Viewing profile — munch117

I read the or's as giving alternatives, only one of which needs to work. I can see how other interpretations are possible, but I don't see anything especially generous about mine. …

If the text was returned using a staged process, whereby the server first returns an instruction (JavaScript), and the web browser then executes that instruction, which is what tra…

I think you are absolutely right. The big problem with the Turing test always was that it doesn't take into account adversarial designs. They had those chatbot contests about a dec…

Absolutely store the raw data. For the reasons you state. But also store derived data. Titles, authors, dates, article texts. You need those for whatever your application does. You…

Perhaps you are talking about the ripgrep issue itself, which is fine. The others are talking about the linked analysis, which is not.

I would say that's a very sugarcoated version of the Monster energy drink ingredients list[1]. The real list is ten time longer than the ingredients list of a cup of black filter c…

For a piece of software designed by reading the specs and implementing accordingly, there acid3 would be a good way of demonstrating the quality of the result. But is that what hap…

Invisible until moused over, or scrolled by other means. Barely visible even then. In the wrong place. It may be "just styled", but it's certainly not fine.

If ease of repair is what you care about, then yes. But in absolute terms, sockets do make things more likely to fail. A socketed design means you have an assembly step where somet…

Connectors are points of failure. The less of them, the more reliable.

The fatal flaw in PG's argument is that is doesn't mention spending at all. If you're spending your entire income on things like food and rent, then a 1% wealth tax corresponds to …

I didn't suggest that implementations should entirely eliminate every form of UB. There is plenty of middle ground. For example, you could easily limit the consequences of integer …

Both are wrong. It means "this standard does not constrain the behaviour of code that does this". It's entirely legal for implementations to have predictable behaviour, documented …

Making a plan that works for the general case, but is also efficient, is rather trivial. Here's pseudocode from spending two minutes on the problem: # INPUT: lookfor: unicode var l…

> Just clearly state your requirements. Nothing new here. Getting users to clearly state their requirements has always been like pulling teeth. Incomplete sentences and all. If the…

TNG, by a country mile. B5 has "writer identifies too much with the main character" written all over it. It's the story of how Our Great Leader does the right thing and saves the w…

I was reading https://www.offsec.com/blog/cve-2026-24061/ , which implies that precisely that single long string passes through getenv("USER") in the attack. The mystery is how tha…

I'm slightly taken aback by the telnetd fix: The solution to the username "-f root" being interpreted as two arguments to /usr/bin/login is to add a "sanitize" function, really? I'…

> Also worth noting that the author never actually stated that they did not use generative AI for this article. I expect that they did in some small way, especially considering the…

I struggled a bit with what to point to as signs that it's not an LLM conception. Someone else had commented on the headlines as something that was AI-like, and since I could easil…

This article is just about as un-AI written as anything I've ever read. The headings are clearly just the outline that he started with. An outline with a clear concept for the stor…

A __del__ that does any kind of real work is asking for trouble. Use it to print a diagnostic reminding you to call .close() or .join() or use a with statement, and nothing else. F…

> If you think you disagree with him (as I once did), please consider the possibility that you've only been exposed to an ersatz characterization of his argument. My first exposure…

Ah, I missed that 9.a-c were alternatives. And that, in the absence of custom tables or functions, they are merely defense in depth for something that is already secure, barring bu…

I'm not that concerned with bugs in sqlite. sqlite is high quality software, and the application that uses it is a more likely source of vulnerabilities. But I do see a problem if …