uep

Maybe I'm just way overestimating how complex RAR archives are (I admit, I have not looked into this), but I think you're out of your mind if you think that someone could write a parser to analyze RAR archives in a day. That it would be better tested, debugged, and more secure than a tool that has probably seen more widespread use than any single AV.

Have you followed the news at all? This is not even up for debate.

The DNC was hacked and the emails released to hurt Hillary Clinton and to aid the Trump campaign. It is not yet known if the Trump campaign was involved, but it is a fact that the emails were released to aid his campaign. Here are some links:

Guccifer 2.0 is the hacker involved in the DNC emails.

https://www.cnn.com/2016/09/13/politics/guccifer-2-0-democra...

Guccifer 2.0 linked to Russian government.

https://arstechnica.com/tech-policy/2018/03/dnc-lone-hacker-...

CIA director calls WikiLeaks Russia-aided "non-state hostile intelligence service"

https://www.cbsnews.com/news/cia-director-calls-wikileaks-a-...

Wikileaks telling Trump campaign they should give them tax returns so that they don't look so biased for Russia

https://www.theatlantic.com/politics/archive/2017/11/the-sec...

DNC emails released one hour after Access Hollywood tapes

https://www.cnn.com/2017/10/07/politics/one-year-access-holl...

Russia's hate of Clinton is due to the Magnitsky Act, which targets oligarchs in Russia.

https://www.vice.com/en_us/article/8qbbdx/why-putin-hates-cl...

Of course, ironically, the hack and leak of the DNC emails was part of the effort to "rig" the election for Trump.

Do you genuinely believed that a baby was killed to harvest stem cells? If the baby was already dead, are you morally opposed to using an unsaveable baby's stem cells?

Andrei Alexandrescu has a fun talk about implementing scope_exit using a new C++17 function: std::uncaught_exceptions (which is a tweak to std::uncaught_exception). Fundamentally, it doesn't really solve the destructor throwing exceptions issue though.

https://www.youtube.com/watch?v=WjTrfoiB0MQ

That's ironic. To me, the implication of browsing LinkedIn at work is that you're looking for another job. Whereas if you're browsing Facebook or Instagram you're just wasting time.

Or how about a fuser filesystem on Linux to do the same? That sounds like an interesting idea. Just don't make the mistake of accidentally typing some obscenely large binary like firefox, chrome, or clang...

I think it would need to be integrated into the package management system pretty tightly (or have one of its own) to get all of the shared library dependencies.

Wasn't this the idea behind Microsoft's Singularity project?

https://en.wikipedia.org/wiki/Singularity_%28operating_syste...

Russian propaganda offices have been documented to be doing this for years as well. We know they've "weaponized" Facebook per the recent US presidential election.

http://www.nytimes.com/2015/06/07/magazine/the-agency.html

https://www.theguardian.com/world/2016/mar/05/europe-vladimi...

http://www.theatlantic.com/international/archive/2013/10/rus...

http://www.forbes.com/sites/paulroderickgregory/2014/05/11/i...

Regarding your comment about animation being expensive, I feel that at least some of the audio tapes in the game were probably meant to be cutscenes. Despite the criticisms people lay on this game, it is probably my favorite game of this decade.

Well, this is very troubling; it's installed in my browser. Not only did I not get prompted, I never volunteered for being in any studies. I'm running Firefox on Linux, but I installed it from Mozilla, and not the package manager.

It doesn't exactly apply here since the author doesn't seem to be allocating resources dynamically, but another thing that's "newer" and less widely used are the devm_ family of functions.

Nowadays, lots of code could be using devm_kmalloc, devm_ioremap, etc which will release the resources automatically when the driver detaches from the device.

Surely both radio and TV have been used for the same purpose. I think the Internet, and in particular Facebook, is very different for at least a couple of big reasons.

1. Much more precise user targeting

2. Direct feedback on effectiveness (did the user click-through or even just linger looking at the content?)

TV and radio seem like very crude tools in comparison.

Your older Phoronix link misses out on the large performance increases that were made this year once OpenGL 4.5 support was completed.

https://www.phoronix.com/scan.php?page=article&item=radeonsi...

The AMD open source driver is just about on-par with their closed source Windows driver. One of the benefits of Open Source is also being utilized now. Game companies like Feral Interactive, who develop many Linux ports, have been improving the driver's performance for their games.

While it's certainly possible there's some bias going on there, I can confirm that this guy really worked at Google. He contacted me a few months ago about a position, but I decided not to pursue a role there.

Maybe this wouldn't have been published otherwise, but I definitely believe it to be genuine.

Or the same Amazon for that matter.

I suspect it has to do with the kind of things I order, and where I'm located, but Amazon deliveries have always arrived within two days for me (sometimes one day). Exceptions being when I order stuff that is not eligible for prime, but I know that at the time of ordering. Their customer service has also been excellent in my experience.

That said, I haven't had a terrible experience with Google yet, but I've barely used their support. I'll find out soon, because my Google-purchased phone started the infamous bootloop the other day.

Tell us how you really feel about ESR [1].

I don't necessarily disagree with your thesis [2], but this argument seems strange:

>Neither "enough eyeballs" nor "the right eyeballs" are a GIVEN, even for open source software.

and this argument:

> "Not enough eyeballs" (or "ZERO eyeballs" as he loves to claim) are NOT a GIVEN for proprietary software,

Are you an auditor of proprietary software or something? It almost sounds like you're arguing for many-eyes in theory, but you're saying that it's just as likely to benefit proprietary software? That is pretty bonkers to me. Even the 2-4 reviewers thing seems ridiculous, because open source software might be studied years later. In fact, companies trying to sell software analysis tools often fix bugs in open source software to demo their tools; something that they cannot do with proprietary software.

