• 0 Posts
  • 4 Comments
Joined 1 year ago
cake
Cake day: June 22nd, 2023

help-circle

  • They are amazing but at the end of the day they are still humans and they can make mistakes. In the YouTube video referenced one of the C devs is heavily against rust.

    Decided to go look for CVEs from code the guy manages (Ted Ts’o) I found these

    CVE-2024-42304 — crash from undocumented function parameter invariants

    CVE-2024-40955 — out of bounds read

    CVE-2024-0775 — use-after-free

    CVE-2023-2513 — use-after-free

    CVE-2023-1252 — use-after-free

    CVE-2022-1184 — use-after-free

    CVE-2020-14314 — out of bounds read

    CVE-2019-19447 — use-after-free

    CVE-2018-10879 — use-after-free

    CVE-2018-10878 — out of bounds write

    CVE-2018-10881 — out of bounds read

    CVE-2015-8324 — null pointer dereference

    CVE-2014-8086 — race condition

    CVE-2011-2493 — call function pointer in uninitialized struct

    CVE-2009-0748 — null pointer dereference

    Do you see a pattern in the type of error here? It’s pretty much entirely memory related and right in the wheelhouse of something rust would just outright not allow short of just slapping everything into unsafe blocks.

    The Old Guard is not perfect, and they are acting as a barrier to new talent coming in. Sometimes change is good and I’m heavily in the camp that rust one of those times. Linus seems to agree as he allowed the code into the kernel which he would never do lightly or just because it’s fomo


  • Gonna have to disagree. Telegram is the ONLY chat app with ACTUALLY NATIVE code clients on desktop and mobile. Its the only one that isn’t website in a box trash that’s slow heavy and buggy. I use discord mostly because it’s where everyone is but i fucking hate everything about it and wish people would use telegram.

    If you think other chat apps don’t read/process metadata from your dms and such your an idiot. Nothing is safe short of self hosted matrix with full E2E encryption or similar and ain’t nobody doing that.


  • Yeah I don’t even understand the point. The vast majority of people don’t even need a client side firewall. The only time you need to worry about a client side of firewall is if you’re on a laptop that you actually take out of your house ever or on a university or otherwise shared network. At home it’s completely meaningless and a waste of CPU Cycles.

    There are significantly better ways to address security, like how to enable a sandbox like firejail or bubblewrap or enable things like apparmor, firewall is probably one of the most inconsequential parts of security these days because it’s all handled by the local router