1. 160 points 2 days ago

   Fixing a Buffer Overflow in Unix v4 Like It's 1973

   41 comments vzaliva sigma-star.at
2. vzaliva 3 days ago parent

   I've tried it on my project and it always finds one file: package.json. What languages it support? Only javascript?
3. vzaliva Jan 5, 2026 parent

   I like the idea, but I am confused why many of them expressed as code. How I am suppose to use them?
4. vzaliva Jan 4, 2026 parent

   What a fantastic and timely post! Especially coming from i3 maintainer! Michael did such diligent analasys and saved me (and hopefully others) a lot of time. I was considering trying Wayland/sway and this post answered all my questions and showed me that it is not ready, at least for me, yet.
5. vzaliva Jan 2, 2026 parent

   I suspect the price of a ship compared to economic damages caused by the cut cable is negligible. This is what russia calls "assymetric war". The response should be more economic sanctions.
6. vzaliva Jan 2, 2026 parent

   You saying the Finland and Estonia are guilty of russia cutting their cables because they signed an agreement?!
7. vzaliva Dec 27, 2025 parent

   Sounds like something I could use, but installing a binary via `curl` doesn't sit right with me. Next problem you have is "explain how this thing was installed on my system" followed "is it up to date (including security patches).

   I hope they have deb package or snap some day.

8. vzaliva Dec 24, 2025 parent

   Multiple screens support is listed as non-goal. Would that prevent its usage with window managers which support virtiaul desktops? I am i3 user and it is a critical feature for me.
9. vzaliva Dec 23, 2025 parent

   There are many arguable points in this blog post, but I want to highlight just one: the need for formal specification. It is indeed a big issue. However, one must distinguish between a full specification, which is sufficient to prove functional correctness, and a specification of certain security or safety properties, which only allows us to verify those properties. For example, we can easily specify the property that "the program shall never read uninitialised memory" and prove it. That wouldn't guarantee that the program is functionally correct, but it would at least rule out a whole class of potential errors.
10. vzaliva Dec 19, 2025 parent

    If you are sensitive to flashing - do not try to open this link. It is impossible to read because of videos of flashing lights.
11. vzaliva Dec 17, 2025 parent

    This is an excellent idea. But I wold go with Fortran 4 if you looking at authenticity.
12. vzaliva Dec 12, 2025 parent

    I’m vegetarian. The "tastes like meat" claim is misleading. The main issue isn't the taste, it's the texture. Impossible Burger came close. Most mushroom-based substitutes I’ve tried are nothing like it.
13. vzaliva Dec 6, 2025 parent

    common theme: tiled layout, terminals, minimum fancy decorations.
14. vzaliva Dec 3, 2025 parent

    Let me be blunt: this looks like a tantrum. Bugs exist, and they're sometimes fixed more slowly than we'd like, but given the size of the GitHub ecosystem this is probably just one of many outstanding bugs. Blaming AI is baseless - not that it couldn't be true, but the conclusion seems to be drawn from a single issue.

    What does this mean for the Zig project? I haven't heard of Codeberg, they may be great, but for a popular open-source project I'd expect a proper discussion before deciding to move or weighing the pros and cons of different hosting options. From what I'm hearing, Zig is technically excellent but seems to lack level‑headed, mature leadership. That's not unique: many open‑source projects started by brilliant engineers struggle as they grow and need a new leadership structure. That transition can be painful and could even harm adoption.

15. vzaliva Nov 25, 2025 parent

    So basically the brain has "firmware" we're born with, as well as the "software" we install as we grow.

    Sounds a bit like Chomsky's Universal Grammar.

16. vzaliva Nov 19, 2025 parent

    The lack of native Microsoft Outlook support was one of the reasons I've abandoned Thunderbird.

    However, it is still not enough for me to come back. Sadly, corporate life is often organised around email and calendaring. All these endless meetings everyone complains about, which need to be scheduled, accepted, rejected, re-scheduled, etc. The native Exchange support does not yet support Calendar integration. Without it, it will be very awkward to use in a day-to-day corporate environment.

17. vzaliva Nov 13, 2025 parent

    In the academic programming languages research community, the term "transpiler" is barely used.

    For example, Google Scholar search for "transpiler" yields just 3200 results, compared to ~1.4M for "compiler".

18. vzaliva Nov 11, 2025 parent

    Is it me or the linked article seems to be heavily co-authored by AI. The cadence is very monotonic and dull.
19. vzaliva Oct 28, 2025 parent

    For those of us who do not access Thread, if there is a copy elswere we can read?
20. vzaliva Oct 28, 2025 parent

    I want to make a report to to US Department of Justice Antitrust Report Online and US Federal Trade Commission: Antitrust Complaint as suggested but I will appreciate some guidance on the wording. Could anyone share a sample?
21. vzaliva Oct 27, 2025 parent

    It is similarly unsulting to read an ungrammatical blog post full of misspelings. So I do not subscribe to the part of your argument "No, don't use it to fix your grammar". Using AI to fix your grammar, if done right, is the part of the learning process.
22. vzaliva Oct 24, 2025 parent

    This is the right direction - the only way to go about fake images and video is digital signatures. Phone camera should be able to do this as well. Then we can have signatures of software used for processing them (on top) cerityfing what changes have been done: e.g. contract correction filter applied, signed by Adobe Photoshop.
23. vzaliva Oct 22, 2025 parent

    A lot of these scripts could be just shell aliases.
24. vzaliva Oct 22, 2025 parent

    It sounds from the page that it is Android-source-code specific. Why? Could this work with any source code base?
25. vzaliva Oct 14, 2025 parent

    In view of this disclosure I am even more dissapointet T-mobile satellite service (via starlink) does not support Signal messenger.
26. vzaliva Oct 13, 2025 parent

    it requiers subscripiton to Apple ecosystem: closed hardware iPhone, closed-source iOS, app store blessing to distribute. :)

    Could you do an Android version to alleviate some of these hurdles?

    P.S. Do not mean do diminish your achievement. I've tried many these apps which fed me ads or ask to subscribe, so a free alternative is very welcome! Thanks!

27. vzaliva Oct 13, 2025 parent

    I can see this as a hardened VPN in a mission-critical deployment, which could not be as easily compromised as a software stack.
28. vzaliva Oct 7, 2025 parent

    Locked app store was my primary reason staying away from iPhone. Now, this is gone. It also open door for censorship, like disabling ICE-tracking or other politically inconvenient apps. This is a terrible decision for Android and for our freedoms.
29. vzaliva Sep 29, 2025 parent

    It should be noted that cesium dating works for counterits produced in last ~60 years (or less) as Cesium-137 half-life of about 30 years.
30. vzaliva Sep 29, 2025 parent

    bifacial panels indeed produce more electricity. but does it justify the cost increase? simply speaking if bifacial panels cost 2x, do they produce anything close to 2x electricity?

This user hasn’t submitted anything.