staticassertion

228 ms·

4351.
by staticassertion 9y ago
Not in Plaintext. But yes, Java has some extremely optimized libraries for HTTP, and a great GC has a lot of advantages for this sort of benchmark I'd imagine (short lived allocations, deferred collections). That said, actix is particu
4352.
by staticassertion 9y ago
I don't see how Dropbox is related to rainbow tables - presumably KeepassX uses a salt.
4353.
by staticassertion 9y ago
I just want to be able to say "do this thing or time out in 5 seconds", and that's like all the 'async' I need in rust. Everything else, nah. But that's just me - many people need these 0 cost abstractions, thi
4354.
by staticassertion 9y ago
> Two employees need to be able to have a healthy, discrete conversation about working with the boss without having to worry about a transcript of the conversation pop up in a performance evaluation later in the year. If you are worried
4355.
by staticassertion 9y ago
No one is watching you or treating you like a child. This is important for security and legal reasons. Insider threat is a serious, real world problem - consider employee harassment, exfiltrating data, sharing secret information, a compromi
4356.
by staticassertion 9y ago
That really doesn't feel like it's inherent to Lambda at all. You could say the same thing about EC2. On top of that, many of AWS's services use standard API's. It's not hard to move away from RDS or Elasticache, yo
4357.
by staticassertion 9y ago
I just don't get the "lambda locks you in" thing. You write a server the same way you always would, but like an extra 50LOC exists to make it work on lambda. So if I wanted to deploy elsewhere what would the big deal be? Lamb
4358.
by staticassertion 9y ago
> The compiler doesn't go "oh you're dereferencing a pointer which may be null, fuck you", it goes "you're dereferencing a pointer so it can't be null, and thus I can remove anything assuming possible n
4359.
by staticassertion 9y ago
I write python for most of the day, professionally. I write Rust at home. I'd say I spend similar time on the same problem with both, maybe a bit more upfront on Rust and a bit more on the tail with Python. This is, of course, disregar
4360.
by staticassertion 9y ago
I suppose that's true, yes. My point was more that your compiler is not hitting a line of code and saying "I know this is or is not UB" because it can not do that in the general case - it is definitely incorrect to say it is
4361.
by staticassertion 9y ago
It's more complicated than this. C++ compilers can't just "reject" UB code - they don't have enough information at all times to prove that code invokes UB, the languages is not powerful enough to represent this in a
4362.
by staticassertion 9y ago
> As far as I'm aware, if you stay within the confines of smart pointers (and don't drop down to the raw pointer it owns) you will never encounter undefined behavior. No. Even with smart pointers it's possible (move out of
4363.
by staticassertion 9y ago
Wonderful, thank you for the link.
4364.
by staticassertion 9y ago
Is there a whitepaper associated with this? I found the project page and the github page, but I want to see: a) What's involved in getting the C code to be 'safe' - how much annotation overhead, etc b) How this interacts with
4365.
by staticassertion 9y ago
Now we have wordpress, medium, etc. It's never been easier to have a personal blog over HTTPS.
4366.
by staticassertion 9y ago
> What about hosting HTTP content because you verify GPG signatures upon download? Because the rest of the content is not verified?????? That's the whole point of HTTPS????????
4367.
by staticassertion 9y ago
The disclaimer in that issue seems pretty clear - yes, this can be bypassed, this is not production ready, this is proof of concept. They explain that they could attain 'first runner' status in Chrome but ultimately the protection
4368.
by staticassertion 9y ago
No no no, you see, by making minorities safer we must then be making the majority feel less safe! Safety is a zero sum game after all.
4369.
by staticassertion 9y ago
> For someone without disk encryption (many people, maybe most?), I would say they should really use FDE. An attacker with that level of control can do a lot - FDE is designed for this type of attacker. But yes, that is one attacker that
4370.
by staticassertion 9y ago
Got it - thanks, that's interesting. I'll probably check out how that worked.
4371.
by staticassertion 9y ago
> The argument that "security is pointless unless it can prevent <nation-state> from obtaining the data" is a really tiresome strawman. This sentence is a strawman as you've invented the opponent's argument (lit
4372.
by staticassertion 9y ago
> All of your remote data is protected by whatever password you use, rather than by a high-entropy key (which means if you choose a poor password you might as well leave your data in plaintext). Can you elaborate on this? What do you mea
4373.
by staticassertion 9y ago
Are you sure that Chrome uses keyring?
4374.
by staticassertion 9y ago
A lot of people have problems modeling threats. For example, in the article: > Anybody who ever designed a login function on a website will likely see the red flag here A login function on a website and a master password for your local s
4375.
by staticassertion 9y ago
Comparing VR today, in a world where portable devices dominate, to VR even a decade ago, in a world where cell phones were only just starting to be commonplace, seems really useless. The world is an extremely different place. This is, in my
4376.
by staticassertion 9y ago
I really want to build a VR-based GUI for a Very Serious Program I'm writing in my free time. It's not a game. So whether there are or aren't, there's clearly potential. It doesn't seem right to dismiss it just beca
4377.
by staticassertion 9y ago
There's virtually no confusion...
4378.
by staticassertion 9y ago
> in any event, it's more surface area. their web server being compromised and serving a bad shell script is just more that can go wrong. If they were serving up a binary you would have the same exact threat that you mentioned. The
4379.
by staticassertion 9y ago
This is the coolest fucking website.
4380.
by staticassertion 9y ago
I saw one yesterday. There was a driver but like... come one, decades?

More ›