ParetoOptimalDev

joined 2 years ago
[–] ParetoOptimalDev@lemmy.today 12 points 2 days ago (3 children)

The bar for matured for someone with his history should be higher, especially in todays world.

Like making a video speaking against alt right edgelords and Nazis.

[–] ParetoOptimalDev@lemmy.today 7 points 2 days ago (2 children)

Nah he was right about Linux so be quiet about the racial slur stuff for sure.

Yeah, that rule is stupid and short-sighted.

Sounds like endorsement to me.

[–] ParetoOptimalDev@lemmy.today 7 points 1 week ago (3 children)

I heard https://www.onlyoffice.com/ is good, but have no personal experience.

[–] ParetoOptimalDev@lemmy.today 14 points 1 week ago (5 children)

Pixel + GrapheneOS is a dream.

Preventing supply chain attacks for one.

[–] ParetoOptimalDev@lemmy.today 8 points 1 week ago (1 children)

You are so right. We should just leave it be and make no noise.

[–] ParetoOptimalDev@lemmy.today 8 points 2 weeks ago (5 children)

Mints outdated drivers can definitely cause issues for beginners.

[–] ParetoOptimalDev@lemmy.today 10 points 1 month ago (2 children)

The Rust code isn't closed source, but I'd strongly prefer a coreutils replacement to use GPL over MIT as well.

[–] ParetoOptimalDev@lemmy.today 7 points 1 month ago

Already fixed, in software that's existed for years and is used by millions. But Oh no, memory issues, let's rewrite that in ! will surely result in a better outcome.

Rsync is great software, but the C language fates it to keep having memory issues in spite of its skilled developers.

Preventing a bug from being possible > fixing a bug.

[–] ParetoOptimalDev@lemmy.today 9 points 1 month ago (4 children)

I fear moving away from GPL that moving to Rust seems to bring, but Rust does fix real memory issues.

Take the recent rsync vulnerabilities for example.

https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/#more-2215

At least this one in a Rust implementation of rsync would have very likely been avoided:

CVE-2024-12085 – A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. Info Leak via uninitialized Stack contents defeats ASLR.

view more: next ›