roblabla

47 ms·

511.
by roblabla 7y ago
I'm very confused. On one hand, the tweet claims to have a bootrom exploit. On the other hand, the fifth tweet in the chain talks about an iBoot vulnerability that got patched in ios12 beta[1]. Maybe the vulnerable codepath has some co
512.
by roblabla 7y ago
The same case also says that Steam must reimburse steam wallets when closing an account too.
513.
by roblabla 7y ago
This will likely expand to at least the whole European Union since european texts were used to arrive to this ruling.
514.
by roblabla 7y ago
A license is a contract between you and valve. You can't transfer that license because the contract says you can't. The court says that the digital game is a good (just like a DVD is), and not a license, so you must be allowed to
515.
by roblabla 7y ago
The way adblocks like UBo works isn't by injecting stuff in the DOM. Instead, they look at requests going out, and can ask the browser to "fail" it. It can do that based on custom logic - a piece of javascript code runs for e
516.
by roblabla 7y ago
Quantum computing won't be relevant to most regular developers, in the same way machine learning isn't relevant to most regular developers. Quantum computing might end up being useful for certain niche use-cases, such as heavy num
517.
by roblabla 7y ago
fn is analogous to function in javascript. It takes the form `fn fnname<generics, generics>(argname: argtype) -> ReturnType` The "weird" 'a here is a generic lifetime. It basically says that the returned value (Term)
518.
by roblabla 7y ago
Committing fiscal fraud is breaking the law.
519.
by roblabla 7y ago
> I trust my ISP and government more than a US company I have no formal contract with and the US government. And every single intermediary and whoever else might be listening in? This is an unencrypted plaintext connection. Which is the
520.
by roblabla 7y ago
Not really no. If you have only one online persona, then you'll only show one angle of your life, and the rest will simply become invisible to facebook. People are unlikely to change how they are, they'll just change how they use
521.
by roblabla 7y ago
You're linking to an old version of the rust documentation from before it was even 1.0.0. Rust used to have a runtime before 1.0.0 to implement green threading. But this is not the case anymore. Rust can be entirely statically linked i
522.
by roblabla 7y ago
> Sadly Rust is in fact getting mroe more complex all the time though, with things like async/await added and other complex features in the pipeline (like specialization, higher kinded types, generators, ...). Some of those have fai
523.
by roblabla 7y ago
Rust definitely has a lot to improve on. I'm a daily Rust user, and the compile times are still absolutely terrible, and I have to agree it isn't a simple language for any sane definition of simple. That said: almost all your poin
524.
by roblabla 7y ago
I once set up a raspberry pi, didn't finish the entire installation, figured I'd finish where I left off the next morning. Discovered after a few hours of sleep that some ancient port forwarding rule I had set up in my router expo
525.
by roblabla 7y ago
Can you please quote how containers are not built with security in mind? What would even be the point of user namespacing, network namespaces, filesystem namespaces, etc... if not security?
526.
by roblabla 7y ago
At least with containers, if something manages to do damage, it will have to do it through a security vulnerability - which will eventually get patched if caught. The current state of affairs is that malware can do damage without even needi
527.
by roblabla 7y ago
This was attempted by the Libz Blitz back in 2017. See the rust-cookbook: https://rust-lang-nursery.github.io/rust-cookbook/ . I agree that this should be better documented and probably more integrated with crates.io s
528.
by roblabla 7y ago
There's actually a more official resource: the rust cookbook[0]. This is maintained by the rust-lang team (rust-lang-nursery is an official place for crates maintained by the rust language maintainers). [0]: https://rust-lan
529.
by roblabla 7y ago
Really? Given there are a chrome apps capable of doing ssh[0], I'd be very surprised if FTP is not implementable. [0]: https://chrome.google.com/webstore/detail/iodihamcpbpeioajje...
530.
by roblabla 7y ago
It still shouldn't matter unless they only support horribly insecure entropy (< 7).
531.
by roblabla 7y ago
It's become a bit of a tradition, with the new rustacean[0] being the first to do it I believe, as far back as 2015. rustdocs being just markdown with the convenient aspect of testing that your rustdoc actually works makes it a really
532.
by roblabla 7y ago
Something like those? The equivalement to the SDM is the "AMD64 Architecture Programmer’s Manual". The other documents are specific to the EPYC (and other families). https://developer.amd.com/resources/epyc-re
533.
by roblabla 7y ago
Did you watch any of the BlackHat talks? We're very much talking about cybersecurity professionals - there's no faking that level of expertise. And just like any cybersecurity conference, there are people from all sides coming - l
534.
by roblabla 7y ago
1. There is work to fix the identity problem with Identity Servers. See https://matrix.org/faq/#what-is-an-identity-server%3F 2. I'm not sure what gives this impression? I have a server that is very much on flaky
535.
by roblabla 7y ago
Matrix doesn't E2E encrypt everything, only certain rooms. It's not currently possible, but I suppose there's no technical roadblock to making a server prevent access to E2E encrypted rooms to meet FOIA requirements. As for u
536.
by roblabla 7y ago
You don't have to - you can sign IPAs with a developer certificate, but the app will only work for 7 days on a free account (1 year for a 'real' developper account). Having to resign every week is obviously a dealbreaker.
537.
by roblabla 7y ago
Could start by incrementing the value, then checking if it's below the threshold, similar to an atomic fetch_add operation. PostgreSQL has RETURNING clauses, SQL Server has OUTPUT clauses, etc...
538.
by roblabla 7y ago
That's orthogonal to exceptions though. Errors could easily have stack traces automatically added to them (and IMO, they should).
539.
by roblabla 7y ago
Hah, that's rich. Good luck avoiding google ads, recaptcha, or google analytics. Those aren't products we're direct users of, but they definitely aggregate our data. I guess you can avoid them by simply not going on any websi
540.
by roblabla 7y ago
Rust is in a very different situation though. Safe Rust has no undefined behavior - if something is behaving in an unsound manner, then that's a compiler bug. Safe Rust does have some implementation-specific behavior - for instance

More ›