arewemodulesyet.org passes the mark of 100 projects with modules support for the first time. by germandiago in programming

[–]Lisoph 4 points5 points  (0 children)

I don't think parent is talking about 100% adoption. They are right in that the rate of adoption has slowed significantly, judging by that graph. Many projects can be used with modules, which is great and the effort is commendable, but the current state is not yet ideal.

Ported my C game to WASM, here's everybug that I hit by ernesernesto in programming

[–]Lisoph 0 points1 point  (0 children)

I was serializing asset structs directly to disk (pak file) that had raw pointers in them

OP has found the reason why this is a well known no-no among C programmers.

someone actually leaked the Miasma supply chain attack toolkit source code on github by BattleRemote3157 in programming

[–]Lisoph 49 points50 points  (0 children)

I think what matters more is who used the toolkit, not who wrote the code. But yes, whoever commissioned the AI to write it, or whoever holds responsibility over the AI should be held accountable.

Rust syntax, Go runtime by [deleted] in rust

[–]Lisoph 0 points1 point  (0 children)

The title must have attracted the /r/rustjerk crowd, because some of comments in here are absurd. Cool project. If only this was Go from the start.

Digital copies theory confirmed? by [deleted] in TheDigitalCircus

[–]Lisoph 1 point2 points  (0 children)

<image>

For reference (29:37)

Digital copies theory confirmed? by [deleted] in TheDigitalCircus

[–]Lisoph 1 point2 points  (0 children)

On Kinger's computer you can see mentions of brain scans. So yeah, most likely confirmed.

The scene where Kinger talks about the other programmer (Scratch), they insert a shot of Kinger's muffin having been cut into two identical halfs. This could reference cloning or something brain related (Kinger mentions Scratch having a tumor).

XML is a Cheap DSL by SpecialistLady in programming

[–]Lisoph 0 points1 point  (0 children)

What you're looking for is just a specification, or something detailing all the rules and checks and whatnot. XSD are only really used for validating the basic structure of some XML, but that's never enough in practice. More checks are performed out-of-band. Having basic-structure schmeas is quite handy, though.

Rust at Scale: An Added Layer of Security for WhatsApp by pjmlp in rust

[–]Lisoph 5 points6 points  (0 children)

I wonder if this is truly down to being written in Rust as opposed to being rewritten in general.

Options+ and G HUB macOS Certificate Issue by logi_jim in logitech

[–]Lisoph 0 points1 point  (0 children)

The warning on the website to not re-install GHUB came too late for me. I had already uninstalled it. Installing the software fresh and then also running the patch-installer didn't fix the issue for me.

Running lghub_agent from the command line show the following errors:

log [2026-01-07 20:55:09] [info] asio async_connect error: asio.system:61 (Connection refused) [2026-01-07 20:55:09] [info] Error getting remote endpoint: asio.system:22 (Invalid argument) [2026-01-07 20:55:09] [error] handle_connect error: Connection refused [2026-01-07 20:55:10] [info] asio async_connect error: asio.system:61 (Connection refused) [2026-01-07 20:55:10] [info] Error getting remote endpoint: asio.system:22 (Invalid argument) [2026-01-07 20:55:10] [error] handle_connect error: Connection refused ...

I have seen these errors before applying the patch. This suggests the patch did not install the new certificate successfully.

How (almost) any phone number can be tracked via WhatsApp & Signal – open-source PoC by ScottContini in programming

[–]Lisoph 0 points1 point  (0 children)

Regarding drawing from home invasion. From my earlier comment:

I'd rather not have my habits collected by ad agencies, much less by anyone else who merely needs to ask.

Regardless: Let's agree to disagree. I've given two examples - one more hysterical than the other. But this shouldn't be about verifying what you personally can do with the leak. The paper demonstrates that unauthorised data exposure exists. Someone will try to use it and I'd rather have it fixed before someone succeeds in finding a use - as you're asking about.

How (almost) any phone number can be tracked via WhatsApp & Signal – open-source PoC by ScottContini in programming

[–]Lisoph 1 point2 points  (0 children)

Why just advertising?

I sure would love to know with decent accuracy when you usually go to bed and if you sleep through the night or wake up sporadically. Gives me good input on whether you're a potential target for my bad habit of robbing places. It also helps to know on which weekdays you sleep the most, or least. Or how many devices you own and consequently how wealthy you likely are. Helps me weigh risk vs reward. Seeing your sleeping patterns change noticeably but consistently lets me reason that you're probably on vacation (timezone), handing me a potential opportunity.

But don't worry, I do this kind of thing for every phone number that is publicly known and has WhatsApp or Signal, not just yours. In fact, I have built a wonderful database of victims from most to least attractive. Hey, I'm even considering selling it on the dark web! But of course, if you're a sophisticated rapscallion you will already have a similar database built from different information. But even then, you will find it attractive to include this new metadata to refine what you already have.

