Viewing profile — rockdoe

How many of those are false positives though? Probably just over 5000? You get bug bounties if you report the kind of bugs Mythos identified. There's a reason no-one collected boun…

I think that if you hit the crash in the same line of code many times, you can safely assume it's your own bug and not a memory issue. If it's only hit once by a random person, mem…

If the crash is isolated (no other reports) and flipping one bit in the crashing pointer value would make the pointer valid, it's assumed to be a bitflip. This obviously will only …

If this were so all devs for apps, games, etc... would be talking about this but since this is the first time I'm hearing about this I'm seriously doubting this. But they have?

What's the expected behavior of a JavaScript program that allocates all memory on the machine?

I'm pretty sure I saw them present on exactly this at FOSDEM?

Wordfeud uses a different board layout.

has had basic support merged I read the parent post as saying that this is the problem, i.e. that "complete" support is a mess, because AFAIK even the reference implementation is i…

Are there any small engines that have enough of the web implemented that they can run it?

Why would those need a lot of Rust dependencies then? If you want to hand-roll stuff, hand-roll! no_std is a thing because people use it.

Small companies with little development experience like Google and Mozilla. (You can check the files I linked and see audits between deltas for minor version updates)

The Tauri app just uses the system WKWebView. Memory usage can be misleading due to reporting, see e.g. https://github.com/tauri-apps/tauri/issues/5889

Yeah not sure how it qualifies as lightweight...

Ah yes, then the vendor goes out of business and they have to bring in highly paid consultants to fix bugs in the vendors' gcc 2.95/Linux 2.6.x port to their SoC. You need to be in…

FYI Google and Mozilla audit all their dependencies and share them: * https://chromium.googlesource.com/chromiumos/third_party/rus... * https://searchfox.org/mozilla-central/source…

In C/C++ every project ends up with a hand coded replacement for those external dependencies that is less well written and infinitely less tested.

Firefox and Chrome (and thus Edge, Brave, OperaGX, etc etc) do the same for many allocations - it's safer to crash than to end up in an obscure failure path that never had its erro…

FhG and Dolby did eventually put up a list of patents you are licensing from them. It makes for some funny reading if you're familiar with the field. (This should not be construed …

Opus isn’t patent free The existence of a patent pool does not mean there are valid patent claims against it. But yes, you may be technically correct by saying "patent free" rather…

It's not like putting that message there will stop those complaints, more like the opposite.

There's no reason sites from 2000 would no longer work, unless they use APIs that weren't properly standardized. I guess that's why it recommends Chrome. Hah.

>As a first step, I'd appreciate reducing the risk of javascript extracting contents from outside the browser. But that means essentially reserving a core for the browser only. I d…

The idea being that the main process and content processes should never be on the same core? I would worry about cross site leakage. From my understanding that would be unavoidable…

although Opus is very nice, it's not as efficient ... as HE-AAC Uh, no, this is not correct. If you try to find a source, you'll easily find the opposite is very well established.