8,502 karma · joined September 27, 2018
Other victims whose data were encrypted by the same malware (before any updates) could benefit from this disclosure to try to recover their data.
See https://en.wikipedia.org/wiki/Bellingcat#Funding_and_support
But in this case, it's not just the memory safety I'm interested in, it's the data races. If we have multiple threads but can guarantee that any object either has only read-only references, or one mutable references and no readers, we don't have data race issues.
The operation is completely safe, as after the call the original mutable slice is no longer live, but the borrow checker won't let you write such a function yourself unless you tag it as unsafe, so that's what the implementation must do.
The same thing happens in the implementation of Vec: there is low-level code that is unsafe, used to provide safe abstractions.
From the late 70s through about 2005, scaling semiconductor generations was easy. MOSFET scaling followed rules formulated by Dennard, which provided a fairly easy method of scaling semiconductor designs from one generation to the next, keeping power density roughly constant and continually improving performance. The problem is that by around 2005, if you did it that way, your gates were no longer switches, they were dimmers, and leakage power started to dominate, and that meant that chip architectures had to change radically to keep on scaling.
So, we can no longer just scale designs from one generation to the next, we have to come up with completely new approaches. That's much harder.
They've created the back doors, I'm sure that the Russians and the Chinese are now in the systems the DOGE people broke.
But then you've got to figure out and prevent all the security holes that can be introduced by adding file access, networking, etc. That's what killed the Java write-once, run-anywhere promise. Maybe put the whole thing into a container? Oops, looks like the container wasn't replaced after all (though perhaps it could be simplified).
But that was the pre-Trump NSA and FBI. Now the Chinese and the Russians just need to get some DOGE volunteer to give them whatever they want, since Elon now has root on all the government payment systems and is too undisciplined to do things in a secure way.