rc4algorithm

Yeah, let's revert to 1988! Great solution! Muchly of advance!

It's not like de Raadt or Torvalds got arbitrarily dropped into their positions. People effectively chose them by investing usership and development effort into their projects.

> The overwhelming majority of C implementations additionally define the values of all-bits-zero floats and pointers.

So... Clang and GCC?

Regardless, you're ignoring the obvious difference: that isn't POSIX- or ISO-defined at all. If you choose to use it, you're using a weird dialect. Might as well just switch to Cyclone.

All of that useless zeroing is very painful from a performance perspective. It just isn't a reasonable option in performance-relevant code like kernels and core infrastructure. The Moore's Law argument doesn't apply because memory bus latencies and case pressure are lasting problems.

Unless the zeroing is defined by the language, assuming it t is incorrect and shouldn't be done.

OpenRISC has been stagnant for many years and will probably never make it to silicon.

This was written by Miod Vallet a couple days ago. He was the main nonstandard arch developer for OpenBSD and resigned last week. So, the context is that the author was one of the few leaders of the Luddites and considers it a lost cause.

The vast majority of MIPS systems are bargain-basement embedded systems, though. Also, the ISA is pretty messy (especially at the kernel layer) and doesn't support many modern features such as per-page W^X or crypto acceleration.

I dislike monopolies more than most, but MIPS isn't currently a very strong contender for ARM's market share.

This article suggests that there's no point in having a valid SMTP cert. However, consider end-users' clients, which store the SMTP domain (i.e. don't do MX lookups) and connect to it directly. For mail to users on the same email network, this is the only non-local SMTP hop. Securing this connection also prevents anyone on the end-user's local network from MitMing.

> I would happily admit there is extensive room for improvement in systemd, but we UNIX folks have been working with worse-is-better and rough-consensus-and-running-code for decades.

You're understanding "worse is better" backwards. It means "starkly simple to the point of being initially off-putting is better". In this context, it means (in part) "be a big boy and learn how to write a shell script". (Not to be too condescending, but I think that captures the Unix perspective here.)

There's so much wrong with this comment...

ETFs are just a way of buying equity, not a market that can be overcrowded.

The 2008 meltdown happened because of subprime mortgages, the approximate opposite of conservative index fund investments.

ETFs are (in this context) just a convenient way of buying modest amounts of an index fund.

Index fund companies like Vanguard charge a very low, extremely reasonable commission for both direct purchases and ETFs.

No no no no no. When you do this, you are:

1) Reinventing malloc for no good reason 2) Opening yourself up to a whole world of security holes

See Bob Beck's talk on the first 30 days of LibreSSL. Heartbleed wouldn't have been nearly as catastrophic if OpenSSL just used the system memory allocator like normal people.

I stopped reading after the first paragraph:

> From September 2014 to June 2015 alone, it repelled more than 30 million known malicious attacks at the boundaries of its networks.

Someone told them about SSHGuard and pf, I presume?

What a wonderful sentence. You can keep concocting winding philosophical sentences like that to defend the dignity of chickens, and the rest of us will keep trying feed people.

Do plants not die? Saying that people are causing death without clearly qualifying that its farm animals is childish.

The environmental issue is legitimate, but they treated it as an afterthought. It also brings up issues of personal liberty and how much we know about vegetarianism's health effects.

And yes, people in the third world eat very little meat. But, you know what? I bet a lot of them want to eat meat. Remember that that argument can be made about anything even remotely nonessential.

Christ. Has it ever occurred to these hipsters that factory farming feeds people? It's simple science that conventional farming is the only way to feed 7+ billion (soon to be 9+ billion) people. And referring to slaughtered chickens as "contributed deaths"... This makes me sad because I once had a little faith in this project.

It's really not that hard to install it yourself...

It's funny, one of the other top comments here is about how many features Firefox is removing. Vital, core stuff, like setting being able to set custom user agents for specific domains...

I think the real reason many people are angry is that their demographic isn't catered to. I'm part of that demographic, and it does annoy me sometimes. However, unlike Debian/systemd, I find the tradeoff definitely worthwhile.

You're being pretty grim. Hello is fucking awesome, and while I don't use Pocket it isn't the end of the world. Firefox isn't Lynx, but even as a Unix guy I enjoy and appreciate it. I also appreciate that they're trying to be more attractive to the masses, which is societally beneficial.

> For example you can no longer set the User Agent string on a per site basis natively in Firefox preferences [0].

This seems like a uselessly fine-grained control. I was surprised to hear that they ever supported it.

Search the OpenBSD mailing list archives. Someone there got it working but ran into some problems.

> many

Who?

Some tasteful flaming is healthy in situations like this. Many people consider systemd to be a hijacking of the projects that they base their careers and livelihoods on, and many people see hundreds or thousands of hours of work they've invested being steered in an unsavory direction by a corporation or three.

Journalists need to start making a stronger distinction between Tor end-use and hidden services. End-use is solid - hidden services are experimental.

That said, the fact that this research can identify what hidden service a user accesses skirts that line. On the other hand, that doesn't sound too different from a typical timing attack (something that Tor doesn't try to prevent).

Don't be simple. This can reveal people that are using proxies like Tor and VPNs, and it's already being exploited by trackers:

https://webrtchacks.com/dear-ny-times/

In many cases, this is a bad idea. For example, this is eventually equivalent to blocking Tor. I've been dealing with this issue lately.

Oh, jesus. They got $20,000-50,000. Such sellouts, right?

Have you looked at Linux's sponsor list and budget lately? Good thing they GPL'd it - otherwise it might have ended up powering an intentionally obfuscated and user-restricting codebase like Android...

OpenBSD gets less money per unit societal value than any other software project I'm aware of.

> Except for some basic UNIX tools, like grep or make, it's almost impossible to find anyting that's truly finished, not simply abandoned.

Much of the stuff in the OpenBSD base.

thttpd also comes to mind.

People pay with their privacy. Google's support is generally considered to be somewhere between dismal and nonexistent for most of its services. Clearly, they're making enough money to be doing better.

No one expects intensive 24/7 support for free webmail, but Google's balance of profit and support is off. Free-tier users aren't cattle, especially not when you're tracking them.