rinon

For low-level system security, I'm a fan of https://llsoftsec.github.io/llsoftsecbook/LLSoftSecBook.pdf as an overview for any systems developer, not just compiler devs. It might not be the most approachable, but it's got great info on everything memory corruption.

Because of our historical strength. If we drive people away, that just makes room for other contenders. How is that smart?

If we’d fix the green card caps so that Indian workers could get green cards we wouldn’t see as much abuse. The system is broken, so you’re suggesting break it further? The US benefits from a lot of smart immigrants, we should be making it EASIER, not harder, to attract and retain the best talent from all over the world. The United States is ceding its leadership here and we’re going to pay for that for generations.

It's back up now, sorry about that!

We haven't worked on C++ yet. Templates are the big issue, as a sibling comment speculates.

We didn’t benchmark this project (yet) but previous c2rust translations had approximately equal performance to the original. This is to be expected since the transpiled output is unsafe Rust that is equivalent to the original C code. One caveat is checked va unchecked array indexing, but unless an array indexing operation into a statically sized array is hot _and_ the Rust compiler can’t elide the checks, that’s unlikely to make much of a difference.

I love Blink, it’s perfect for a remote emacs session. I use esc for alt, capture CTRL-space. You may have to rebind some control sequences, I don’t have that handy, but almost everything gets passed through. Only thing I can think of that doesn’t is F key sequences, and that’s probably for lack of trying.

Edit: this is with an external keyboard. YMMV with the on screen keyboard, but I haven’t noticed any issues the few times I’ve done quick edits with it.

I believe they also want to support iOS which requires a BTLE token, not NFC which will work on Android devices.

I'm very disappointed in this change. Having communication centralized in one place is important to me, and this means I cannot centralize on open, federated protocols.

Followup apology from accuser: https://www.2600.com/node/27106

There are often privileges and perks associated with being a patron of a certain creator. These perks aren't pro-rated, thus subscribing late in the month for a day or two might be a viable way to cheat this system. Personally, I don't think this is a huge deal, and, if this is their reasoning, it's a mistake.

Great summary of the math from reddit: https://www.reddit.com/r/patreon/comments/7i2kqd/patreon_wil...

You assume that tuition is actually an "in kind" benefit. Most of that tuition money is not an in kind benefit at all. Rather, it is a way for the university to siphon off overhead from grant money. If you think of graduate students as apprentice workers, which is far closer to the truth than students, then taxing overhead costs is a ridiculous idea. We don't tax business expenses, why would we tax educational institution business expenses?

Why not rent a car when you want to go on trips outside of urban areas? Seems far cheaper if you can actually get away without a care in the city.

We have two of these prints up in our office. I highly recommend them, even if just as decoration.

I don't know that much about the inner workings of Congress, but I'm guessing that it might be because reps who vote against party lines won't get support for their own pet projects later on?

Why was this discussion removed from the front page? Seems like relevant news of interest to a tech audience to me.

This should get labelled 2014. Interesting nonetheless.

Tor devs wrote a short Q&A about this project: https://blog.torproject.org/blog/selfrando-q-and-georg-koppe...

Thank you for writing this. So many want to tiptoe around and ignore this election, like they've always done before, and that may be the worst mistake of all in this situation.

Indeed, I was trying to give well-known examples. Some of the more interesting, not widely-deployed PaX mitigations are more accurate here.

That's called a baseband processor.

But no, in all seriousness, Copperhead (and AOSP itself) are open source. Go audit it for NSA backdoors yourself if you're worried about that.

I'm not affiliated with Copperhead at all, but I am familiar with the sorts of techniques they are using. Exploit mitigations, such as Address Space Layout Randomization, Control-Flow Integrity, Fine-grained Randomization, etc. provide a layer of hardening to make exploitation of a source code vulnerability harder, or even not possible on the protected device. The bug (zero-day) still exists, it's just not as exploitable to do bad stuff.

Hm, I wish my package manager understood pip. I always forget to upgrade pip along with my distro packages.

Worked for me...

Indeed, it's a reference work. I've read through the first volume cover to cover, but that's probably not the best way to use TAOCP. When you're interested in a particular algorithm or topic, go find it and read that section.

If you're interested in modern architecture details, I'd recommend Agner Fog's marvelous reference books (http://www.agner.org/optimize/).

RU does though.

I'm an idiot... Randomly read the website footer and misinterpreted "This web site is copyright © Vadim Markovtsev, it's code is released under CC-BY-SA 3.0 Unported at GitHub."

Sorry.

Probably because politicians seem to think that these systems are perfectly secure.

Hi, I've helped a bit with the development of LLJS. While we haven't worked on it in a while, I'm not sure it's quite dead. More like in maintenance mode right now, although admittedly I don't think it's a priority for anyone right now.