2,455 karma · joined June 25, 2009
Oh, so I have to maintain glibc. That's the alternative, we are in complete agreement.
> I wouldn't say that bug you referenced is a strike against C; it could happen in any language that was locale-aware and parsing floats.
I was responding to a very specific (and pointed) question.
> For what it's worth, these macros in libcperciva are perfectly readable and maintainable:
I'm not contesting that, they might be. The one you list looks fine at a glance, but that doesn't prove anything.
A few years ago. https://sourceware.org/bugzilla/show_bug.cgi?id=15744
Acting like you can get anything done right in C simply because it's self-contained is proven wrong every day. It's good practice, yes, but doesn't magically (we like this word now) make us immune to error. Everything needs to be maintainable, even if it is proven to be correct, for the simple reason that we can't just replace broken pieces of code with the same simplicity we can replace a broken fridge.
Also, if there's anything we know about code, is that we are constantly trying to invent new ways to expose it to a new interface - thereby breaking it.
In this case, we're talking 'better' but still bullshit [1]. Calling it 'better' makes no meaningful distinction whatsoever in practice.
[1] https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.ht...
> This is an identical-prefix collision attack, where a given prefix P is extended with two distinct near-collision block pairs such that they collide for any suffix S
The near-collision block pairs is the difference everyone can see in the image. Whoever created the PDFs did everyone the courtesy of keeping the suffix the same. There's numerous examples already of different PDFs with the same hash.
OTOH, I've never encountered an issue like this on those systems.. (yet)
Are you sure you're not falling into the trap of "I didn't see it, so it doesn't exist"?
You could argue the rules are "wrong", but that's a totally different topic.
Then again, nothing the article writes about is exclusive to "smart, successful people", so all in all, what exactly are we talking about?
Then please don't.
Sure, in hindsight, it'll all be obvious..