[-] technom@programming.dev 10 points 8 months ago

I find it infuriating that they didn't design CI to run locally first and then offer a hosted version of it. These tools are not the perfect alternatives for the real thing.

[-] technom@programming.dev 12 points 2 years ago

Crowdstrike exists for Linux too. In fact, it apparently crashed RHEL and Debian a few months back. That didn't get so much attention.

Falcon seems to be a cross between an antivirus and an intrusion detection system (IDS). There are many antiviruses on Linux, but only one FOSS AV is popular - ClamAV. As for IDS, snort is an example.

But in the true sense, Falcon is much more than just an AV and IDS. It's a way to detect breaches and report it back to CrowdStrike's threat detection and analysis teams. I don't think there exists a proper alternative even in the commercial sector.

[-] technom@programming.dev 12 points 2 years ago* (last edited 2 years ago)

but I disagree wholly that it’s the language’s fault that people can exploit their programs. I’d say it’s experience by the programmer that is at fault, and that’s due to this bootcamp nature of learning programming.

Considering that even the best programmers in the world can't write correct programs with C/C++, it's wrong to absolve those languages of the massive level of memory safety bugs in them. The aforementioned best programmers don't lack the knowledge needed to write correct programs. But programmers are just humans and they make or miss serious bugs that they never intended. Having the computing power to catch such bugs and then not using it is the real mistake here. In fact, I would go one step further and say that it isn't the language's fault either. Such computing power didn't exist when these languages were conceived. Now that it does, the fault lies entirely with the crowd that still insist that there's nothing wrong with these old languages and that these new languages are a fad.

[-] technom@programming.dev 10 points 2 years ago

They're a trillion dollar company acting like a petulent child

No. They're a trillion dollar company acting like a greedy dirty scum that they are.

[-] technom@programming.dev 12 points 2 years ago* (last edited 2 years ago)

Discord is an OK chat app. But it's TERRIBLE as a support forum. It's precisely the latter that everyone is complaining about.

[-] technom@programming.dev 10 points 2 years ago

Choosing Rust instead of C or C++ for new projects is a rather light decision. But introducing it into or outright replacing legacy codebase with it is a rather phenomenal undertaking. Fish shell was completely rewritten. Linux is introducing it in no trivial way. I wonder if the woes with C/C++ is that bad.

[-] technom@programming.dev 9 points 2 years ago

It's still missing the send and receive features from btrfs. And while they say it's more stable than btrfs, it's yet to prove itself (through widespread use), and is marked as experimental in the kernel config.

[-] technom@programming.dev 11 points 2 years ago

This is an old post and a lot has changed since then. Many of the points in that article are no longer true. Drew himself started a language - hare, for which he is considering Rust style borrow checker to ensure safety. It's a bit wrong to bash anything based on a half a decade old opinion.

[-] technom@programming.dev 9 points 2 years ago

I didn't know he was alive. But he was a legend enough to be known. It's sad when the world loses a mentor like him. RIP!

[-] technom@programming.dev 10 points 2 years ago

You might want to have a relook at your own statement here. It's got a load of paranoia. Paranoia beyond common sense and realistic threat assessment is unhealthy.

As for the NSA, it's like they have a split personality (which I think is true for anyone in their position). Their job isn't all about stealing information. They also have the mandate to secure their own and their allies' assets. After all, who knows what's more vulnerable to thievery than an experienced thief? Their job is as much to harden security as it is to compromise.

Finally, their statement is to move to a safe language - one of which is Rust. For your apprehensions about their backdoors to be true, they'd have to compromise every memory safe language out there - Rust, Go, Swift, Nim.... There's reason to be suspicious if they recommend only one language (that is more or less what happened with the NIST pseudorandom generator algorithm). But that isn't the case here.

And you need to assess statements on their own merit - not based on who says it. What they say is true even in our personal experiences. It's been shown statistically that people write much fewer bugs (memory safety bugs are a huge class) with safe languages. I'm not even confident of writing correct C programs these days. Honestly, if your paranoia is true, then it's easier for the NSA to recommend everyone to write in C or C++. That way people will write careless mistakes that they can exploit. And C/C++ usage is way more than for Rust or anything else. They'd target C/C++ compilers and standards to increase their impact.

[-] technom@programming.dev 12 points 2 years ago

WEI is canceled. They instead moved the same concept to Android webview as a feature of limited scope. In other words, they've just moved it away from public view. They don't care about your opinion - they care only about money. And since the backlash caused damage to their reputation, ultimately reducing their income, they just took a tactical step back. But they will be back with it.

[-] technom@programming.dev 12 points 2 years ago

The problem is everyone shilling someone else's personal opinion as if it is a fact. I use Rust. I have no difficulty iterating or refactoring (did that just now). Granted, you are under no obligation to take my word. But why would someone's blog post be more authoritative than my own experience?

view more: ‹ prev next ›

technom

0 post score
0 comment score
joined 3 years ago