Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)T

turdas

@ turdas @suppo.fi

Posts
3
Comments
233
Joined
3 yr. ago

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • Whatever % of people that "fail" this test, is much higher than the 0% of people that would do so using rusts' compiler.

    Of course, programs that don't pass the borrow checker can be totally memory safe, but that would need to be analyzed on a case by case basis.

    Programs that do pass the borrow checker aren't guaranteed to be totally memory safe, so the number isn't actually 0% for Rust either: https://github.com/Speykious/cve-rs

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • Rust forces you to do this until you have to use unsafe, after which it doesn't. That is not so different from C++ guaranteeing your safety until you start using raw pointers.

    It is not the compiler's job to stop the programmer from shooting themselves in the foot if they want to. It's the compiler's job to make it clear to the programmer when they disable the safety, put their finger on the trigger and aim the gun at their foot. Modern C++ does this, and if you still inadvertedly shoot yourself in the foot in spite of the warnings, you brought it on yourself.

    Regular old C, on the other hand, gives you a 9mm when you're in grade 7, safety: always off.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • If you follow modern C++ best practices, memory unsafety will not happen by accident. The dodgy stuff in modern, idiomatic C++ is immediately obvious.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • It's not a joke. What was described above is pretty much C++'s RAII pattern, which Rust evangelists love to present as a revolutionary Rust invention. Used with smart pointers, it will help avoid use-after-frees. What it doesn't avoid is null pointer exceptions (you can std::move a unique_ptr and still access it, it'll just be nullptr), but those will typically "just" be a crash rather than a gaping security hole.

    That is not to say Rust doesn't have its own innovations on top of that (notably that the compiler stringently enforces this pattern), and C++ does give you many more ways to break the rules and shoot yourself in the foot than Rust does.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • They will probably have a version newer than 5.15.149.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • It looks to be on 6.1.153 currently which is much newer than 6.1.76.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • With the uname -a command

  • Linux gamers on Steam finally cross over the 3% mark

    Jump

  • Without the Steam Deck there'd be 27% fewer Linux users. So while that would indeed mean Linux wouldn't yet be 3% of the total Steam userbase, I think you will find that 27% is not the majority.

    GamingOnLinux aggregates this data in a nicer way and as you can see there, the total Linux market share has gone from <1% five years ago to the 3% it is now. If that increase was mainly thanks to the Steam Deck, it would have to make up more like 75% of the Linux userbase rather than only 27%.

    Instead, as others have pointed out, SteamOS's share has actually gone down rather than up, which is a natural consequence of the Steam Deck being relatively old now so fewer are being sold.

  • What is lemmy doing about bot scrapers?

    Jump

  • The second-worst part about this guy is that he replaces all th's with the thorn, but phonetically the thorn should only be used for the voiceless dental fricative (the sound at the beginning of thorn) while the voiced dental fricative (the sound at the beginning of though, or indeed this) should use the eth (ð).

    The worst part, of course, is the fact that he posts in the first place.

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • This only affects positively ancient kernels:

    From (including) 3.15 Up to (excluding) 5.15.149 From (including) 6.1 Up to (excluding) 6.1.76 From (including) 6.2 Up to (excluding) 6.6.15 From (including) 6.7 Up to (excluding) 6.7.3

  • CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

    Jump

  • C++ would also solve this for the same reason!!

  • [UnReal World] has been in continual development for 33 years, and its creator doesn't think he'll ever stop updating it: 'When I accomplish one feature, I always have two more waiting'

    Jump

  • I think I first played this in like 2005 or something. I was underage and didn't have banking credentials yet, so I bought the licence by mailing a letter full of coins to the author. Back then a lifetime licence was a few dozen euros, but I bought the major version licence for like 15€. That version received updates for a couple of years, from what I remember. I never bought the lifetime licence, but re-bought a major version licence twice and then bought the game again when it launched on Steam. In the end buying the lifetime licence would've been cheaper, heh, but I don't mind supporting the developers.

    I still keep coming back to it every few years. There are other games in the same genre or very adjacent to it that are better as games -- Cataclysm: Dark Days Ahead is the first to come to mind -- but there are some things about URW that no other game really does, notably the whole realistic iron age survival thing (it's a different genre altogether with less nuanced survival gameplay, but another iron age favourite of mine is Vintage Story, which is basically a Minecraft mod spun off into its own game).

    The animal AI in particular is really good. The way you hunt in this game is a pretty good representation of cursorial hunting, which is basically just running after the animals until they tire -- something humans are good at thanks to bipedalism. You only rarely manage to take down larger animal like elks (moose in American; the game calls them by their European name) in one strike, which means that you have to wound them and then jog after them until they collapse from exhaustion and blood loss. Or you can dig trap pits in chokepoints and corral them into them, another real hunting strategy used in iron age Finland. The tracking in the game is also very involved. You do it by following tracks displayed on the ground rather than a compass arrow, and you often have to track animals for very long distances and they will try to lose you by moving erratically.

    Damn, now I kind of want to go back and play the game again.

  • What is lemmy doing about bot scrapers?

    Jump

  • Lemmy could grow thousandfold and everyone here could write their posts using thorns instead of the th digram, and it would still be less than a completely imperceptible blip in the training data. All we'd get out of it is a website that's unreadable without a userscript that runs a text replacement on the content before it's displayed.

  • Linux gamers on Steam finally cross over the 3% mark

    Jump

  • "Freedesktop SDK" means the user is running Steam via Flatpak. They could be on any distro.

  • Linux gamers on Steam finally cross over the 3% mark

    Jump

  • "SteamOS Holo" 64 bit is the Steam Deck.

  • Can Cows and Solar Power Coexist? We’re About to Find Out

    Jump

  • Most solar installations, like the one in the picture, don't rotate or only rotate on one axis.

    There's some actual research into how different crops react when grow between rows of solar panels. Vertically mounted solar panels are especially suited to this because you can drive between them on a harvesting machine easily. Sadly I don't have any links to give off the top of my head.

  • What is lemmy doing about bot scrapers?

    Jump

  • Load is what really sucks about scraping IMO, and I wonder if the fediverse's design makes it more or less susceptible to load precisely because the scrapers can just set up their own instances and get all data through there by federation. Time will tell, I suppose.

  • Can Cows and Solar Power Coexist? We’re About to Find Out

    Jump

  • Some plants actually grow better in the shade under solar panels than in direct sunlight. Of course it will depend on local climate too.

  • Linux gamers on Steam finally cross over the 3% mark

    Jump

  • That's not true. You can see on Steam Hardware Survey what OS people are running, and SteamOS only makes up 27% of Linux users on Steam, so the vast majority are on regular PCs.