerful than what exists in other languages like C#.
404.
by roblabla 6y ago
I use sourcegraph[0] for most of my searches even on non-entreprise github to work around how broken github search is. Sourcegraph has the ability to search in forks, in a specific commit, or in a set of repos that you define. It's rea
405.
by roblabla 6y ago
More like, they'd just release a firmware without the remote exploit in the first place. The consoles that got their fuses wiped would be bricked anyways, you wouldn't be able to install the firmware without fuse-checks on it thro
406.
by roblabla 6y ago
The reason this "easy workaround" works at all is that there is a BootROM exploit that trivially allows running arbitrary code in the BootROM. This allows us to run our own bootloader instead of Nintendo's, bypassing their fu
407.
by roblabla 6y ago
I mean, Adobe Animate (the new name for Adobe Flash) still exists, and can target HTML/JS/Canvas/WebGL. It still supports ActionScript 3.0, so the same platform that could be used to create animations and interactive games sh
408.
by roblabla 6y ago
> That doesn't mean apps necessarily have to come from a MS curated store either, just that by default the run in a sandboxed context with access to dick squat on my system. This is absolutely possible. You can distribute your UWP a
409.
by roblabla 6y ago
What are you even talking about? First of all, the people working on the language are obviously not going to be the people implementing the OS. There's only so many hours in a day, and a language as large as Rust, Haskell are a full-ti
410.
by roblabla 6y ago
> They've long been dropped in favor of windows 7 (LTS support until 2023) Windows 8.1 has support until 2023. Windows 7 support is over since January 14, 2020. https://support.microsoft.com/en-au/help/1385
411.
by roblabla 6y ago
Creating nix packages is actually pretty easy once you get the hang of it. Maybe a tiny bit more involved than AUR packages since it's a new language and all, but it's not that much more difficult. When I was using nixos on my d
412.
by roblabla 6y ago
That's... not the point. When you watch a youtube video, you have the youtube logo staring at your face. No matter how technically illiterate you are, you know you're on youtube. When your website is hosted on amazon, there's
413.
by roblabla 6y ago
Amazon isn't very likely to care what's hosted on their servers, as it's not as likely to be damaging - both in terms of brand and of legal liability. You don't know a website is hosted on Amazon Web Services the same wa
414.
by roblabla 6y ago
That has changed somewhat recently (android O I believe?). Now, when an app tries to start an installation, Android will bring you to that app's setting page where you can toggle an option "Allow this app to install other apps&quo
415.
by roblabla 6y ago
UWP apps run in a sandbox and have their own limits, e.g. most win32 api access requires special entitlements to work. WinRT is just a set of COM-based APIs, they don't inherently have any restrictioms on where or how they can be used.
416.
by roblabla 6y ago
You're thinking of UWP apps, which used to only allow winrt APIs, though nowadays UWP app can also access most of win32 APIs as well. UWP is more about the distribution model than the APIs (apps must be signed, are usually installed th
417.
by roblabla 6y ago
Qt is LGPL licensed is it not? LGPL license means you can distribute your app closed source, so long as the user can swap out the Qt implementation. This usually just means dynamic linking against Qt so the user can swap the DLL. The rest o
418.
by roblabla 6y ago
OpenGL isn't relevant here, as SDL2 has a metal backend that's used by default on MacOS. See https://hg.libsdl.org/SDL/rev/1acae5590352
419.
by roblabla 6y ago
We're talking about WannaCry here. It's a ransomware that already more or less nukes the host system. It encrypts the files with strong encryption, which is the same as shredding them if you don't have the ransom money. Sure,
420.
by roblabla 6y ago
His goal was to kill the malware. Registering the (unclaimed) domain in the binary was supposed to be step 0 to this. Such a domain would almost certainly act as a control center of some sort. You can claim it while it's still availabl

More ›