Live data from Hacker News

Viewing profile — eyalitki

eyalitki

HN member
Joined
Fri, Feb 15, 2019, 5:23 PM UTC
HN karma
177
Public activity
45 items

About eyalitki

Former vulnerability researcher (@EyalItkin). https://eyalitkin.wordpress.com/

Recent public activity

  1. comment
    Comment #48045880

    OpenAI has released the specifications of the Multipath Reliable Connection (MRC) protocol, and they are now publicly available as part of Open Compute Project (OCP) foundation. MR…

  2. story
  3. comment
    Comment #47958410

    Dup of: https://news.ycombinator.com/item?id=47952181

  4. comment
    Comment #47958377

    The presented LPE vulnerability was gradually introduced to the Linux Kernel through refactors and optimizations, each commit making sense on its own. The vulnerability itself was …

  5. story
  6. comment
    Comment #47950685

    The employer doesn't "allow" them to take "time off" to fight as part of the IDF as reservists. This is the law in Israel, and has nothing to do with any employer whatsoever. Durin…

  7. story
  8. comment
    Comment #45541880

    OK, now I understood the gap. There is a technical limitation for relocation resolution when the relocation is against a different section. This means that for function sections we…

  9. comment
    Comment #45541224

    Correct me if i'm wrong, but wouldn't "file-sections" be identical to generating a static bundle object per original object file, and wrapping them all inside a .a archive?

  10. comment
    Comment #45540112

    Thanks, appreciate your feedback. Crossing my fingers that my PR for GNU ld will go as planned.

  11. comment
    Comment #45539430

    > Regarding --whole-archive, is it correct that it would be the default and you could opt-out of it with the function-sections/gc-sections combination? This is the current intentio…

  12. comment
    Comment #45538690

    There is nothing magical in resolving the local relocations. It is just that current static libraries (static archives of plain .o files) are produced directly using "ar" and don't…

  13. comment
    Comment #45538547

    OP here, it was also my opinion that the handling of static libraries should significantly be improved, and ld should have a "--static-lib" flag to properly handle it. Sadly, the E…

  14. comment
    Comment #45503985

    The article is a follow up for an earlier thread of mine that was published here a few months ago: https://news.ycombinator.com/item?id=44613791 . While the previous article presen…

  15. story
  16. comment
    Comment #45390041

    In the world we have more than just bugs. We also have features, and refactoring and whatnot. Prioritization should be done across all tasks, so a bug could be "medium" but the tea…

  17. comment
    Comment #45389854

    It would be interesting to know how many of bugs are triaged and declared as "won't fix" in order to comply with the zero bugs policy. Aside from that, while it might seem like an …

  18. comment
    Comment #44725848

    Not sure what is the measurable metric here, and what will be considered a success in this trial period. Propagating the fix downstream depends on the release cycles of all downwar…

  19. comment
    Comment #44651237

    If someone needs a wrapper for a technology, that modifies the output it provides (like meson and bazel do), maybe there is an issue with said technology. If pkg-config was never m…

  20. comment
    Comment #44650860

    Yeah, but when the product is an SDK, and customers develop on top of it (using their own toolchains) there isn't a lot left for me to play with.

  21. comment
    Comment #44650830

    1. "Advanced" compilation environments (meson) probably limit this ability to some extent. 2. Package managers (rpmbuild for instance) mandate build with debug symbols and they do …

  22. comment
    Comment #44650785

    Agree, there should be a prefix. But if 2 of my dependencies didn't use a prefix, why is it my fault when I fail to link against them? Also, some managers object to a prefix within…

  23. story
  24. comment
    Comment #41332194

    RHEL tried that in that past with 64KB on AARCH64, it led to MANY bugs all across the software stack, and they eventually reverted it - https://news.ycombinator.com/item?id=2751320…

  25. comment
    Comment #41065258

    Rapid Content Update file (detection signatures) are tested on the cloud side "Content Validator" which had a bug and didn't detect the issue with the faulty file. No where in the …