This is a fantastic in-depth look at debugging a complex problem, and the fact that the rest of the system remained stable is a testament to the quality of the engineering work that the Oxide team put into this. I'm…
Do be aware, though, that this is just a way to make builds fail fast if you have an older compiler. It doesn't put the compiler in a mode that makes it reject features introduced after that version. If projects want to…
Disclaimer: I'm not an expert in Cilium! Only recently got into reading about it because of Jessie Frazelle's tweet about it. Still planning on deploying it into my small homelab. It's my understanding that Cilium chose…
This depends on the CNI plugin you're using. In particular, Cilium implements the entire firewall in eBPF.
I highly recommend you do a search for Firesheep - the tool that really started the push for HTTPS everywhere. You're right that a malicious network operator would be in a position to request users install root certs,…
> until we embrace screens and render arial and images or even monospaced fonts that are perfectly readable This is part of what I meant when I said "drastically restrict the problem space".
> You can for the most part just convert the LLVM bitcode that the Rust compiler would output to the equivalent C snippet. Sounds like a good argument to resurrect the LLVM C backend. As it stands, the Rust core team…
For one, respected community member pcwalton has argued against compiling to C, citing the difficulty in producing performant, memory-safe output. For another, from personal experience, I can comment that compiling to C…
Indeed, a commenter demonstrates that resolving the issue on Alpine Linux was as simple as adding an `apk add rustc cargo` to their Dockerfile.
That's unfortunate, since an IOMMU is an excellent solution to this kind of problem, especially when one considers all the potential Linux USB stack vulnerabilities that can be exploited if you assume the modem is…
You can use an IOMMU to isolate DMA to a separate security domain. This is how Qubes OS works.
Fellow UMich grad here. Shapiro library (formal name for UgLi) was always a great place to study because you had plenty of noise isolation from other people, especially the upper floors. On North Campus, CS majors had…
I'm excited about this project too, but how does it "reduce the influence that Google and Facebook have on the Web"? It seems pretty orthogonal if you ask me.
> On the flipside, the kernel developers are a group of people with a detailed understanding of what makes C unsafe, and how to watch out for it in code reviews. I'm not saying that every bug gets caught in code review,…
All of these sources show memory safety problems getting worse or staying equally prevalent, which directly contradicts the parent's claim that memory safety is "much less of an issue than it used to be".
That can be made a runtime concern - if you use Kata Containers as a runtime for Docker, it'll use a VM instead of kernel namespaces.
Algebraic data types!
This is an excellent analogy and I can't understand why it's being downvoted. Software is only as useful as its surroundings find it useful.
The UMich network isn't "improperly configured". NAT-less networks have been around since the beginning of the Internet, and IPv6 networks don't use NAT (unless they're accessing IPv4-only targets, but that's CGNAT). I…
I'm no Linus Torvalds fan, but his rant (and follow-up) on PAE explains why this is actually a terrible idea: 1) https://www.realworldtech.com/forum/?threadid=76912&curposti... 2)…
GeckoView doesn't support addons yet. This is pending discussion, but it looks like the goal is to focus on mobile optimization first. As a tester of Firefox Preview: WebRender has been a godsend for mobile browsing --…
I've got a pc-engines apu2c4. It's a great little x86_64 PC with 3 Intel NICs. I used to use it as my primary router, and today I'm using it as a development platform for a custom router OS based on Fedora. There's also…
Meson, btw.
Contrary to popular HN memes, most Rust developers aren't zealots.
My guess is the raw identifiers syntax introduced in Rust 2018 (`r#` prefix) will handle this.
This is a fantastic in-depth look at debugging a complex problem, and the fact that the rest of the system remained stable is a testament to the quality of the engineering work that the Oxide team put into this. I'm…
Do be aware, though, that this is just a way to make builds fail fast if you have an older compiler. It doesn't put the compiler in a mode that makes it reject features introduced after that version. If projects want to…
Disclaimer: I'm not an expert in Cilium! Only recently got into reading about it because of Jessie Frazelle's tweet about it. Still planning on deploying it into my small homelab. It's my understanding that Cilium chose…
This depends on the CNI plugin you're using. In particular, Cilium implements the entire firewall in eBPF.
I highly recommend you do a search for Firesheep - the tool that really started the push for HTTPS everywhere. You're right that a malicious network operator would be in a position to request users install root certs,…
> until we embrace screens and render arial and images or even monospaced fonts that are perfectly readable This is part of what I meant when I said "drastically restrict the problem space".
> You can for the most part just convert the LLVM bitcode that the Rust compiler would output to the equivalent C snippet. Sounds like a good argument to resurrect the LLVM C backend. As it stands, the Rust core team…
For one, respected community member pcwalton has argued against compiling to C, citing the difficulty in producing performant, memory-safe output. For another, from personal experience, I can comment that compiling to C…
Indeed, a commenter demonstrates that resolving the issue on Alpine Linux was as simple as adding an `apk add rustc cargo` to their Dockerfile.
That's unfortunate, since an IOMMU is an excellent solution to this kind of problem, especially when one considers all the potential Linux USB stack vulnerabilities that can be exploited if you assume the modem is…
You can use an IOMMU to isolate DMA to a separate security domain. This is how Qubes OS works.
Fellow UMich grad here. Shapiro library (formal name for UgLi) was always a great place to study because you had plenty of noise isolation from other people, especially the upper floors. On North Campus, CS majors had…
I'm excited about this project too, but how does it "reduce the influence that Google and Facebook have on the Web"? It seems pretty orthogonal if you ask me.
> On the flipside, the kernel developers are a group of people with a detailed understanding of what makes C unsafe, and how to watch out for it in code reviews. I'm not saying that every bug gets caught in code review,…
All of these sources show memory safety problems getting worse or staying equally prevalent, which directly contradicts the parent's claim that memory safety is "much less of an issue than it used to be".
That can be made a runtime concern - if you use Kata Containers as a runtime for Docker, it'll use a VM instead of kernel namespaces.
Algebraic data types!
This is an excellent analogy and I can't understand why it's being downvoted. Software is only as useful as its surroundings find it useful.
The UMich network isn't "improperly configured". NAT-less networks have been around since the beginning of the Internet, and IPv6 networks don't use NAT (unless they're accessing IPv4-only targets, but that's CGNAT). I…
I'm no Linus Torvalds fan, but his rant (and follow-up) on PAE explains why this is actually a terrible idea: 1) https://www.realworldtech.com/forum/?threadid=76912&curposti... 2)…
GeckoView doesn't support addons yet. This is pending discussion, but it looks like the goal is to focus on mobile optimization first. As a tester of Firefox Preview: WebRender has been a godsend for mobile browsing --…
I've got a pc-engines apu2c4. It's a great little x86_64 PC with 3 Intel NICs. I used to use it as my primary router, and today I'm using it as a development platform for a custom router OS based on Fedora. There's also…
Meson, btw.
Contrary to popular HN memes, most Rust developers aren't zealots.
My guess is the raw identifiers syntax introduced in Rust 2018 (`r#` prefix) will handle this.