saynsedit

25 ms·

241.
by saynsedit 10y ago
This is not about retrieving the key, an attacker can still retrieve the correct opaque signature for specific data. This potentially allows an attacker to impersonate a user.
242.
by saynsedit 10y ago
It's not obvious what he was talking about. In context he was responding to this comment: "While I know that C compilers are really conservative about this, doesn’t it matter as to how x and y are declared? After all if they are d
243.
by saynsedit 10y ago
Reeks of an anti-C bias. This comment by the author is flat out wrong, and I quote: """ `int x[1000]` in C or C++ doesn’t have much meaning. It’s semantically equivalent to declaring “x” as `int *x`. You can reassign X any ti
244.
by saynsedit 10y ago
[headerB64, payloadB64, signatureB64] = jwt.split('.'); if (atob(signatureB64) === signatureCreatingFunction(headerB64 + '.' + payloadB64) { // good } else // no good
245.
by saynsedit 10y ago
The "shader" would take in the current application-specific description of the scene. This description in theory would be much much much smaller than the corresponding assets required to render the scene. It would be trivial to ea
246.
by saynsedit 10y ago
It doesn't have to be this complicated. It only seems complicated because your solutions are stuck in the context of memory mapping. A very simple solution is to add another logic layer to GPU processing, like a shader. It could be the
247.
by saynsedit 10y ago
Mmap() is not the only obvious solution for unused assets. There are other ways with more explicit operational specs. If you design the solution for this problem from first principles, you'll come up with something more appropriate tha
248.
by saynsedit 10y ago
Rust is better than C++
249.
by saynsedit 10y ago
I was facepalming too while reading this. I'd expect Carmack to understand the ugly truth behind mmap: it's not free. It's more than not free, demand-paging actually adds significant cost: TLB flushes aren't performance
250.
by saynsedit 10y ago
War is terrible. Average citizen doesn't realize it until there's a draft or until after they're a veteran. I hope one day we'll reach critical mass of war awareness and stand up against it. For now, we're building
251.
by saynsedit 10y ago
I don't think UB is bad. It's a reasonable thing to do when someone invokes an operation with bad input. For instance, what should `sqrt(-1)` be? Or `head([])`? You can define all behavior and say "bad input will throw an exc