I wouldn't read too much into it.
Just like how every other student startup is a Microsoft and/or Google "partner" by virtue of some program.
For all we know it's the usual affiliate deal.
8,274 karma · joined August 27, 2020
Just like how every other student startup is a Microsoft and/or Google "partner" by virtue of some program.
For all we know it's the usual affiliate deal.
Vague question, vague answer.
I guess your choices are
1. Educate yourself on the nitty-gritty and make an educated decision
2. Reason from first principles and apply general best-practices
3. Trust your vendors fully unless provided proof of vulnerability
I suggest 1 and 2.
> Surely if an exploit can go as far as to gain access to the browser pw mgr, they can do basically anything userspace, including execute payloads against all the other pw mgrs on the system?
If that is true for you, I really suggest hardening your system.
In the other, your password manager can still be safu even if your browser is bust.
Things are less likely to leak if they are further separated.
Letting your browser manage your passwords will never be as secure as alternatives can be.
https://www.christopherspenn.com/2021/08/simple-is-not-easy/
ZFS still does. If you run VMs off zvols you want to avoid putting swap there. Learned this the hard way.
Hard to imagine a reasonable real-world use-case for vramfs. Still cool.
How, actually? With UNIX sockets it can be a matter of setting file ownership and mode (at worst, a chmod and a chown).
What's the equally simple way to restrict access to a locally listening tcp socket?
This used to be an ideological stance but increasingly recently it's the only pragmatic thing to do from a stance of security and safety. The playing field is increasingly hostile and if someone asks you to install their software on you machine and let it record your face and voice but refuse to show what it actually does, that is a red flag. Reasonable exceptions could include video games (which run on dedicated untrusted devices and IMO the IP aspect makes the closed-source stance more understandable there). On the other hand, this app is inherently sensitive and trusted because of its function. I don't see the reason why it needs to be closed-source.
Malware is commonly distrubuted in all app stores. I reported some obviously pretty bad stuff that is still up a year later on Play Store, for example. Google simply doesnt bother if the case is too messy.
> hmm not sure yet on the open source thing
You could start with just go source-available by sharing the source with your users without going full Open Source, if you want to take the time and think about what license to use.
Why not both?
> An example of intransitive implicit coercions...
Ok? Arbitrary nullable references are obviously not a subtype of booleans no matter what you do. If anything may break by substituting one type for another, those types do not have that subtype relationship, by definition.
EDIT: That was apparently a mistake. Still, not all of the data in the dump is public or useless.
> What if your implicit coercions aren't transitive
Have an example in mind?
It is true regardless. What you are talking about is a language implementation detail that is orthogonal to reasoning about the type system. Depending on your definition (reasonable people disagree and could be contextual), the memory layout is also rarely a concern when modeling type theory.
However, I can't make sense of the idea that "most languages don't have subtypes". Every language I can think of above ASM has at least some. In C, int8_t is a subtype of int16_t, for example.
And the idea that this is new territory... Here they contrast subtypes in C++ to that of "the new language Java".
https://www.cs.princeton.edu/courses/archive/fall98/cs441/ma...
I agree with the comment that OP really should make it explicit what they mean. It presents itself as "what is subtypes" but they unfortunately use the same term for different concepts in the same text, which I guess contributes to the wider confusion in this thread. Inserting a few "Algebraic ..." and making the context explicit in a place or two.
Or put differently: Algebraic subtypes are a subtype of subtypes.
Would that be a total revenue of $2k...? Or did you omit the "monthly" part? Advice will differ depending on this.
Also, what's your purpose of seeking outside investment? Roughly what scale are you aiming for (both for the business itself and this investment round)? What are the things you look for in an investor?
1. Acquire stolen ccs
2. Set up web shop (or Amazon/eBay account) with attractive deals
3. When an order comes in, purchase the ordered item elsewhere using a stolen CC and have it sent to buyer
The clueless buyer will be the one under investigation for cc fraud.
Core auth feature progress is tracked here: https://github.com/bknd-io/bknd/issues/6