If your goal is sprinting 100m, using the dog seems like a better idea then, no matter how good the researchers are in other areas.
It does provide a pretty good COM interface.
It's not really important whether the text is visible, you can just put the instructions in the middle of a long document, or use a low contrast color, or a small font size, or any other of the myriad of ways to make…
> By the way, if you don't want a culture war, you gotta stop warring. I find it hard to understand how could steveklabnik's comment be seen as warring.
I haven't seen data that would confirm that the Nim ARC/ORC approach is faster than manual memory management (C/Rust/Zig/...) on programs with non-trivial lifetimes (for trivial lifetimes, Nim elides RC). I'd also be…
From HN guidelines: > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
I agree that culture makes a difference, but the largest aspect of it is that the average Linux user is fairly technically proficient and would be fairly unlikely to install malware even on Windows. As for software…
I expect that process to be mostly automated, I wouldn't expect the MS folks at the testing lab to do much (if any) manual testing, especially for a new version of a previously approved driver. I'm not surprised that…
Yes, and it's still fairly easy.
Agree with all of those points and there are some partial solutions (IOMMU, userspace drivers, virtualization,...), but we're still quite far from being able to safely connect untrusted hardware and load its driver…
You know why desktop Linux doesn't have much malware? Because ~no one uses it. That's it. Once you get users, you get malware. The rest of your comment is just as ignorant.
> Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem. Not really. AutoRun ran whatever was on the USB drive, with no oversight. This installs a…
How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)
How do you expect Mozilla to make enough money from just Firefox to survive if Google ever decides to stop paying them for being the default search engine?
No, don't. There are many reasons why a user may want to move the temp dir somewhere.
It could very well be an actual reachable buffer overflow, but with KASLR, canaries, CET and other security measures, it's hard to exploit it in a way that doesn't immediately crash the system.
Personally, I just move SSH to a random high port on each of my public servers. Works like magic, no more log noise.
https://simonwillison.net/ is a pretty loud and moderate voice in the community. Also active on Lobste.rs: https://lobste.rs/~simonw But agree that there's an irrational level of tribalism on both sides.
I don't think it's about trying to handwave away the achievement. The problem is that many AI proponents, and especially companies producing the LLM tools constantly overstate the wins while downplaying the issues, and…
Lobste.rs mostly are what HN used to be, with less focus on startup culture and more focus on hacking.
Microsoft tried with UWP. Developers mostly refused, for various reasons.
> Microsoft doesn't have a very good track record with security or privacy. That's a very unfair assessment. In many areas, Microsoft services and Windows are better protected than most alternatives (e.g., disk…
You can just turn off Defender using a group policy.
True for the popular subreddits, but there are occasional niche communities that imo managed to keep the forum vibe (e.g., r/progmetal, r/cpp).
That's hard to implement, because typically, constructs like this will be the result of various previous passes (macro expansion, inlining, dead code elimination,...), typically it's not written by the user directly.
If your goal is sprinting 100m, using the dog seems like a better idea then, no matter how good the researchers are in other areas.
It does provide a pretty good COM interface.
It's not really important whether the text is visible, you can just put the instructions in the middle of a long document, or use a low contrast color, or a small font size, or any other of the myriad of ways to make…
> By the way, if you don't want a culture war, you gotta stop warring. I find it hard to understand how could steveklabnik's comment be seen as warring.
I haven't seen data that would confirm that the Nim ARC/ORC approach is faster than manual memory management (C/Rust/Zig/...) on programs with non-trivial lifetimes (for trivial lifetimes, Nim elides RC). I'd also be…
From HN guidelines: > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
I agree that culture makes a difference, but the largest aspect of it is that the average Linux user is fairly technically proficient and would be fairly unlikely to install malware even on Windows. As for software…
I expect that process to be mostly automated, I wouldn't expect the MS folks at the testing lab to do much (if any) manual testing, especially for a new version of a previously approved driver. I'm not surprised that…
Yes, and it's still fairly easy.
Agree with all of those points and there are some partial solutions (IOMMU, userspace drivers, virtualization,...), but we're still quite far from being able to safely connect untrusted hardware and load its driver…
You know why desktop Linux doesn't have much malware? Because ~no one uses it. That's it. Once you get users, you get malware. The rest of your comment is just as ignorant.
> Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem. Not really. AutoRun ran whatever was on the USB drive, with no oversight. This installs a…
How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)
How do you expect Mozilla to make enough money from just Firefox to survive if Google ever decides to stop paying them for being the default search engine?
No, don't. There are many reasons why a user may want to move the temp dir somewhere.
It could very well be an actual reachable buffer overflow, but with KASLR, canaries, CET and other security measures, it's hard to exploit it in a way that doesn't immediately crash the system.
Personally, I just move SSH to a random high port on each of my public servers. Works like magic, no more log noise.
https://simonwillison.net/ is a pretty loud and moderate voice in the community. Also active on Lobste.rs: https://lobste.rs/~simonw But agree that there's an irrational level of tribalism on both sides.
I don't think it's about trying to handwave away the achievement. The problem is that many AI proponents, and especially companies producing the LLM tools constantly overstate the wins while downplaying the issues, and…
Lobste.rs mostly are what HN used to be, with less focus on startup culture and more focus on hacking.
Microsoft tried with UWP. Developers mostly refused, for various reasons.
> Microsoft doesn't have a very good track record with security or privacy. That's a very unfair assessment. In many areas, Microsoft services and Windows are better protected than most alternatives (e.g., disk…
You can just turn off Defender using a group policy.
True for the popular subreddits, but there are occasional niche communities that imo managed to keep the forum vibe (e.g., r/progmetal, r/cpp).
That's hard to implement, because typically, constructs like this will be the result of various previous passes (macro expansion, inlining, dead code elimination,...), typically it's not written by the user directly.