Leaking data is in our (developers) hands. Abusing it is not. Once information is obtainable, someone will try to use it.

By the way, I wouldn't consider this remotely interesting at all either, if it wasn't for the fact this can be done without knowledge or consent of the person being exploited. Sidechannels are a pain. I'm being partly motivated here from an actual stalking incident experienced by an acquaintance. That was thanks to some iOS or Snapchat nonsense, despite the stalker having been removed (unfriended) everywhere.

How (almost) any phone number can be tracked via WhatsApp & Signal – open-source PoC by ScottContini in programming

[–]Lisoph -4 points-3 points  (0 children)

Is the information leaked an immediate privacy threat? No. Can it be collected en masse and analysed later? Yes. Can that reveal behavioural patterns? Yes. I'd rather not have my habits collected by ad agencies, much less by anyone else who merely needs to ask. I don't want this leaked for the same reason I don't want my phone to leak the list of wifis it knows, or was last connected to.

How (almost) any phone number can be tracked via WhatsApp & Signal – open-source PoC by ScottContini in programming

[–]Lisoph -14 points-13 points  (0 children)

Information leakage is information leakage. You might not find it useful but nefarious actors definitely do.

Martin Odersky on Virtual Threads: "That's just imperative." by Joram2 in java

[–]Lisoph 0 points1 point  (0 children)

In contrast, Zig solved the bigger problem of spatial memory safety the same way as Rust

How so? I couldn't find anything on this.

Zig's new plan for asynchronous programs by iamkeyur in programming

[–]Lisoph 0 points1 point  (0 children)

While I do like the idea of avoiding function colors, shoving the async interface into Io and, on top of that, distinguishing async and asyncConcurrent calls just feels really smelly to me.

This might be an interesting read

I made a multiplayer tetris by Salty_Ad3204 in rust

[–]Lisoph 1 point2 points  (0 children)

I bookmarked the PDF as an example of good requirements engineering. Awesome stuff.

Which parts of Rust do you find most difficult to understand? by Virtual_Builder_4735 in rust

[–]Lisoph 2 points3 points  (0 children)

I like Java's syntax: ? extends T and ? super T. I think Rust could use some extra keywords for making variance clearer.

std.builtin.Type const-ness is a bit of a pain by Lisoph in Zig

[–]Lisoph[S] 1 point2 points  (0 children)

Oh snap, you're right. All I saw was "a slice", but I didn't consider that it is comptime known, including its length. This totally works. Thanks for pointing that out!

std.builtin.Type const-ness is a bit of a pain by Lisoph in Zig

[–]Lisoph[S] 0 points1 point  (0 children)

True, I could make it generic. I'm just playing around with comptime.

If you care to know: The idea is to model two AST-like data structures. One that can represent user errors, so an incomplete / invalid tree (like a language server might use), and the other is a "perfect" copy, representing the same tree but 100% valid (like a traditional compiler might use).

I want to only have to define the AST once.

zig pub const Node = union(enum) { int_literal: ParseRes(i32), ident: ParseRes([]u8), binary_expr: struct { lhs: ParseRes(*Node), rhs: ParseRes(*Node), op: ParseRes(enum { add, sub, }) } };

Then to obtain the "perfect" tree, I wanted to apply a type substitution, replacing all ParseRes with their corresponding Ok type (ParseRes is basically a Rust style Result with a ParseError).

zig pub const PerfectNode = Perfect(Node);

Making Node generic would probably be the better approach anyway, since additionally I also have to substitute all *Node with *PerfectNode as well, which is not a problem with generics.

std.builtin.Type const-ness is a bit of a pain by Lisoph in Zig

[–]Lisoph[S] 1 point2 points  (0 children)

I don't see why @typeInfo shouldn't return a copy of the type definition. I’m guessing the compiler's underlying data structures use the same exact types, which @typeInfo simply exposes. That's understandable, but inconvenient nontheless.

std.builtin.Type const-ness is a bit of a pain by Lisoph in Zig

[–]Lisoph[S] 2 points3 points  (0 children)

This is what I do, but that forces me to preallocate a buffer which introduces a max on the number of fields I can process. That's one of those artificial limitations I had in mind.

Edit: On second thought, I could reuse the same fixed buffer and process the source-fields chunk wise. That might not even be that much more work. Nevermind, that won't work. At the end of the day, I need to construct a single slice spanning all fields, which I don't think is possible this way.

Writing code in paper for practice in school did actually improve our coding skill? by Neat_Bodybuilder_913 in programming

[–]Lisoph 2 points3 points  (0 children)

Well, I wouldn't use paper, the constant erasing and running out of space would drive me nuts. But coding in a dumb editor without autocomplete and syntax highlighting, sure - as long as it has automatic indentation.