vsgherzi

6 ms·

61.
by vsgherzi 5mo ago
unfortunately a little light on the details. I'm very curious how the bug survived through MTE
62.
by vsgherzi 5mo ago
Even linux was subjected to an attack in xz utils. Granted it is much harder and they have a much better auditing problem (something npm should learn from). There really isn't a silver bullet here unfortunately. The industry as a whole
63.
by vsgherzi 5mo ago
As I said above “Personally for rust I’m a proponent of the foundation supporting a few core crates that go under the same audit procedure as the main rust language and give funding to the project to limit supply chain vulns. I don’t think
64.
by vsgherzi 5mo ago
The rust team is already stretched pretty thin. A larger library is going to put more pressure on them. These libraries are already maintained and used. The rust project should just directly, fund, Shepard and guarantee a level of quality f
65.
by vsgherzi 5mo ago
This bloats the std library and forces lots more work and stress on the rust dev team. Not to mention it’ll add more churn to the std lib.
66.
by vsgherzi 5mo ago
Yeah I’d agree that multiple crates under one project is basically the same as 1 large crate. The real problem is how many people you’re trusting and it’s all coming from the same person.
67.
by vsgherzi 5mo ago
Crates has also been making efforts to include rust sec, but in addition to the above I would like the community to shy away from many small dependencies to a few larger ones just as tokio has
68.
by vsgherzi 5mo ago
Supply chain incidents suck and we need to do better. Personally for rust I’m a proponent of the foundation supporting a few core crates that go under the same audit procedure as the main rust language and give funding to the project to lim
69.
by vsgherzi 5mo ago
Seems like volunteers and donations? Is there something else I can read to be more informed on this?
70.
by vsgherzi 5mo ago
super curious on this one as well, last I heard they've been enabling it slowly
71.
by vsgherzi 5mo ago
Boot camp is a windows problem. This can be done today on apple silicon but Microsoft dosent want to go through the effort to support it.
72.
by vsgherzi 6mo ago
It’s two things. 1. Less eyes are on the bsds 2. Bsds don’t have the same optimizations that Linux has. Bsds generally try to pursue corrrectness That being said there were just a bunch of vulnerabilities in freebsd macOS has had its own di
73.
by vsgherzi 6mo ago
Honestly the experience looks pretty nice. Which is crazy to say for such an old style of program but I kind of like it. Perhaps just nostalgia for a time I never got your experience.
74.
by vsgherzi 6mo ago
This article also misses that certain Linux distros actually run a custom scheduler through ebpf that can sometimes elicit a performance increase by removing micro stutter. The steam deck runs one such version of the scheduler.
75.
by vsgherzi 6mo ago
Not about moral high ground. Ones a democracy one isn’t.
76.
by vsgherzi 6mo ago
Very cool stuff, excited to see some progress into memory safety for c++ but jeez. As i understand it, it requires me to do some meta programming to build guards around my program and ensure memory safety? Is that accurate or am I missing t
77.
Ask HN: Is your Mac's menu bar throwing errors?
1 points by vsgherzi 6mo ago|0 comments
78.
by vsgherzi 6mo ago
Amazing change, fighting with the back button is my least favorite part of the ad web and a blindspot for ublock. I wonder how Google is going to track this and if SPA style react router sites would be downranked because of the custom back
79.
by vsgherzi 6mo ago
Do the same to Google.com When it matters it matters. Even in facebooks case they made react fit for their use case. You think the react devs didn’t understand html? Do you think quality frontends can be written without any understanding of
80.
by vsgherzi 6mo ago
Disregarding the fact that Bryan operates oxide a company that has multiple investors and customers (id say this proves valuable knowledge) the crazier fact is that people think html is useless knowledge. React USES html. Understanding html
81.
by vsgherzi 6mo ago
Go is another example of a fat std lib causing issues specifics with their crypto code. I think in general the things people are worried about are 1. Maintainer quits 2. Bad actor becomes new maintainer 3. Bad pr 4. Account compromise Whe
82.
by vsgherzi 6mo ago
Talked about this topic here on my blog https://vincents.dev/blog/rust-dependencies-scare-me/ It sparked some interesting discussion by lots of the rust maintainers https://news.ycombinator.com/ite
83.
by vsgherzi 6mo ago
You can still do this! It’s just very hard and needs hole punching and maybe a stun server
84.
by vsgherzi 6mo ago
This is some amazing work, a good reminder to dig more into operating systems for myself!
85.
by vsgherzi 7mo ago
do you have a link on the virus part? I thought they moved simply for stability
86.
by vsgherzi 7mo ago
I've said it before and I'll say it again. I'm glad rust has good package management I really am. However given that aspect, it ends up forming a dependency heavy culture. In situations like this it's hard to use depende
87.
by vsgherzi 7mo ago
Definitely concerned to hear but I’m hopeful that the core of nasa is intact. They’re some of the kindest and smartest people I’ve had the pleasure of meeting. They don’t joke around with lives on the line. I hope the best for everyone invo
88.
by vsgherzi 7mo ago
Not to beat a dead horse but I see this again and again with dependencies. Each time I get more worried that the same will happen with rust. I understand the fat std library approach won’t work but I really still want a good solution where
89.
by vsgherzi 7mo ago
Absolutely ridiculous law. I pray to God the US does not follow. That being said there is some strange law trickery where passwords and pins are safe but biomentrics aren't. We should just standardize it in the US.
90.
by vsgherzi 7mo ago
my mistake, conflated my stories. The sr71 found a hidden nuclear site not the cuban missle crisis

More ›