surajrmal

5 ms·

31.
by surajrmal 2mo ago
It's going to be a Qualcomm setup. Any reason to think it'll be any different from usual?
32.
by surajrmal 2mo ago
Who is funding this security audit? Are folks supposed to volunteer their free time? It's a difficult coordination problem. The best folks have come up is to delay adopting new releases by a few days and hope your dependency is popular
33.
by surajrmal 2mo ago
The longer you starve the more delicious the food tastes. Programming language advances were ignored by a significant number of folks for decades. The sudden relief of getting something like rust can leave a strong impact. People also like
34.
by surajrmal 2mo ago
What enterprises pay for is all that matters. They pay insane amounts for a lot of things I would never do personally, but I'm not the target demographic in those cases.
35.
by surajrmal 2mo ago
Which is also learning how to monetize their offering via cloud instead of ads. So again your expertise here is questionable.
36.
by surajrmal 2mo ago
Notably that's not due to subsidization but rather due to investment in capex for future growth. The reason to not subsidize is largely because of already being hardware constrained. There is no extra unsold capacity to use.
37.
by surajrmal 2mo ago
Companies at the size of Google naturally have different business units with different goals. Flutter solves something from some teams with other parts of the company that do not solve for them. That doesn't mean there are some sort of
38.
by surajrmal 2mo ago
For devices that are entirely controlled via an MCU and lack wireless connectivity, that is probably true. However that's not true for the pixel watch. The cpus and dram take significant power.
39.
by surajrmal 2mo ago
Murder has a negative meaning. Let's name it "neutralization" or "sending to a higher place". Giving it a new name doesn't mean the original name is less correct. Vulnerability is a relative definition. It&#x27
40.
by surajrmal 2mo ago
If they can get productivity increases equivalent to .1% it pays for itself. That's roughly equivalent to firing 1 in 1000 employees to finance the software.
41.
by surajrmal 2mo ago
Preventing you from faking data is exactly what attestation is designed to do. You want something different from what the folks requiring attestation want. That's fine, but just don't expect to be allowed to use those apps.
42.
by surajrmal 2mo ago
If someone holds a gun to your head and tells you to run a red light, who is liable? Humans can get persuaded to do illegal things by criminals just as well.
43.
by surajrmal 2mo ago
40 rides a month, not week. I'm not sure you're in a position to accuse folks of not doing math when you don't seem to read very well.
44.
by surajrmal 2mo ago
I'm not suggesting a new system or a timeout. I'm suggesting passing a two sided handle (like a socket) where you can listen for the other end closing. Upon closing, which should only happen due to a bug or the process exiting, th
45.
by surajrmal 2mo ago
Look at the git stats for the project. Lines of code submitted haven't changed dramatically. Not everyone is just merging slop into the codebase. There are many ways to use AI, and most established players are not merging vibe coded no
46.
by surajrmal 2mo ago
There is hype, but there are also real tangible wins as well. Analyzing code for bugs is something that works very well. We use it for helping us revert changes that lead to a flaking test and it's dramatically faster than previous tec
47.
by surajrmal 2mo ago
Google has not really embraced vibe coded slop. Humans are involved before any code merges and the quality bar remains high.
48.
by surajrmal 3mo ago
Does that make it okay? There are many ways to have it learn the process dies without needing to signal the process.
49.
by surajrmal 3mo ago
I don't think there is anything wrong with increasing liability for writing preventable bugs. The floor should be raised as our tools improve and the negative outcomes of these bugs increase. Making c illegal is not a goal of anyone I
50.
by surajrmal 3mo ago
The Linux kernel is simply too complex.
51.
by surajrmal 3mo ago
It sounds like you are just at odds with the android security model: https://arxiv.org/pdf/1904.05572
52.
by surajrmal 3mo ago
And app developers have the right to not offer their services to users who don't give them the security model they want. You are free to install a custom OS which provides you the security model you desire. You have choices.
53.
by surajrmal 3mo ago
More specifically apps and users have equal agency in the android security model. Which comes down to the fact that if you don't own the app you can't control its experience. This feels grounded to me. Push for more open source ap
54.
by surajrmal 3mo ago
Have you read the android security model? It's a multi party security model which considers apps and users as equals. It's a legitimate security model and just because it's not what you want doesn't mean it's wrong.
55.
by surajrmal 3mo ago
adb is not being stopped, the bug is talking about a niche way folks use it without a secondary device. There is also no conclusion from the bug on what action will actually be taken.
56.
by surajrmal 3mo ago
It provides a way to improve the safety of existing code without rewriting it. It would be nice if it could solve the memory safety issues around data races too.
57.
by surajrmal 3mo ago
It sounds like you don't genuinely care about other people and their experiences. Being able to relate with one another and take interest in their lives is the primary reason I talk with my friends, not because they are interesting.
58.
by surajrmal 3mo ago
Perhaps the parent meant dynamic linker.
59.
by surajrmal 3mo ago
This was not my experience. I had to climb a few levels to really start interacting with other teams on a consistent basis and see how politics plays out and how it could affect my own career. In particular, learning that while at a high le
60.
by surajrmal 3mo ago
The open source community is built up by many project leaders with unprofessional attitudes. Honestly I think a younger version of myself would have resonated with the post. I'm almost certain there are many folks who will see the post

More ›