https://typing.python.org/en/latest/spec/literal.html#litera...
https://typing.python.org/en/latest/spec/literal.html#litera...
Bugs and vulnerabilities are always being found, with fewer and fewer people in the pool that might even theoretically want to pay for fixing them.
Also, hardware does deteriorate, and the story is the same for adding software support for whatever is currently available in hardware.
Are you aware that here you are arguing for criminal sanctions on the order of 10 years in prison, for writing a letter?
You probably should expand on that.
Edit: some people seem to be okay with this notion! Would love to hear thoughts on how stiff criminal penalties for what is in the end expressing are at all compatible with societies that claim to value free speech.
Note that the author of the post does not present any proof that the allegations are false. Similarly, the other side likely cannot prove its allegations are true. So we are here discussing long prison sentences for unprovable opinions. I would love to hear how people justify that.
It's about writing a letter that can result in someone else receiving criminal sanctions on the order of 10 years in prison, when that someone might not have even written a letter.
Provably false is essential here.
If this is still true in the latest versions, I find it pretty amazing that something like this has been maintained all the way until 2023.
Since the build is reproducible, it should not matter when it was built. If you want to trace a build back to its source, there are much better ways than a timestamp.
The opposite of "bad security through obscurity" is using completely public and standard mechanisms/protocols/algorithms such as TLS, PGP or pin tumbler locks. The security then comes from the keys and other secrets, which are chosen from the space permitted by the mechanism with sufficient entropy or other desirable properties.
The line is drawn between obscuring the mechanism, which is designed to have measurable security properties (cryptographic strength, enumeration prevention, lock security pins), and obscuring the keys that are essentially just random hidden information.
Obscuring the mechanism provides some security as well, sure, but a public mechanism can be publicly verified to provide security based only on secret keys.
[0]: https://en.wikipedia.org/wiki/Museum_of_Bad_Art#Collection_h...
https://x.com/KingGeorge/status/2004902566434668686