> Although detection of even deliberately inserted flaws can be attributed to Raymond's claim, the persistence of the Heartbleed security bug in a critical piece of code for two years has been considered as a refutation of Raymond's dictum.

I find it amusing that there seem to be this contingent of proprietary code proponents who insist that Heartbleed was the singular proof against "many-eyes". Since this particular security issue is the one thing that critics always point to, it almost seems like this is the exception that proves the rule[3]. Discussion also tends to leave out that it was discovered and patched by people other than the core developers because it was open source.

Closed source software security bugs don't seem to get pithy names because they're so common. If we're cherry-picking cases, how about Windows XP? Beloved software created by arguably the biggest, most advanced proprietary software developers at the time. There was a period of time when you could not turn a machine on for an hour without it being compromised. Or serious bugs that are trivially exploitable and are known about and not fixed for many years [4].

1. I think reasonable people would disagree with ESR about various opinions he has expressed. You really sound like you have a bone to pick though.

2. There is just as much diversity in open source software as there is in proprietary. I do suspect that truly bad code doesn't get used as much in the open source world as it does in the proprietary world though.

3. All software has bugs, DJB creations excepted. It seems like critics are saying "Ha! See! Open source has security bugs too!" No shit. Of course, in a black and white world, this could be considered refutation of ESR.

4. Not really an exploit, but this denial of service is one of my favorites because of how trivial it is and how badly it crushes old versions of Windows:

http://www.cvedetails.com/cve/CVE-2010-4669/

https://www.youtube.com/watch?v=00yjWB6gGy8

Edit: formatting.

I've noticed this as well. It seems outright bizarre that many benchmarks have been leaving out the 1700, when anecdotally, it seems to be the Ryzen that people are buying. It also seems to be the price/performance/wattage sweet spot for Ryzen, since it has low wattage, and also comes bundled with a cooler.

I have been a long-time Emacs user and I finally just started learning org-mode. I wish I had started earlier. Previously, I had used Zim to do my note-taking, but org-mode is just so much better in every way.

I have a feeling it's going to be my gateway into more heavy LaTeX usage for all manner of documents. The ability to evaluate code during document generation is a big deal to me.

I've seen the same green flashes of transformers blowing during serious hurricanes. Hello Florida, 2004, where I had the pleasure of seeing this during 3 different hurricanes. There were no tectonic plates shifting. The clouds were illuminated; it looked like flashes of green lightning from my front row seats. Though it's not as though I saw a green lightning arc.

Where I was, power was generally restored within 24 hours. I don't believe this would be possible if every substation were blowing. I believe people refer to the transformers on the telephone poles failing.

I listened to that episode, and sort of regret it. I've heard these arguments, and they still aren't convincing. Have you read the article on their spaghetti code?

To be clear, I believe that most cases of unintended acceleration are caused by pedal confusion/floormats. Just because that's true of most accidents, that does not mean it's true of all of them.

Maybe it's because I work in the embedded space, but I've seen code written as indicated and terrible code like that is not reliable. It might work 99.999% of the time, but given 100,000 units, and a problem might occur every couple weeks. There is nothing magical about automotive software.

Oh, I know this! 36 seconds. I happen to have seen this on Friday.

https://twitter.com/phoronix/status/900863945296236544

> If you don't like that, you're going to hate the physical realm, where anyone can make any claim and you're left with nothing but your wits to discern the truth

So you're saying that we should let these organizations lie as much as they want, because people lie in your day-to-day life? The people you meet in your day-to-day life and lie to your face are much more limited in the number of people they can influence with lies.

Why shouldn't we make enormously more powerful institutions more accountable for lies?

Thanks for this!

I happen to have a Vive and have been wanting to get my game engine outputting to it. I am primarily focused on Linux.

I agree with you on the creators' rights thing.

It seems unwise of the game maker to purchase a music license that expires. Though, I suspect it was a calculated risk, and that they believed potential sales this late after release weren't worth paying more for. Alan Wake was released seven years ago.

At least from the outside, GCC asan seems comparable to clang's right now. I haven't done back-to-back checking to see if clang finds things it doesn't. I haven't really used the undefined and thread sanitizers though.

> That would never happen. A network tap would be able to detect a malicious update even if the main PC was implanted very well, and a Microsoft-signed malicious update would be worldwide news.

While I don't know of that specific scenario, Stuxnet used a hardware vendor's key to install infected drivers[1]. There was also a Chinese registrar that allowed a customer to man-in-the-middle Google[2]. Depending on how Windows organizes their driver updates, I could see an adversary doing a man-in-the-middle between Microsoft and their target, and pushing a bad driver update.

1. https://www.welivesecurity.com/2010/07/22/why-steal-digital-... 2. https://www.techdirt.com/articles/20140909/03424628458/china...

AMD GPUs are currently nearly impossible to buy because of Ethereum mining. They are extremely scarce and it has been driving prices up.

I drink coffee regularly, but I don't think I could even get to 15 cups a day without serious issues.

Dave Grohl, of the Foo Fighters, ended up going to the hospital because of drinking too much coffee/caffeine.

http://www.nme.com/news/music/them-crooked-vultures-14-12945...

https://youtu.be/fhdCslFcKFU?t=111

If someone were to pay up and receive the attacker's private key, what's to stop them from distributing it to others?