Viewing profile — billyoneal

People lost their minds over the mythos announcement specifically because they found something in FreeBSD, which had a reputation as being one of those picked over code bases.

I am also a signing fanboi but I have to point out that the security problem of curl into bash is not really addressed by signing. Signing proves that the component was produced by…

No. The goal posts are not disproving their marketing. The burden of proof is on the people doing the marketing.

An actual PoC is often very helpful in prioritizing getting the bug fixed, in demonstrating that the bug is real, and in providing something that devs can see happening in their de…

The claim has never been that the new model could not do impressive things. The claim is that the new model is not the existential crisis Anthropic’s initial announcement post made…

There are places that will pay bounties on even very flimsy reports to avoid the press / perception that they aren't responding to researchers. But that's only going to remain as l…

I think you are in the minority of people who use that phrase.

The complaint isn't about stating the source. The complaint is about asking for advice, then ignoring that advice. If one asks how to do something, get a reply, then reply to that …

The big place where it happens in modern environments are for pointers to members, where 0 is a bad nullptr value because the member at index 0 is legitimately a thing you want to …

1. What empirical data we have suggests that the 'good suffix' rule engages fairly rarely; that's why the -Horspool variant wins most tests. (It isn't just that you don't have to b…

He meant the original paper for calculating delta2 which was merely referenced by the original BM paper. Sadly this seems to be the pattern for most everything coming from 'academi…

You need a needle that triggers the problem, AND a haystack where the delta2 table matters, AND the algorithm to stop at a problematic index where it uses a bad delta2 value. There…

We are unaware of any such bugs requiring such a suppression; please create a self contained repro and file an issue.

>Now, can anyone ELI5 the high-level goal of this exception? I am not a lawyer; this is my extremely limited understanding. 1. Normally the Apache license requires attribution, eve…

The sources for debugging are included with the product; these sources are more or less the same as in $/VC/Tools/MSVC/ (version) /crt/src/stl

That is near the top of the list of things to replace when we can break ABI next. It's... not amazing. We regularly recommend customers use Boost if you need an API compatible vers…