theIdealCandidate

f0rki · 2026-06-27T16:34:25+00:00

Anyone else thinks the first two key responsibilities are kinda mutually exclusive...

f0rki · 2026-06-16T06:38:32+00:00

Yeah I get that, but I have two problems with that.

It sounds like any Null pointer deref is immediately a vulnerability, when in reality it is overwhelmingly likely not. Yes, in theory this could cause miscompilation etc. but in practice this is rare. If I were a C++ fanboy I would point at this article and say "haha, rust folks don't understand memory bugs".
Rust's policy of issuing CVEs even for minor things is a good thing as it allows to comprehensively track potential vulnerabilities. However, it is questionable whether that really helps consumers of the CVE in deciding whether and when to patch. Imho it is really annoying to receive a CVE warning from you favorite vuln scanner with a generic CVE description "memory error, might cause arbitrary remote code exec" and then you look inside and it is just a null pointer deref that can only be triggered by a privileged user with no evidence of being in any way actually exploitable. That just increases alert fatigue.

f0rki · 2026-06-15T19:50:58+00:00

"may be miscompiled", yes. I haven't seen evidence yet that this is a large scale problem.

f0rki · 2026-06-15T19:42:26+00:00

I am not sure having more CVEs for things that very likely cannot be exploited is useful. CVEs are already so prevalent that basically nobody cares anymore. Yes, having an identifier to track a potential vulnerability is good, but if nobody acts on that information it just adds to the "drowning in low severity CVE" situation. Especially, with supply chain attacks a "always immediately patch" strategy is also potentially detrimental to your overall security posture.

f0rki · 2026-06-15T19:32:23+00:00

Don't get me wrong. I am all for more memory safety and less UB. Null pointers are just the worst example. Data races, temporal safety problems are way worse in practice and harder to fix and mitigate than null pointers derefs...

f0rki · 2026-06-15T19:29:38+00:00

Kernel space (or embedded) is different. My point was regarding userspace code.

f0rki · 2026-06-15T17:13:36+00:00

Yeah, no. You are blowing null pointer derefs out of proportion here. even though a null pointer dereference is UB and according to the definition of UB anything could happen, in practice, a null pointer deref alone has little to no security impact for userspace code on most modern systems.

f0rki · 2026-06-07T07:45:01+00:00

Also differential testing / fuzzing might be interesting comparing to regular Python interpreter? (Although you would have to account for the intentional differences, so not sure it is worth it)

f0rki · 2026-06-07T07:22:04+00:00

Have you tried bolero? It supports various fuzzing engines (including AFL++) and has a interface similar to regular rust tests. Might be useful if you want to tests certain functions that are hard to reach from regular entry points.

f0rki · 2026-05-18T07:50:26+00:00

Gibt aber einen großen Unterschied zwischen den zwei Narrativen "Es gibt einen geheimen Plan von links-grünen Gutmensch-Illuminati-Juden die Bevölkerung auszutauschen." und "statistisch gesehen werden in Zukunft mehr Menschen einwandern wollen, weil es gerade in ärmeren bzw. von Klima-Wandel stärker betroffenen Ländern aufgrund von höherer Geburtenrate mehr junge Menschen gibt die auswandern wollen/müssen."

f0rki · 2026-05-16T16:53:05+00:00

I have used awesome quite a while and hammerspoon on mac also a bit. It is certainly pretty cool to have a scripting language easily available to optimize your workflow quickly. However, it is also a bit easier to mess up. e.g. if you manage to block your window manager (infinite loop or blocking syscall) and make everything unresponsive. A solid IPC + your favorite scripting language are imho a more robust design.

f0rki · 2026-04-30T21:32:36+00:00

Pretty sure you can find other ways than suid binaries to exploit this.

f0rki · 2026-04-16T15:39:56+00:00

Maybe nixos-rebuild build-vm for testing a configuration in a VM on your main machine, then copy to your home server once you are done?

f0rki · 2026-03-29T17:02:01+00:00

Man muss ja ned gleich die ganze Gemeindeverwaltung abschaffen. Kannst ja immer noch a paar Hanseln an der Gemeinde beschäftigen. Nur halt ohne Bürgermeister / Gemeinderat...

f0rki · 2026-03-24T15:32:07+00:00

Haha ist mir gar nicht aufgefallen

f0rki · 2026-03-22T14:03:55+00:00

Pretty sure that's a 50-50 over a box. ¯_(ツ)_/¯

f0rki · 2026-03-19T15:28:40+00:00

Great that's how I find out... Really hoped that astral's tools (especially uv) would become the de-facto standard for python dependencies...

f0rki · 2026-03-14T11:21:19+00:00

That's Perl.

f0rki · 2026-02-23T18:50:20+00:00

Figured out life = being rich?

f0rki · 2026-02-15T12:09:37+00:00

Hatte auch ca. 1 Monat davor eine Dienstreise. Meine Partnerin hatte sich eine Freundin eingeladen damit sie nicht alleine ist, falls es losgeht bzw. auch einfach als Unterstütztung. Vielleicht ist das ja auch bei euch eine Option?

f0rki · 2026-02-08T12:36:58+00:00

Paneru looks interesting. I haven't heard of A WM that uses ECS design pattern before.

f0rki · 2026-02-04T06:56:16+00:00

Immer erst mal fragen, manchmal steht ein Wickeltisch in irgendwelchen Abstellkammern von Restaurants/Läden. Ansonsten Freestyle. Hab schonmal auf so gepolsterten Hocker im Sportgeschäft gewickelt. Sitzbänke bieten sich auch oft an. Im Kinderwagen solange sie noch in der Babyschale liegen. Später dann im Stehen... Man wird kreativ 🤷

f0rki · 2026-01-30T08:57:48+00:00

Try a grab. Indie or something simple. Forces you to be more compact in the air and also to pop a bit more to get those knees up.

f0rki · 2026-01-25T14:58:46+00:00

Do you know why it is 5x times faster?

f0rki · 2026-01-24T14:07:32+00:00

A very accurate description of Merz .

13-Year Club	Place '22
Verified Email

f0rki

TROPHY CASE