Viewing profile — MatejKafka

It's not really important whether the text is visible, you can just put the instructions in the middle of a long document, or use a low contrast color, or a small font size, or any…

> By the way, if you don't want a culture war, you gotta stop warring. I find it hard to understand how could steveklabnik's comment be seen as warring.

I haven't seen data that would confirm that the Nim ARC/ORC approach is faster than manual memory management (C/Rust/Zig/...) on programs with non-trivial lifetimes (for trivial li…

From HN guidelines: > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

I agree that culture makes a difference, but the largest aspect of it is that the average Linux user is fairly technically proficient and would be fairly unlikely to install malwar…

To answer in a more constructive way: No mainstream desktop OS tries very hard to sandbox drivers. Some drivers on both Windows and Linux (not very familiar with Mac) can be implem…

I expect that process to be mostly automated, I wouldn't expect the MS folks at the testing lab to do much (if any) manual testing, especially for a new version of a previously app…

Yes, and it's still fairly easy.

Agents work well on Windows for sysadmin stuff - PowerShell gives them an easy way to interact with Registry, event log, WMI and other facilities in a structured way.

Use Pro, Home is needlessly limiting for a power user.

Read sibling comments to get answers to all your (non)questions.

Except there's plenty of proprietary software for linux, you just won't find it in default repos and have to install it manually.

Agree with all of those points and there are some partial solutions (IOMMU, userspace drivers, virtualization,...), but we're still quite far from being able to safely connect untr…

Yes, but unless all 3rd party drivers can run in userspace (which is not really feasible), Microsoft needs to give vendors the option to install a kernel driver, at which point a v…

You know why desktop Linux doesn't have much malware? Because ~no one uses it. That's it. Once you get users, you get malware. The rest of your comment is just as ignorant.

> Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem. Not really. AutoRun ran whatever was on the USB drive…

How it it a Windows issue that driver developers pack garbage with their drivers? If Linux supported loading 3rd party drivers (it mostly doesn't, and if Windows did that, the whol…

You can "spoof" any system where you can load older drivers into giving you admin/root, you just need to find a vulnerable driver. Nothing Windows-specific in that.

How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)

How do you expect Mozilla to make enough money from just Firefox to survive if Google ever decides to stop paying them for being the default search engine?

It is absolutely great at binary analysis, as long as you give it a decompiler.

No, don't. There are many reasons why a user may want to move the temp dir somewhere.

It could very well be an actual reachable buffer overflow, but with KASLR, canaries, CET and other security measures, it's hard to exploit it in a way that doesn't immediately cras…

Personally, I just move SSH to a random high port on each of my public servers. Works like magic, no more log noise.

https://simonwillison.net/ is a pretty loud and moderate voice in the community. Also active on Lobste.rs: https://lobste.rs/~simonw But agree that there's an irrational level of t…