roblabla

21 ms·

211.
by roblabla 4y ago
Well, we have other reasons to chose rust rather than a GC'd language (mostly has to do a lot of FFI, which Rust makes much easier than go or Java). I do agree that, if GC'd language fits the problem space, they tend to be much be
212.
by roblabla 4y ago
> Having a complex programming language which limits you and controls how you use it does not sound appealing to those who need a feature done, fast. This is so interesting to me. I'm a Rust programmer by trade (as in - I'm not
213.
by roblabla 4y ago
No, I am not. I'm just an interested bystander. I don't even code much JavaScript anymore.
214.
by roblabla 4y ago
Ah, yes, I had totally failed to consider that NPM is now used much more widely than just for nodejs server code, and can be used for browser deps. Thanks for this!
215.
by roblabla 4y ago
I agree with most of your post, but I do not understand this: > Post install scripts are still a thing I cannot find a situation where post-install script actually pose a security issue. I find that you'll always end up running the
216.
by roblabla 4y ago
You can turn panics into aborts with `panic = "abort"` in Cargo.toml, in which case nobody has to pay for being exception safe (though, to get the full benefits of this, you may have to rebuild the stdlib? I'm not entirely
217.
by roblabla 4y ago
Why though? That makes absolutely no sense.
218.
by roblabla 4y ago
TOTP never requires a phone number. On GitHub, they either show you a qr code you can scan in an app, or a text you can import. All apps support this sign up process, from google authenticator to console-based tools like totp[0]. Other 2FA
219.
by roblabla 4y ago
> I thought everything was handed out as copies in go by default unless a pointer was being passed. So this would make it “easy” to tell whether you are mutating a object or not. The first bit is correct. The point the article makes is t
220.
by roblabla 4y ago
Wat? Rust has been a very stable language since Rust 1.0. They have a stellar record of keeping things working - with most code breaking being due to said code invoking UB. The edition system is a brilliant invention that allows evolving th
221.
by roblabla 5y ago
Problem is, there's lots of unsafe code that casts *mut T to &mut T (usually after checking T is valid and whatnot). If &mut T didn't use capabilities, this kind of unsafe code would end up not taking advantage of the CHER
222.
by roblabla 5y ago
Tiniest of nits to pick but: > and I wish rustc would have a stand-alone assembly files support Rustc now supports inline assembly and global assembly in Rust 1.59 (the very latest release). So this is now possible: //&#x
223.
by roblabla 5y ago
According to the 2020 Rust Survey[0], a decent amount. The majority is on stable rust, but a bit less than a third of rust users are on nightly. The company I work at uses a pinned nightly rust in order to access some soon-to-be-stabilized
224.
by roblabla 5y ago
I don't see why the GCC codegen would end up with major performance improvements - my understanding is that GCC and LLVM are basically on par with performance, with some workloads being a tiny bit better in one or the other. Is that wr
225.
by roblabla 5y ago
FWIW, Rust does have fast thread locals, but only in nightly. https://github.com/rust-lang/rust/issues/29594
226.
by roblabla 5y ago
Last I heard, it was doing some power glitching to bypass/nop-out some signature check or some such. There aren't much details in the public, but a very similar hack is publicly documented for the vita: https://arxiv.or
227.
by roblabla 5y ago
why would you even try to validate the TLD anyways? Just let it through. If the TLD doesn't exist, it will error out when querying the domain name anyways. Using public TLD lists runs the risk of the list going outdated.
228.
by roblabla 5y ago
1. This is complicated. From a fThere is a notion of power_level, which you can set to different events. So you can set "send message" to power level 30, and any user with a "power level" of 30 or more will be able to s
229.
by roblabla 5y ago
> (because apparently the "stable" version shipped with debian stable isn't really stable when a problem arises?). "Stable" here means "unchanging". It doesn't mean bug-free. My personal experience
230.
by roblabla 5y ago
> self hosted dependencies/packages. Why? If your lockfile specifies and enforces the hash of the package, you don't need to self-host it - the lockfile will take care of detecting supply chain compromises that swaps a package
231.
by roblabla 5y ago
Yes. Heap Memory Corruption is a type of memory safety issue that's impossible in Safe Rust. (As usual, this depends on any unsafe code and the compiler being bug-free, but that's supposed to be much easier to prove since the &quo
232.
by roblabla 5y ago
A single transaction does not use the energy equivalent of a small country. Last estimation I've seen said they used around 1719.51kWh. That's still a whole damn lot (around 60 days of energy use of an average US household), but y
233.
by roblabla 5y ago
All the time? Hardmods have been a thing since the first consoles, all the way down to the latest Nintendo Switch. Also, consoles are "protecting" not the user, but the manufacturer - which is exactly the point people are trying t
234.
by roblabla 5y ago
It's possible to show the "verified" check when commiting from the command line, you just have to sign the commit with a PGP key, and associate said PGP key with your account on github.
235.
by roblabla 5y ago
His original goal was to go to Ecuador for asylum. His passport was revoked while he was waiting for his connecting flight in Russia, ending up with him stuck there[0]. His end-goal was never to end up in Russia. [0]: https://en.
236.
by roblabla 5y ago
The great tech posts are mostly on hacks.mozilla.org. I think blog.mozilla.org is mostly for firefox update stuff and Mozilla Foundation stuff.
237.
by roblabla 5y ago
err, sorry, but what? HTTPS everywhere does not help ads/trackers at all. It _does_ prevent your ISP to inject ads in your webpages, something that was done by quite a few US ISPs. And more importantly, it prevents anyone not between y
238.
by roblabla 5y ago
"The rules" are in place, but we can change them if we, as a society, decide that they don't work, or don't reflect reality, or cost too much. Besides, if the vast majority of people ignores a rule, maybe it means that t
239.
by roblabla 5y ago
> Myself - I see the release of .NET as the point where Microsoft started to become more open, more platform-agnostic and more developer-friendly than it had ever been before. .NET certainly was more developer friendly, and I guess more
240.
by roblabla 5y ago
The wiki appears to be down. Cloudflare returns an Error 521: Web server is down.

More ›