Hacker Newsnew | past | comments | ask | show | jobs | submit | giosch's commentslogin

"the most secure consumer operating system" ?


Well, that’s certainly up to debate - but please note the “consumer” qualifier there. I do believe that for an average non-experienced consumer, it offers better security over Windows (fewer viruses, App Store launched earlier, etc.)

I should have added “desktop” there as well, otherwise I would say iOS is the most secure consumer operating system these days.


I was baffled by the absurd permissions it requires too! I guess I'm never going to try what "a world without retweets" is...


Someone posted this [1] during a similar discussion yesterday. It shows you what a world without retweets is like without requiring anything beyond the minimal permissions required to do so.

[1] https://readmeapp.stream/


If you stop using Twitter, it becomes really obviously pretty much instantly.


Talks yes, telling his own story I don't think so. He specifically say that he rarely tells his story at the beginning of this.


Well specifically he gave his own story at said talk - it did not seem like a rare thing.


See the link in my top level comment, he has had this recorded before.


If you click around on youtube you can find multiple versions of this talk : https://www.youtube.com/watch?v=x0fEA0MsiV8 , https://www.youtube.com/watch?v=0X-LlwupIqc which are almost identical, though in the google version there is a part about him "being" a doctor missing which is in some other versions i have found. Even the answers to some off the questions are almost identical


That sounds reasonably secure and quite common for a big tech company.


Only if you own the car. If you are using uber you cannot choose the route...


Yes, actually, you can ask the driver to take another route. Uber may just change the price.


I was expecting it to at least generate valid words, but that doesn't seem to be the case...


Safari on latest MacOS gives me unintelligible words pretty often.

My input: "I went to the grocery store to pick up some milk for"

Output on wikipedia setting:

"I went to the grocery story to pick up some milk for ... proposes of such to take a amplifier and the exporteruation of the player of former"

None of the options seem to key off of the text of my sentence except for vaguely the last word (in my case a generic preposition). Am I doing it wrong?

Here's another example, with the ellipses where I pressed tab:

> As I walked along the forest trail, I came to a most amazing [...] the history of the town himself, the complete material was made to be a traditional


You're starting the text like a story (in the first person even!). Wikipedia articles aren't usually written like that, so the network is in unfamiliar territory. Its only option is to quickly revert back to something closer to the style of an informative article.


What is it generating for you? (and what OS/browser are you using?)


You don't want to run your own mail/web server. At least, you do not want a lot of people doing it. Because most of the will get the security part wrong. Horribly wrong.


Well, some ISPs have in their contracts a free custom mail and webserver for every customer (for example, mine does).

This obviously diversifies the options quite a bit.


Having my email or webserver tied to my ISP seems terrible. What happens if I want to switch?


That's the way it always used to be - for example, many americans still pay a small fee to AOL.

But you can just move it to any other hoster.


AKA: how to provide a lot of work to security engineers, pentesters and security researcher for a long time.


I remembered that he was threatened with a legal action by Nintendo for using Super Mario pipe sprites, but it may be only a rumor.


That's not unlikely considering how aggressive Nintendo can be when it comes to protecting their IP.


He was found to not have infringed on their IP.


Rumor, AFAIK Nintendo didn't care.


It's a miracle! We have the solution to every bug in every program that will ever be written! Just do not put bugs in your code, you fools! ...


It is not about being "smart", it is about reducing the risk. E.g. you can avoid using malloc() directly, using abstractions, even in C, e.g. [1].

[1] https://github.com/faragon/libsrt


Technically, that's why Rust was invented.


Bu Rust also must have an allocator under the hood that is unsafe and rust apps can call C libraries or C kernel so why do I see the Rust strike team complaining that something that they use indirectly is improved.


There is a big difference in using a programing language where unsafe code is explicit and easy to track down, versus one where each line of code is a possible security exploit.

Also Rust isn't the only option to write more secure code, it was already possible before C was even created using Algol and PL/I variants.

Quote from Tony Hoare's ACM award article in 1981, regarding Algol use in the industry, a programming language almost 10 years older than C.

"A consequence of this principle is that every occurrence of every subscript of every subscripted variable was on every occasion checked at run time against both the upper and the lower declared bounds of the array. Many years later we asked our customers whether they wished us to provide an option to switch off these checks in the interests of efficiency on production runs. Unanimously, they urged us not to--they already knew how frequently subscript errors occur on production runs where failure to detect them could be disastrous. I note with fear and horror that even in 1980 language designers and users have not learned this lesson. In any respectable branch of engineering, failure to observe such elementary precautions would have long been against the law."

EDIT: younger => older


Yes, there are many languages that are safer, including c++ collection can be used safely but you don't see Java/c# devs popping up in a C/C++ related thread mentioning again their favorite language. Btw there are also languages that are safer then Rust and you do not see those people asking to not use Rust, again better tool for the job(where in most of the cases the project is a huge one and is done).


How young are you?

I imagine you missed the BBS and USENET flamewars against C.


I have internet access for 10 years.


Which means you missed all that BBS and USENET bashing fun.

No, bashing C is a common practice from those of us on the memory safe side of the fence since the early days.

Take the paper "A History of CLU"[0] describing how CLU was designed and implemented in 1975.

"I believe this is a better approach than providing a generally unsafe language like C, or a language with unsafe features, like Mesa [Mitchell, 1978], since it discourages programmers from using the unsafe features casually."

There are tons of other examples, all available in old papers, BBS and USENET archives.

[0] http://publications.csail.mit.edu/lcs/pubs/pdf/MIT-LCS-TR-56...


Thanks, I will read it, so are you of the opinion that there is no job that C is the best tool? Btw I am not a C developer and I would never use C except if I am asked to work on a project that uses C already. I would use C++ with Qt for GUI though.


Exactly, C only became widely adopted by the industry thanks to AT&T only being allowed to charge a symbolic price for UNIX and making the source code available to universities.

Which 80's startups like Sun and SGI used as basis for their workstation OSes.

Bjarne created C++, because after having to use BCPL instead of Simula to finish his PhD, he never wanted to work like that ever again.

So C with Classes started as a tool for Bjarne to target C, while staying productive and able to write safer code.


Rust uses a different allocator actually, jemalloc which doesnt store data inline like ptmalloc does. So an overflow could overwrite other heap stored data it wouldn't overwrite heap metadata or result in a vulnerability from the allocator code.

Granted, if you link/call in code that uses ptmalloc (glibc's malloc) in Rust it is still an issue but unsafe code in Rust itself won't be vulnerable to this sort of attack.


Rust uses jemalloc.


No. Technically that's why "safe" languages were invented. Rust is one of the worse examples of those, as you can hardly call Rust safe. Only Rust fanboys do so.

Pascal, ADA, LISP, ATS, Java, Go, D, pony and all of the lisp and functional languages are safe.


> as you can hardly call Rust safe

Care to expand on that? I'm curious.


unsafe memory and unsafe concurrency. i will not expand further, because it will be downvoted by the rust fanboys.


Even aside from preemptively complaining about downvotes, refusing to substantiate your claims is the quickest way to lose karma. :P


Okay. If you find something isn't safe, in safe code, please file a bug. What you're asserting shouldn't be true.


Do you see the problem now? You have a whole chapter about unsafe, with 4 major cases. Stdlib is full of unsafe. And you don't even talk about unsafe threaded code. One of the biggest safety problems nowadays. Memory safety is solved since decades with GC. Concurrency safety also for a few years.


No, but we do have a solution to one kind of bugs, which is buffer overflows. Just because it doesn't solve every bug doesn't mean it doesn't help.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: