I feel like node’s async model makes it really easy to cause a bug like this, and really difficult to track it down.
It was left to the OS to catch the leak, because the program was written in such a way that it was able to run a gazillion of these tasks concurrently.
http://freenginx.org/pipermail/nginx/2024-February/000007.html
The most recent “security advisory” was released despite the fact that the particular bug in the experimental HTTP/3 code is expected to be fixed as a normal bug as per the existing security policy, and all the developers, including me, agree on this.
And, while the particular action isn’t exactly very bad, the approach in general is quite problematic.
I read something about this the other day, but I’m having trouble wrapping my head around it.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24989 https://my.f5.com/manage/s/article/K000138444 https://mailman.nginx.org/pipermail/nginx-announce/2024/NW6MNW34VZ6HDIHH5YFBIJYZJN7FGNAV.html
This seems to have the best discussion I’ve found:
I think in theory it’s great. Email already has solutions for:
etc
Nix does something like this with the protocol specifier: e.g. git+https://...
I’m not sure what name means here exactly, but it might make sense to treat that separately, like git remotes:
tool add [name] git+https://foo
The whole thing is built around pulling binary packages from servers, and there’s no consistent way of building those things from source.
It’s extremely difficult to package anything non-trivial without referencing those binary blobs.
They had to build this whole custom thing (https://github.com/dotnet/dotnet) just to make the SDK itself buildable from source, and most releases still have some binary dependencies. They only did it for the SDK so it could be packaged in Debian, etc.
This is my favourite list in here, but I’d throw a Lisp in too.
Lisp, Haskell, and Rust should all teach you something new and profound about programming.
All the core parts of dotnet (e.g. roslyn) seem to be built that way. I find them very frustrating to work on. Between that and the whole nuget thing being somewhat FOSS unfriendly, I’d steer people away from C#.
Sony has officially supported Linux distros for both PS2 and 3.
However, that’s not what the games ran on, so it still fits with your definition. It’s just interesting to think about given the current state of things.
https://en.m.wikipedia.org/wiki/Linux_for_PlayStation_2 https://en.m.wikipedia.org/wiki/OtherOS
Lots of jokes in here, but surely it’s this.
They probably brushed up against the door and it fell out.
Haha, yeah, I didn’t mean literally telling them that. More like giving them a text field that can only contain unicode characters, which is pretty standard.
It’s all reasonable stuff except maybe:
People’s names are all mapped in Unicode code points.
I don’t see how you could avoid this this in software that needs to ask the user their name.
I think it’s definitely a good idea to avoid using names wherever possible, and definitely don’t try to do anything clever with them.
When necessary, software can just be clear:
Pallets are surely full-sized shredded wheat. Or Quaker Muffets, which seem to be discontinued? :(
Look how clunky it is to add support on a collection. Take the example here:
It involves adding a new builder class, and they actually have to reference the function by string name.
It’s actually making me even more angry now that I look at it in detail.
We really need open source language servers (for me to use in Emacs).
To me it’s not a cost problem, it’s just too important a tool for me to be unable to fix it when it breaks.
I’ve spent too much of my life suffering with problems in proprietary software (shout out to windows and visual studio especially) that I can’t realistically investigate, let alone fix.
I’m sure a lot of work went into this, but it seems crazy that we need another way to initialise collections, and another way to make fixed sized arrays.
I just want less boilerplate.
Passenger boat Chicago’s Little Lady was hosting the 1 p.m. Chicago Architecture Foundation tour of the Chicago River.
all passengers were issued refunds.
The boat’s deck was swabbed by its crew, and service was resumed for its scheduled 3 p.m. tour.
This boat crew is the most metal thing in this entire post.
It’s a totally valid approach. Most of the answers in this thread involve booting some non windows thing, and running a tool that will do exactly this behind the scenes.
Edit: there are also a lot of much more terrible answers that involve file-level copying that will definitely not work.
I assume it would only be (properly) encrypted if you set a master password in firefox?
If chrome could bypass the master password, that would be concerning.
Got that’s fucking brutal. This isn’t even asking them to fix a bug, it’s just basic help-desk shit.
I’m sure Microsoft has some good devs that are a net benefit to the open source projects they use, but this is not one of them.