codedokode

7 ms·

331.
by codedokode 4mo ago
Macros can secretly add "unsafe" blocks into the code?
332.
by codedokode 4mo ago
And Rust omits overflow check under the same excuse, although overflow was a reason that allowed multiple Linux kernel vulnerabilities.
333.
by codedokode 4mo ago
I looked at the Raptor Lake errata [1] and it looks pretty scary. What if someones builds an exploit on these errors? This is why CPU designers should aim for simplicity. This is why RISC-V vector extension, which requires complicated logic
334.
by codedokode 4mo ago
Note that VS Code is built on Electron and it is a pain to sandbox because Electron has (had?) SUID sandbox helper, and you cannot run SUID binaries in sandbox easily. Sandboxing on Linux is extremely difficult task.
335.
by codedokode 4mo ago
Namespaces look dangerous to me because they break lot of assumptions software was built on before. For example, sudo relies on /etc/sudoers being accessible only to root. But with unprivileged containers one can easily create a f
336.
by codedokode 4mo ago
If you are using NPM for business, you should be paying for a repository which was checked by antivirus company and not rely on free repository supported by unpaid volunteers.
337.
by codedokode 4mo ago
It is ridiculous that countries like Australia (a party to a convention) have a say in whether Turkey should or should not pass ships through the strait. This looks like a legacy of colonization era. This convention should be repelled, and
338.
by codedokode 4mo ago
I think US blocked international waters around Cuba, without any legal basis (although there is no such thing as international law anyway) at the time of Cuban crisis. And now US seems to block international waters near Iran threatening to
339.
by codedokode 4mo ago
I think US established a naval blockage against Cuba and other countries multiple times in history, blocking passage of ships in international waters.
340.
by codedokode 4mo ago
Anyone can buy a StarLink terminal though. Also, you can use a friend's spy satellite if you don't have your own.
341.
by codedokode 4mo ago
Modern Shaheds can be controlled through satellite links like StarLink, with high quality video. Also, targeting a large pile of metal in the sea should not be difficult with something like a radar.
342.
by codedokode 4mo ago
That's why you should be downloading from F-Droid anonymously.
343.
by codedokode 4mo ago
I think it is 3 extra instructions on RISC-V if you add signed numbers. So 1 addition (the most popular operation) turns into 4 instructions. What are those people thinking? I generally like RISC-V but this part in my opinion, is wrong. The
344.
by codedokode 4mo ago
> is a choice you can make when compiling software That is not a solution because it means the code can behave differently, and expose vulnerability if wrong compilation settings are chosen. The functions like "wrapping_add" h
345.
by codedokode 4mo ago
I read about Pixel 9 Dolby Decoder bug, and it is based on integer overflow. It was a mistake to allow "+" operator to overflow, and this must be fixed in new languages like Rust, but it is not.
346.
by codedokode 4mo ago
It contains comparisons: https://huggingface.co/deepseek-ai/DeepSeek-V4-Flash
347.
by codedokode 4mo ago
I thought DeepSeek was closed-weights and proprietary? I wonder how it compares against Western open-weight models. The hugging face page contains the comparison only with proprietary models for some reason.
348.
by codedokode 4mo ago
I think "rewrite" is rarely used nowadays? Isn't it something from old days of PHP and Apache?
349.
by codedokode 4mo ago
They do not have SMS OTP confirmation for bank card purchases? It is much more difficult to deny anything when there is a record of delivered SMS message along with phone identifier and precise location.
350.
by codedokode 4mo ago
In my country you usually need to confirm payments with SMS OTP, except for trusted merchants (but they take the risk of fraud by opting out from confirmation). So simply stealing a bank card doesn't get you far. And pretending that
351.
by codedokode 4mo ago
> Adult content purchases have another problem where purchasers often deny having made the purchase when their significant other finds it on the credit card statement. Shaggy's "It wasn't me" defense. Ridiculous. Peop
352.
by codedokode 4mo ago
Well that is fair point, but cannot they just increase the commission to cover them? Also I think it is weird that when someone steals a bank card, they use it to buy adult games instead of buying an iPhone or MacBook and shipping it to the
353.
by codedokode 4mo ago
Why payment processors do it? Why people in America do not want to earn more money from commissions? Strong church lobby? Legal risks? I think its mostly religious groups who who are against adult content and sex, or there are other groups?
354.
by codedokode 4mo ago
This seems to have similar or less features than bubblewrap, but requires Docker which loads huge images and wastes disk space. No Wayland, DBus, Pipewire, proc, sys filtering. Furthermore, Docker docs explicitly says that it cannot be use
355.
by codedokode 4mo ago
I think that you can execute JIT code using an interpreter?
356.
by codedokode 4mo ago
I was always curious, how do translators handle indirect jumps? When analyzing a binary we can discover only segments of code connected with direct jumps, where the destination address is known. So it means that whenever indirect jump happe
357.
by codedokode 4mo ago
I think this is not an application responsibility. Do you also check which Wayland extensions the system has, and install your own if some are missing?
358.
by codedokode 4mo ago
Bubblewrap doesn't help with protecting DBus bus (and you can do a lot with unrestricted access to DBus), accessing the GPU, Wayland and audio daemon. It cannot protect /proc and /sys filesystems. So it works only for simples
359.
by codedokode 4mo ago
All of this happens because Linux doesn't have sandboxing built-in, and sandboxes on Linux are extremely difficult to build (if you want to have graphics and GPU access, sound, file access from sandbox and prevent access to hardware id
360.
by codedokode 4mo ago
The idea that every application should ship their own glyphs because some proprietary systems do not have normal fonts, is not great. Fix the terminal instead. Also, if you want advanced GUI with icons, maybe you should just write a GUI app

More ›