Viewing profile — fweimer

There are far more cases. Some ABIs use callee-saved registers for parameter-passing under certain circumstances, for example. Usually, there are compatibility restrictions on the …

It's not really about a monorepo, but how many changes you can have in flight in parallel. Desirability of merge-and-rebase-and-check depends on more factors: the rate of change, t…

> interfaces still can’t declare type-parameterized methods What would an implementation look like? Wouldn't it be quite different from the existing one because it has to rely heav…

I can see it happening if people start depending AI-generated proof libraries for the work they are interested in. Not because the libraries are proprietary, but because they are i…

I remember enhancing the F-PC visual editor to display the checksum for the current line because I did not have access to whatever method the magazine recommended (maybe OCR with L…

Recent glibc uses the correctly rounded tanh from CORE-MATH, so it returns different values than what's quoted in the article. It's unclear today if it's possible to achieve reason…

There's Naïve Bayes (although it's sometimes labeled in more explicit terms). The problem with “unconventional” is that these works are anything but. As far as I can tell, the most…

It's still bad for emergency services if everyone does it on the same day.

We have plenty of functions that convert one byte array to another byte array. Both arrays have specified bounds. The functions are total (an error return indicates if the input or…

I still have to see a single glibc bug that truly matters. I don't have illusions about our code quality, so there must be something to find. We got many high-quality bug reports, …

I think it's rather this: 3. People were already sitting on vulnerability reports from their own tools and threw them over the wall. They were worried about getting scooped. They h…

I think the decode phase of inference typically uses local compute resources poorly due to the very small batch size. If you can run many inference tasks in parallel, this will mak…

I think you got it backwards. Wouldn't it be way worse if they used your likeness for advertising to your friends? Compared to random people who don't know you?

Everything we need is already upstream. I think the changes were: commit 0690dc39644d15fc89813419ffcdf9754b098260 Author: Mark Wielaard Date: Sun Sep 22 23:24:34 2024 +0200 Impleme…

There's an older effort called Typed Assembly Language (TAL) by Greg Morrisett et al. It was a rather ambitious in some ways because it tried to model inter-procedural control flow…

Using __builtin_unreachable in this way makes the switch version unsafe, too.

I'm not convinced this is true. Otherwise, it does not bode well for Rust code because any type safety glitch will be considered a vulnerability. This would be really challenging f…

The glibc test suite contains a few tiny FUSE file systems. For example, there is one that just happens to contain every file that mkstemp attempts to create, for a test that exerc…

You can try to execute POPCNT. If it does not fault, its presence is only hidden via CPUID. Live migration support may be the reason why they stick to the baseline. That's most lik…

It's likely this is a hypervisor misconfiguration. Either way, one has to wonder what kind of mitigations for cross-tenant leakage they are missing.

POPCNT is an interesting example. Runtime dispatch (with a conditional branch) would actually make sense for it because it's comparatively difficult to implement from scratch. PDEP…

Newer (relatively speaking) x86-64 instruction sets support many three-operand instructions, which are actually easier to use for compilers than instructions with overwritten sourc…

Do SAT scores measure anything about pedagogic aptitude? I expect that at best, you get some form of correlation (in which direction?). For teachers, other things matter more than …

Over here, it's common that consumers don't have a direct relationship with the card company. I'm not sure if they would even be able to identify me.

The article mentions Stripe's product in this space: https://stripe.com/en-us/radar There are similar offerings from other companies. I don't know if bundling this with payment pro…