OneLessThing

6 ms·

1.
by OneLessThing 2mo ago
I see it as the same problem of when to accept button input. In my view having the button give "ample warning a material change is about to happen" is making the button do something more than "one job." But maybe you&#x2
2.
by OneLessThing 2mo ago
They are both about when it is best to accept user input. In the specific example with rotating images nothing covers or moves the buttons so it is not relevant. My impression of the article was that the buttons one job was to accept input
3.
by OneLessThing 2mo ago
It's not so simple. There are times where you intend to tap one thing and something else appears underneath your finger instantaneously. So sometimes while rendering a layout you want to stop accepting input.
4.
by OneLessThing 10mo ago
Yeah :/ that’s how I read it too. It would make more sense if they motivated the reason to find libc because like you said you could likely just use the non aslr gadgets exclusively. I think the author tried to use non aslr gadgets but
5.
by OneLessThing 10mo ago
Good job. It’s early 2000s level stuff but it’s still exciting when it’s happening on your desk. There are lots of options in this scenario outside of bypassing ASLR so I do find it odd to be the main feature of the title, but a fun read no
6.
by OneLessThing 11mo ago
This is exactly my problem with LLM C code, lack of confidence. On the other hand, when my projects get big enough to the point where I cannot keep the code base generally loaded into my brains cache they eventually get to the point where m
7.
by OneLessThing 11mo ago
This is why I love C. You can build these guard rails at exactly the right level for you. You can build them all the way up to CPython and do garbage collection and constant bounds checking. Or keep them at just raw pointer math. And everyw
8.
by OneLessThing 11mo ago
It's funny the author says this was 90% written without AI, and that AI was mostly used for the json code. I think they're just new to C. Trust me I love C. Probably over 90% of my lifetime code has been written in C. But python n
9.
by OneLessThing 11mo ago
It's interesting to hear these takes. I've never had problems catching unsigned wrap bugs with plain old memory sanitizers, though I must admit to not having a lot of experience with ubsan in particular. Maybe I should use it more
10.
by OneLessThing 11mo ago
I agree that it reads really well which is why I was also surprised the quality is not high when I looked deeper. The author claims to have only used AI for the json code, so your conclusion may be off, it could just be a novice doing novic
11.
by OneLessThing 11mo ago
Heres a link to the the problem I found: https://alew.is/lava.html
12.
Love C, hate C: Web framework memory problems(alew.is)
165 points by OneLessThing 11mo ago|216 comments
13.
by OneLessThing 11mo ago
There is a heap overflow in the http parser. Should I spoil it or let people find it on their own?
14.
by OneLessThing 2y ago
Okay I did the simulation. I don't think this strategy actually works, but I initially thought it might like you did. One such nash equillibrium my sim found was having the Ballmer player mix between picking either end of the range (no
15.
by OneLessThing 3y ago
Yes, this has been a trend for a little while now. For example this gist[1] gives linux boot parameters to make linux significantly faster and all it does is basically turn off all default security mitigations. I would make the distinction
16.
by OneLessThing 3y ago
I am this person. I work as a researcher finding 0-days. From the employee perspective: Wages are equal. Big Tech work is less interesting (build big bug finding machines that find have high quantity of bugs) and report the bugs that sit in
17.
Handwritten Blog with Links in SVG – Demo(blog.alew.is)
3 points by OneLessThing 4y ago|1 comments
18.
by OneLessThing 4y ago
I love thinking with a pencil/pen compared to a keyboard since there seem to be so many more expressive possibilities: Size, Position, Drawings, Arrows, etc. Not to mention research suggesting it's better for memory. This is a dem
19.
by OneLessThing 4y ago
I experimented with this approach on my blog[1]. I had an image of the handwritten blog post and used a feature in Inkscape to get SVG and make clickable text. I decided to place a little plain text in there to help Google search crawlers k
20.
by OneLessThing 4y ago
If we improve our programming languages and practices to make code bases more easily understood we will simply increase the scope of what the projects attempt to solve, not reduce their complexity. While this is a good for software it still
21.
by OneLessThing 4y ago
Well I think there are laws that vary across counties and cities and that’s an interesting idea to apply abortion to. Having different laws for different individual people seems like a really bad idea though.
22.
by OneLessThing 4y ago
If you read the resulting articles you'll find a few of them suggest that all the deaths were staged or committed by Ukrainians. Headlines like "The truth is out there..." or "Global lies..." are examples. There sti
23.
by OneLessThing 4y ago
I had the same experience when my brain decided that I get the point of the sentence and where it was going. Perhaps if there was actual content in the sentence this wouldn’t have happened.
24.
by OneLessThing 4y ago
Well we’ve kind of already started exploring that option with unikernels. Compile each app as its own complete software stack. https://en.m.wikipedia.org/wiki/Unikernel
25.
by OneLessThing 4y ago
If you aren't already reading it, may I suggest you checking out Scott Robertson's "How To Draw: Drawing And Sketching Objects And Environments From Your Imagination"
26.
by OneLessThing 4y ago
That’s exactly what I expect in about 3-5 years. I particularly have my eye on BitTorrent modifications like webtorrent which may get the viewing experience even closer to a paid streaming service.
27.
by OneLessThing 5y ago
Did this line get removed from the blog post?
28.
by OneLessThing 5y ago
I looked into it[1], their net profit margins were 32% last quarter. 36% gross margins on hardware products (iPhone, Mac, etc) and 70% gross margins on services (AppleCare, Cloud Services, etc.). However services only comprise 19% of their
29.
by OneLessThing 6y ago
I absolutely agree that asm should be taught for computer fundamentals but I really LOL'd at assembly teaching how CPU works without abstraction. There is tons of abstraction below assembly -- see Microcode. It's this mistake in t
30.
by OneLessThing 8y ago
amd64 and arm64 have no default heap configuration, they don’t even know what the heap is. Same is true for their 32 bit equivalents. If he said Linux based OS’s or Windows have non executable heaps then I’d have kept watching because yeah

More ›