latiera

6 ms·

1.
by latiera 11y ago
Look at my other response in this thread, ROP isn't trivial these days due to ASLR implementations. Almost always one needs information leak bugs. The presence of a JIT makes things trivially abusable for the attacker and is a big secu
2.
by latiera 11y ago
It's not that simple. ROP relies on known or predictable addresses and pretty much all modern OSes have some form of address space layout randomization (which keeps getting better and more sophisticated). With good ASLR, ROP is not pos
3.
by latiera 11y ago
If you want to give back to Pharo in a way that counts, fund improvements to the UI. The font rendering is bad right now and HiDPI screens are not even supported. This makes for a terrible first impression.
4.
by latiera 12y ago
Oh but it DOES mean that Rust has no value, at least regarding security. Once you give them the rope, they WILL use it. Let's see if time will prove me right.
5.
by latiera 12y ago
Unfortunately, this point of view has little merit. Security is all or nothing. You can't have a little bit of this and a little bit of that. Unless the parts of the web browser that can be "influenced" by external attacker (
6.
by latiera 12y ago
Because clojure is garbage? Also, Java/JVM suck ass, why would anyone willingly work with that whole mess?
7.
by latiera 12y ago
An interesting observation would be for the author to start considering why this is true. Why does the "universe" give you what you seek? Why do you get from life exactly what you think you "deserve"? It seems strange, a
8.
by latiera 12y ago
You are a fool.
9.
by latiera 12y ago
You can read this as "mainline Guile Emacs is never gonna happen". Guile is very low quality software (that goes double, hell, triple, for "non free" platforms like OSX and Windows) and Emacs has a reputation for being r
10.
by latiera 12y ago
The "goal" of meditation/yoga is UNION with GOD. Where GOD can be anything of significance to you but to those who have experienced it's "the universe", the Void, the Unborn, the Undying and so on. It's fu
11.
by latiera 12y ago
MOCL is garbage, commercial garbage at that. No thanks.
12.
by latiera 12y ago
It's 2014, Python still has a GIL, Guido thinks asynchronous event loops are hot stuff and you're talking about quantum CPUs?
13.
by latiera 12y ago
Who needs threads when you get drumroll poor excuse of an asynchronous event loop!! In 2014 no less!
14.
by latiera 12y ago
You should be off Python already, no need to wait for Rust. Ocaml, F#, Common Lisp, Scala/Clojure (if JVM) are languages that blow Python out of the water for anything that's not scripting/throw-away code.
15.
by latiera 12y ago
elegant?? It's 2014 and Guido is talking about event loops. beautiful??? Atrocious more like. Python is terribly put together (I'd say designed but it's clear no such process has taken place). It's a language that, like
16.
by latiera 12y ago
I like how he says 'compiled c++ (to javascript) is immune to buffer overflows' yet completely sidesteps the real issue at hand: Every major javascript virtual machine is riddled with security holes. In Firefox case (no sandbox, n
17.
by latiera 12y ago
Emacs eshell. Amazing.
18.
by latiera 12y ago
I know CL, I know Haskell. Really what OP said has nothing to do with refactoring (which is indeed painless in Haskell) but more to do with interactive programming. Haskell is not terrible at interactive programming, but compared to Common
19.
by latiera 12y ago
It's not Python that's slow, but scapy, which is dog slow . In fact, it is so slow that it should come with big WARNINGs that it's only really meant for interactive use. Do the dissection yourself or use something built fo
20.
by latiera 12y ago
I am addressing Guile being in my view one of the worst Scheme implementations out there, StumpWM has nothing to do with this. Being tied to, effectively, a single platform does.
21.
by latiera 12y ago
No, CL doesn't have the same problems as Scheme, not by a long shot. See Quicklisp or cliki.net even. All these libraries (Quicklisp alone has 1000+ libraries last I checked) work perfectly fine on _multiple_ CL implementations. You
22.
by latiera 12y ago
Depends what you mean by really good Scheme implementation. Guile is a GNU project, which means that if you care about (say) Windows ( gasp ), you're shit out of luck. The same used to be true about OSX 2-3 years ago, I haven't bo
23.
by latiera 12y ago
You are mistaken. One could always modify StumpWM at runtime, via SLIME, which is far superior to geiser. Common Lisp is also superior to Scheme (as a language) and SBCL/CCL are miles better than Guile in particular, Guile being one of
24.
by latiera 12y ago
ASD demos do nothing for me, the visuals are mostly nice but the music ... god awful.
25.
by latiera 12y ago
Couldn't agree more. Python is essentially dead as anything more than a scripting language.
26.
by latiera 12y ago
I find no reason whatsoever to move to Python 3. These "features" offer nothing of substance to me and my typical workload with Python. Finally, Unicode handling in Python 3 is a huge mess. No thanks.
27.
by latiera 12y ago
This is great.... NOT. "people could understand the machine model behind C" -> that is why every substantial C program is ridden with undefined behavior, overflows, memory leaks, race conditions.... "C succeeded because it