10
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 (media.ccc.de)
submitted 3 days ago by to c/security@lemmy.ml
5 comments fedilink hide all child comments
 

Crossposted from https://futurology.today/post/12245375

all 5 comments

sorted by: hot top controversial new old
[–] 3 points 3 days ago* (last edited 3 days ago) (4 children)

Oh boy, I tend to hate videos, but this was amazing. GPG is big trouble. I've had issues with it before but now it's solidified. I'm not ready to use Sequoia and I'm not keen on Rust culture, but something has to be done. I confess to having thought about rewriting GPG in Haskell or Ada or even Rocq, but only at the level of daydreaming.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 2 points 2 days ago (3 children)

    Haskell

    I'm learning OCaml right now and it's been pretty dang awesome so far.

    I'm doing Advent of Code 2025 and have made it to day 7 part 2. I've never done an AoC where my first attempt to run the code was correct on both the sample input and real input so many times in a row. I'm in love with this language.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 2 days ago (2 children)

    OCaml is great, and there's an "extreme" version of it called Rocq (formerly Coq, the French word for rooster), that lets you literally prove correctness of your code: https://softwarefoundations.cis.upenn.edu/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 days ago* (last edited 2 days ago) (1 child)

    Implemented in OCaml, interesting. 😁

    Seems like it's mostly used academically though?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 day ago

    Yeah it's way too effort intensive for routinely slamming out code. The main purpose for me of studying stuff like that is to sharpen my understanding of programming, rather than to actually use it. Look at the CompCert project though (compcert.org).

  • permalink
  • fedilink
  • source
  • parent