Readit News logoReadit News
francasso commented on RCE via ND6 Router Advertisements in FreeBSD   freebsd.org/security/advi... · Posted by u/weeha
TekMol · 5 days ago

    vulnerable to remote code execution from
    systems on the same network segment
Isn't almost every laptop these days autoconnecting to known network names like "Starbucks" etc, because the user used it once in the past?

That would mean that every FreeBSD laptop in proximity of an attacker is vulnerable, right? Since the attacker could just create a hotspot with the SSID "Starbucks" on their laptop and the victim's laptop will connect to it automatically.

francasso · 5 days ago
If you run FreeBSD on your laptop you don't auto connect to public WiFi.

Joking, but not that much :)

francasso commented on Apple has locked my Apple ID, and I have no recourse. A plea for help   hey.paris/posts/appleid/... · Posted by u/parisidau
francasso · 10 days ago
Companies like apple should be liable to pay many millions in damages for this kind of shit. The people should make it hurt so much for them that they think twice before doing it without having a clear and working appeal process where you are clearly explained what happened and guided through it.
francasso commented on Ebola outbreak in DR Congo rages, with 61% death rate and funding running dry   arstechnica.com/health/20... · Posted by u/bikenaga
amelius · 3 months ago
> In the past, the US Agency for International Development, USAID, has provided critical support to respond to such outbreaks. But, with funding cuts and a dismantling of the agency by the Trump administration, the US is notably absent, and health officials fear it will be difficult to compensate for the loss.

...

francasso · 3 months ago
Facts my friend, facts. You may not like them, you may think they are out of context and/or misused, but they are still facts.

Another fact is that the money saved went to fund a (small) portion of the big beautiful bill, which doesn't exactly focus on helping the average american Joe.

francasso commented on Terence Tao on the suspension of UCLA grants   mathstodon.xyz/@tao/11495... · Posted by u/dargscisyhp
linguae · 5 months ago
For someone at the level of Terence Tao, this may be a good idea if a university is willing to hire him, even if it were for a temporary position until 2029 when (hopefully) the regime changes and the destruction is over. I’m sure Terence Tao will have no problems finding such a university or institution.

It’s researchers who are not at the top of their fields who will have a much harder time leaving America to find research positions, since academic positions and funding haven’t been easy to obtain in places like Canada, Europe, Australia, and Japan for at least two decades.

What will most likely be the case is that scientific careers will be halted temporarily or permanently from these funding cuts. Graduate admissions are harder than ever now, it’s harder to find a research position, and I can’t imagine how much more difficult tenure will be to obtain if professors can’t fundraise and publish. Industry isn’t always an option, either. A lot of researcher’s careers will face major setbacks, some unrecoverable, all due to the capriciousness of our rulers.

francasso · 5 months ago
Yes, I agree with you that it's going to be difficult for researcher that are not at the top of their field. But if some of the top researchers started the flow, and goverments in other countries woke up and took advantage of the situation, I believe things could change.
francasso commented on Terence Tao on the suspension of UCLA grants   mathstodon.xyz/@tao/11495... · Posted by u/dargscisyhp
francasso · 5 months ago
Maybe it's time to move to Europe or China
francasso commented on Zig breaking change – Initial Writergate   github.com/ziglang/zig/pu... · Posted by u/Retro_Dev
PaulDavisThe1st · 6 months ago
None of which has anything to do with C++ the language.
francasso · 6 months ago
In theory yes, in practice that's irrelevant unless you can show someone has done it, and nobody has in 40+ years as far as I know
francasso commented on Ty: A fast Python type checker and language server   github.com/astral-sh/ty... · Posted by u/arathore
miki123211 · 8 months ago
Python is slow for some CPU-intensive operations.

There are some extremely CPU-intensive low-level operations that you can easily write in C and expose as a Python API, like what Numpy and Pandas do. You can then write really efficient algorithms in pure Python. As long as those low-level operations are fast, those Python-only algorithms will also be fast.

I don't think this is necessarily "cheating" or "just calling disguised C functions." As an example, you can write an efficient linear regression algorithm with Numpy, even though there's nothing in Numpy that supports linear regression specifically, it's just one of the ways a Python programmer can arrange Numpy's low-level primitives. If you invent some new numerical algorithm to solve some esoteric problem in chemistry, you may be able to implement it efficiently in Python too, even if you're literally the first person ever writing it in any language.

The actual problem is that it's hard for people to get an intuition of which Python operations can be made fast and which can't, AST and file manipulation are sadly in the latter group.

francasso · 8 months ago
That works in numerical libraries because you can encapsulate the loops into basic operations that you then lower to C. In a domain like type checking it's not nearly as easy/doable.
francasso commented on Understanding Memory Management, Part 5: Fighting with Rust   educatedguesswork.org/pos... · Posted by u/Curiositry
baq · 8 months ago
> this is all complexity and refactoring pain that Rust hoists onto every programmer every day

This is what you should be doing when working with C/C++, except there is no compiler to call you names there if you don’t.

If you’re saying ‘use a GC language unless requirements are strict about it’, yeah hard to disagree.

francasso · 8 months ago
> This is what you should be doing when working with C/C++

I genuinely wonder if you actually have ever written c/c++, there is plenty of code that is perfectly valid and safe (mostly involving multiple pointers to mutable memory being alive) that the borrow check cannot accept because it has to draw a line to things it can prove are correct.

It's like saying that the only valid math is the one that an automated theorem prover can prove, it's not even close to being true.

francasso commented on Redis is open source again   antirez.com/news/151... · Posted by u/antirez
_msw_ · 8 months ago
This exchange makes me sad. I know we can do better.

I don't understand why so many people think that it's impossible to have open source in your heart while working for a big company in your day job. I don't understand why people who have dedicated a lot of their time and emotional energy to keep open source ways alive and help build a community effort are attacked because they work for a company that needs to be made the villain in the narrative.

Of course Redis is free to copy BSD licensed code that Valkey contributors add to the project [1]. I only wish that the blog post about this advancement in Redis would give some credit, rather than claiming "We also improved the performance of CRC64 calculations" [2].

We can all do better, and engage with one another with mutual respect and admiration for what has been freely given.

[1] https://github.com/redis/redis/pull/13638

[2] https://redis.io/blog/redis-8-0-m03-is-out-even-more-perform...

francasso · 8 months ago
My friend, Amazon being legally allowed to behave like a schmuck doesn't imply the community can't point that out and complain about it. AWS (legally) exploits open source projects, and that's a fact.

There are many actions and behaviours in life that are not illegal but actively worsen society at large if you do them. That companies that are the main contributors to OSS are forced to take drastic measures is just consequence of AWS not being a team player, you should have at least the decency of not commenting here.

PS. I don't have a horse in the race, I'm not a Redis user, I'm just appalled by your behavior.

francasso commented on Bamba: An open-source LLM that crosses a transformer with an SSM   research.ibm.com/blog/bam... · Posted by u/shallow-mind
antirez · 8 months ago
Dear IBM name pickers: "Bamba", in Italian, means cocaine.
francasso · 8 months ago
SSMs never stop

u/francasso

KarmaCake day529February 2, 2015View Original