• 1 Post
  • 49 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle

  • Memory safety for one. C is very memory unsafe and that has been the source of a great, great number of software vulnerabilities over the years. Basically, in many C programs it has been possible to force them to execute arbitrary code, and if a program is running with root privileges, an attacker can gain full control over a system by injecting the right input.

    I have very limited knowledge of rust, but from what I remember writing memory unsafe programs is nigh impossible as the code won’t really even compile. Someone else with more knowledge can probably give more detail.


  • I don’t think they are running inefficiently. I do think they have more than enough money to keep themselves going for many years to come. Also, the lack of inclusiveness in the editing is the reason I don’t donate. Nothing like making an article contribution only to have it quickly reverted by some control freak editor from the inner circle. Wikipedia is not actually what it claims to be. It’s slightly more open than a real encyclopedia, but not much.



  • There were signs it was coming, but I didn’t really accept it. When it did happen it was pretty distressing, but I had been planning to leave anyway. It ended up working out because I got to leave with some extra runway. They gave us 60 days notice, during which time we collected paychecks. I didn’t work at all during this time though. Instead I searched for a job. At the end of the 60 days we got about 6 weeks worth of pay, a prorated bonus, and our vacation days. I ended up finding a job that paid 3x as much before my 60 days were up and was able to pocket the severance money rather than live off it.





  • If you watch WWDC, they shared how it works. They have a private cloud that does not persist data on it, only processes it. Also, it’s audited by a third party and there is a cryptographic mechanism that will not allow your request to be accepted unless the server software has been publicly signed by the auditor. At least, this is my best understanding of it from what I remember.

    Also, in the same presentation they announced that you can now lock your Apps and hide them, which will keep its data out of the OS search results. I am fairly certain this also means it’s opted out of ML/AI processing given that any LLM would rely on the same search index.





  • Love it when my coworkers reformat the code style, making it nigh impossible to understand what they actually changed, while greatly inflating their “contribution.”

    It also blows away the git blame, making it hard to know who actually changed that one critical line of business logic 3 years ago that you need to understand before trying to fix some obscure bug.

    I have one coworker who does this constantly and if you just looked at git blame, you’d think he wrote the entire code base himself.