Viewing profile — Mordak

The article points out what I think is the crux of the discussion: With Fil-C they become crashes . Errors manifest at runtime, not at compile time. I realized some time ago when I…

I feel like rust has some good sweet spots right now. I care about these but maybe not everyone else does. - Parsing untrusted inputs. nom[1] is a joy to use, and lets you kind of …

Something like the cxx crate[1]? You specify your shared objects between C++ and Rust, and it spits out code for both sides. The guy who maintains it said in the reddit thread[2] a…

Nah. We built a new project in all "modern C++". It is 100% shared_ptr, unique_ptr, std::string, RAII, etc. It initially targeted C++17 specifically to get all the "modern C++" goo…

Sorry if you interpreted my comment as advocating for tossing out grep or ls - that certainly wasn't what I was getting at. As one of the OpenBSD people that happens to quite like …

There are actually several of the OpenBSD devs that have been writing Rust lately. Some are doing it for work, some from personal interest. Opinions vary on how much people like it…

FlatBuffers are not self-describing. FlatBuffers, Protobuf, Cap'n Proto, etc., all require an external schema configuration that you compile into a code chunk that you include into…

At my work we recently went through a large exercise to decide on a common data storage format. The contenders were JSON, MessagePack, and Avro. MessagePack won because: - Msgpack …

Please, no. My experience with the scons build cache is that it exists solely to introduce mysterious compile failures when the cache is out of sync. Eventually you get so distrust…

I have exactly the opposite experience: I do not want to write a program to compile my program. Having used both scons and waf, and also having used make, cmake and cargo, I would …

pledge[1] allows a process to promise the kernel that it will restrict itself to a given subset of system calls. So you call pledge() with the set of syscalls you need, and then if…

Keep reading. The upgrade guide has two parts: the first part that assumes the common configuration (you have console access and are using the OpenBSD boot loader), and the second …

It depends on the function. Many things will contribute. If your CPU can keep the cookie in cache then loading it repeatedly will relatively fast compared to hitting main memory. I…

Hey PaXTeam, thanks for having a look! I wrote the implementation, so I can answer some of these. 1. We don't silently skip instrumentation. If we can't find a free register then w…

Wow, that's some seriously selective quoting from the krackattacks link there. The one that is relevant to the question of whether or not OpenBSD patched early without permission i…

And looking at the commit logs for NextBSD [0] it is dead now too. [0] https://github.com/NextBSD/NextBSD

Thanks! I see what you mean on getPassName - I missed it during revisions.

Ah, Return Flow Guard is cool - I did not know that MS had done that! I like SafeStack, but was disappointed to learn about the limitations with shared libraries. Some SafeStack is…

Oh, yes. There are other ways to kick off ROP chains that do not involve stack corruption. For these attacks, Retguard will only pollute the gadget space by inserting these return-…

I think the LLVM CFI options only apply to C++ programs? Microsoft's CFG is cool, but works on the other end to this - by protecting CALL instructions instead of RET. Stack cookies…

You have it - if a stack address can be leaked, and you can follow the control flow to figure out the difference between the address you leaked and the address you're going to be d…

I use ruby's trailing conditionals exactly this way all the time - it makes me happy to see someone else using the same pattern. I also use it at the start of functions in order to…

vultr takes paypal - it's the only way I've ever paid them.

I've been running on vultr $5/mo boxes for years now. No complaints - the boxes are snappy and the web UI/dashboard is nice. I originally picked them because they supported FreeBSD…

Also vm-bhyve, which I've been happily using since 2015. Also amazing, also dead simple. https://github.com/churchers/vm-bhyve It is nice that there are multiple wrappers around bh…