Recent submissions

Comment · 9 months ago
Comment · 1 year ago
The clean test is just an invocation of git clean, and shows the same kind of variation across operating systems, file systems, etc.
Comment · 1 year ago
Love TUI debuggers since I first used the Borland IDE.

It is incredible how small and well done that IDE was: hyperlinked (!) documentation, with examples (!!), and awesome debugger.

All with TUI.

Comment · 1 year ago
Comment · 1 year ago
Comment · 2 years ago
Except for not defining what an ROV is.
Comment · 2 years ago
You answered your question.

Making a CPU requires exactly "photographic plates and film, exposed and developed, other than motion-picture film", i.e lithography and more and more extreme wavelengths.

Comment · 2 years ago
Too bad it does not contain any of the grape (genus Vitis) varieties.
Comment · 2 years ago
What is the service? Indexing and aggregating news? This is commodity now.

Do you find this more valuable than the act of actually researching, writing, editing, and publishing the articles themselves?

Comment · 3 years ago
Comment · 3 years ago
Fuzzing is not a magic trick, in the same way as invariants are not, and unit tests are not, and debugging is not.

All these techniques have degrees of mastery, and if applied carefully, and in combination, can save you a lot of grief.

Dumb fuzzing will not get you anywhere, same as dumb unit testing, and dumb debugging.

In this case, iMessage is particularly well suited for some smart fuzzing because all the attack vectors seem to involve smallish malicious attachment files.

Comment · 3 years ago
What code auditing? Are you claiming NSO has access to iMessage and iOS source code?

NSO seems to be finding more and more bugs by poking a black-box alone, while Apple cannot seem to be able to fix by looking at the source code with all the fuzzing and verification tools, and much more $$$ at their disposal.

Comment · 3 years ago
I don't understand Apple here.

Just put an army of people on fuzzing the shit out of iMessage and all its possible file attachments.

You tried and failed? Fire the bozo who lead the effort. Try again.

You did not even try? Fire the c-level bozo who failed to see it coming and failed to approve such an effort.

But cynically, more and more it feels like some bugs have to stay unfixed, for NSA use, just that NSO is also getting on the game.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton