strcat

77 ms·

751.
by strcat 10y ago
It's not a mandatory feature. It provides options that it didn't have before without having lost anything.
752.
by strcat 10y ago
It runs on Windows and other non-unix-like operating systems too.
753.
by strcat 10y ago
It works very well for concurrent readers and can handle one concurrent writer when set to WAL mode. Saying that it's no good at concurrency is selling it short. It's blazing fast as long as the use case doesn't require multi
754.
by strcat 10y ago
Some symbols are. Not all.
755.
by strcat 10y ago
Linux has plenty of file descriptor types that do not correspond to a path, along with virtual file systems where files cannot be deleted... Your example of device files is hardly universal, and the way it works is useful.
756.
by strcat 10y ago
The FSF and SFLC take the position that the GPL is incompatible with the iOS App Store restrictions, since it forbids adding additional restrictions. However, GPL3 has official support for "additional permissions" and it's st
757.
by strcat 10y ago
Read the linked content in the post about undefined behavior. Signed overflow is undefined, not implementation defined. Clang and GCC treat it as undefined such without -fwrapv. That means they assume it cannot happen and feed information i
758.
by strcat 11y ago
The getrandom() call should be used if it's available, and /dev/urandom on legacy systems. The system call blocks once when the system starts until the RNG is initialized with enough entropy, and then never again.
759.
by strcat 11y ago
No, it does not. Dangerous permission can be toggled off for all apps now. For apps on the new API level, they can no longer obtain dangerous permissions at install time. They have to trigger an OS-level prompt for the permission. They&#x27
760.
by strcat 11y ago
Yeah, Android pushes memory safety quite hard. Most code in the ecosystem is written in memory safe languages (Java and friends). That still leaves the entire kernel and lots of performance critical or legacy code. Languages like Rust could
761.
by strcat 11y ago
It does this check when you connect to a new network and it repeats every so often to make sure the connection still works. It's how Android notifies you if there's a network connection but no internet access. It's not a brow
762.
by strcat 11y ago
That's not what the response to #184 means. #194 wouldn't be open if removing that connection wasn't planned. CopperheadOS is not going to outright prevent connections to Google. That doesn't mean the OS is going to have
763.
by strcat 11y ago
Yes, I'm the (lead) developer of the OS.
764.
by strcat 11y ago
Android vulnerabilities aren't more numerous than iOS vulnerabilities. The key difference is that 97% of Android devices do not get security updates. There is no need for 0 day vulnerabilities for attackers, in general. Few users have
765.
by strcat 11y ago
6.0.1_r20 for the Nexus 5 and Nexus 9, and 6.0.1_r24 for the Nexus 5X. You can see the versions of the downloads page (it uses AOSP_TAG.COPPERHEADOS_TIMESTAMP) It's the same as stock. It will move to 7.0 shortly after it's release
766.
by strcat 11y ago
Exploitation can certainly be outright prevented. For example, automatic integer overflow checking reduces any integer overflow vulnerabilities to at most a denial of service attack (clean abort). _FORTIFY_SOURCE (including the more dynamic
767.
by strcat 11y ago
https://copperhead.co/android/docs/technical_overview covers much more and is mostly up-to-date.
768.
by strcat 11y ago
See https://copperhead.co/android/docs/technical_overview .
769.
by strcat 11y ago
Privacy enhancements are definitely within the scope of the project. Most of the current features are exploit mitigations though. If you look through https://copperhead.co/android/docs/technical_overview you'
770.
by strcat 11y ago
The vast majority of apps on the Play Store do not actually require Play Services. There are also plenty of open-source apps on F-Droid without any such dependency, and other mostly proprietary alternatives like the Amazon app store.
771.
by strcat 11y ago
CyanogenMod doesn't have all of the source code or the keys to sign low-level firmware, so it's not possible for them to provide full security updates after vendors drop support. They only provide security updates for the Android
772.
by strcat 11y ago
I don't think it's the case anymore. They used to name the releases and then brand it based on the name. The releases are treated as inconsequential now.
773.
by strcat 11y ago
They have systemd-nspawn as a lightweight interface to the container features (namespaces, control groups).
774.
by strcat 11y ago
Profile-guided optimization exists and is used by projects like Firefox is the real world. The advantage of JIT compilers is getting the profiling data dynamically, but that's usually going to be worse off than a well-tuned profiling s
775.
by strcat 11y ago
Increased memory consumption and reduced page sharing between processes using the same code means lower performance. Memory bandwidth and cache capacity are a much bigger bottleneck than CPU throughput for most use cases. A JIT compiler is
776.
by strcat 11y ago
The main benefit from ART on Android is having all of the code generated in advance and mapped from storage. There's no waste from code being generated at runtime in-memory. Wasting memory by generating code dynamically certainly hurts
777.
by strcat 11y ago
> By the way, I think Linus is full of crap: while the line at issue isn't great, the use of those overflow-arithmetic functions in general is a great idea, considering how easy it is to screw up a manual overflow check in C, and ho
778.
by strcat 11y ago
Brad doesn't throw personal attacks and insults around like Linus anyway. Plain spoken criticism of actions and ideas is not a personal attack. He tends to strongly disagree with the upstream kernel developers on issues related to secu
779.
by strcat 11y ago
The Linux kernel wouldn't have features like ASLR, protected_{hardlinks,symlinks}, dmesg_restrict, kptr_restrict, ptrace_scope and lots more if not for PaX/grsecurity. The fact that pipacs and spender no longer spend their time pu
780.
by strcat 11y ago
Wind River isn't using grsecurity. They're using their own variant / port of it and advertising it as grsecurity. spender just wants them to say they have an "unofficial port of grsecurity" if they're unwilling

More ›