rsc

22 ms·

1. 181.▲
   by rsc 9y ago

   There have been various CVEs already around brace expansion, but yes, it gets bad.
2. 182.▲
   by rsc 9y ago

   I copied the glob implementation from one of the BSDs - I believe FreeBSD - into a standalone C program and ran that program on the same Linux system as the rest of the tests. Here's the version that tests the system glob. If you run i
3. 183.▲
   by rsc 9y ago

   I looked around but didn't find anything I liked. The regexp article [1] uses jgraph [2] to plot the data as eps, then ghostscript to turn eps to png. That no longer works in a world of variable-dpi screens, so for this article I gener
4. 184.▲
   by rsc 9y ago

   Indeed, I just didn't want to presume that nothing had changed in the past 10 years (but apparently not).
5. 185.▲
   by rsc 9y ago

   I googled for Rust glob match and ended up at the glob crate. This is my Rust program: extern crate glob; extern crate time; use glob::glob; use time::PreciseTime; fn main() { std::env::set_current_dir("/tmp&#
6. 186.▲
   by rsc 9y ago

   Thanks, fixed the typo (author, not OP).
7. 187.▲
   by rsc 9y ago

   Thanks for pointing this out. I wrote a Python test program but forgot to run that test in the data collection for the graphs. I will update them once the tests finish running. Ironically, Python must be passing the glob to an exponential-t
8. 188.▲
   by rsc 10y ago

   On the other hand George Dyson's book "Turing's Cathedral" makes a compelling case that the group at Princeton building the IAS Machine ( https://en.wikipedia.org/wiki/IAS_machine ), Von Neumann inclu
9. 189.▲
   by rsc 10y ago

   To be clear, the discussion of survey free-text answers is based on us (mainly Steve) reading all the text. The goal in the free-text presentations was to show raw data in a useful way for others to look for details. As I noted in a comment
10. 190.▲
    by rsc 10y ago

    Telling those two apart reliably is one of the fundamental problems in computer science.
11. 191.▲
    by rsc 10y ago

    It's not possible to sum them. See the explanation of how to read the data under the "What do you like about Go?" results. In particular, "management" and "dependency" both include the "dependency man
12. 192.▲
    by rsc 10y ago

    OK but the conversation I personally had was with someone involved with designing and implementing Haskell.
13. 193.▲
    by rsc 10y ago

    You're right that the two are difficult to reconcile. Even so, one of my goals this year is to try.
14. 194.▲
    by rsc 10y ago

    Hi Bob, Agree about "simple" being a bad choice of name. What I meant is that it's not one of the crazy souped up SAT solving algorithms directly. I'll drop "simple". FWIW we've seen those kinds of type er
15. 195.▲
    by rsc 11y ago

    Yes, they did. I saw the XML and it didn't look much different from well-written HTML. The amount of markup you need for a book is fairly minimal: h1, h2, p, b, i, c (code font), ix (index entry). Think of it as a customizable HTML.
16. 196.▲
    by rsc 11y ago

    I argued for the design of and wrote the implementation for Go's lexical scoping and first class functions, and I can tell you they were in no way influenced by Javascript. Scheme, Lisp, ML: yes. I'd written sizable programs in ea
17. 197.▲
    by rsc 11y ago

    Andrew wrote: > It's really up to the provider of the service in question to make the call. All we can say about crypto/tls is that it hasn't been thoroughly reviewed from a cryptographic standpoint. Whether that suits you
18. 198.▲
    by rsc 11y ago

    There are tradeoffs here. I believe the reason for the omission originally was concerns along these lines: http://www.openwall.com/lists/oss-security/2014/07/10/5
19. 199.▲
    by rsc 11y ago

    I don't doubt that HyperScan ends up being a better fit for you, but it's not strictly true that RE2 can't tell you about multi-pattern matching. https://github.com/google/re2/blob/master/r
20. 200.▲
    by rsc 11y ago

    Acid is fantastic, but I really wouldn't wish it on anyone. Incredibly powerful but incredibly awkward language.
21. 201.▲
    by rsc 11y ago

    No, it's not. I don't believe there are any plans to put it into the standard library either. It's a standard tool, not a library.
22. 202.▲
    by rsc 11y ago

    No, sorry. Go 1.6 planning is just beginning.
23. 203.▲
    by rsc 11y ago

    I can see that, and I've been idly wondering over the past few days what the largest N will be for Go 1.N. The contrast with most version numbering, however, is that we've defined a meaning for Go 2: it breaks all your Go 1 progra
24. 204.▲
    by rsc 11y ago

    You can start from the C version and move forward and check that you get the same result as starting with released Go binaries. Unless you think Ken somehow backdoored the original C compilers to backdoor every C compiler in the world to ba
25. 205.▲
    by rsc 11y ago

    Yes, this is a good summary.
26. 206.▲
    by rsc 11y ago

    No, sadly. We are well aware of the hole, though, and we'd like to plug it, but other work took priority this release cycle.
27. 207.▲
    by rsc 11y ago

    To be fair, this is true of pretty much any major release of a new piece of software: tread lightly and test carefully before deploying to production. The new GC, default GOMAXPROCS > 1, and changes to the scheduler may well expose laten
28. 208.▲
    Go 1.5 is released(blog.golang.org)

    559 points by rsc 11y ago|103 comments
29. 209.▲
    by rsc 11y ago

    Please feel free to mail me at rsc@swtch.com and we can continue the conversation in whatever medium works for you.
30. 210.▲
    by rsc 11y ago

    It's true. The original software was an email auto-reply implemented in shell. The first web version of the software was CGI invoking roughly the same shell script. I didn't have anything to do with those. The next web version (wh