2,272 karma · joined December 14, 2020
Slot screws date back to the ~15th century, Phillips to the 1930s, and Torx to the 60s. They all brought improvements.
It's not that long ago that sites were pantsed by bored college students, rather than agents. It didn't stop because sites got more secure really, it stopped because those students started getting real life consequences.
Gives you a real easy solution to stop the agents too.
You can define a behaviour today that they'll all get, but you can't define a behaviour that matches what each programmer needed when they wrote their operation. Some of them can wrap safely. Some of them would need to saturate. Others would need it to abort.
The problem isn't that the behaviour is undefined per se, it's that you can't tell afterwards which potential behaviour the programmer needs, and choosing one behaviour e.g. wrap will break everyone who actually needed saturating, or trapping, etc.
At a broad view, we get to a place where there's no "bug" when "what happens on overflow" is what the program(mer) wants.
> That's a lot of work, but is it productive in the end? Probably not.
Your imaginary scenario defines the solution to be pointless. If that same city was subjected to weekly riots smashing windows & doors, and people regularly died, stopping "productive" work to install things that keep people alive and productive? That's productive.
I'm not a fan of the the security industry's practices, but I can't say they're making a malicious/stupid choice here.
Zig's decision here means the problem is _yours_ to convince this third party to trust you.
> > Won't this get flagged by anti-virus scanners as suspicious?
> Unfortunately, yes. We consider this a problem for the anti-virus scanners to solve.
I am suddenly less interested in relying on Zig.
AI is changing how the code is written, but I'm not seeing anything at all changing the incentives around testing and verification.
And LLMs won't take the easy way out (like so many people) and suppress errors, change tests etc, tweak code until warnings go away?
Your argument was that the only Rust projects there are are little developer tools, so Rust isn't a production language. When pointed out there are large projects that every day users rely on that use Rust, and not just in corners of the codebase, code that's exercised by approximately all users, you insist it's still not production?
I have terrible news about the distribution of iPhones and the middle class globally.
Are you saying we should ignore the distribution we observe from humans and predict them as uniform anyway?
That said I was wrong earlier.