FizzyOrange

joined 2 years ago
[–] FizzyOrange@programming.dev 1 points 1 week ago (2 children)

Interesting how do you do that exactly?

I was thinking you can just start the app that has permission to read the wallet, attach a debugger and then inject code to dump the wallet. It's definitely more complicated than reading a plain text file but not fundamentally less possible.

But really if you have that level of access it's game over anyway and you just MitM sudo and get root access, or use one of the many local privilege escalation vulnerabilities and get root immediately.

[–] FizzyOrange@programming.dev 15 points 1 week ago* (last edited 1 week ago) (4 children)

They should be keeping them in something like kwallet. But in practice they don't because a) there isn't really a single standard for that on Linux (yeay, I have to support gnome-keyring too!), b) it's a lot more work than using a plain text file, c) the UX is considerably worse, and d) the security benefits are marginal at best (especially if you have full disk encryption).

Plain text is the most sensible option.

[–] FizzyOrange@programming.dev 8 points 2 weeks ago

Yeah you probably can't do to much more to pwd or yes or whatever (yeah I know about the silly optimisations). I think once you get much beyond that there are always more features you can add. Even for something like cd, people have made fancier versions with fuzzy matching and so on.

[–] FizzyOrange@programming.dev 25 points 2 weeks ago

Nah it was eternally annoying that it didn't support Unix line endings. Also there are clearly a ton of basic features that people want from lightweight text editors.

[–] FizzyOrange@programming.dev 15 points 2 weeks ago (1 children)

A whopping 3% of their workforce.

[–] FizzyOrange@programming.dev 1 points 2 weeks ago (1 children)

Right but it's fast(ish) in spite of that. It would still be better with separate types.

[–] FizzyOrange@programming.dev 5 points 2 weeks ago (5 children)

Experience has shown that having a map as your only data structure is definitely a mistake. It's much better to support real arrays too. I doubt it would have made the implementation significantly more complex either (maybe even simpler for luajit).

[–] FizzyOrange@programming.dev 2 points 3 weeks ago

This has been the norm for literally decades. Doxygen was doing it in 1997 and I'm sure it wasn't the first.

[–] FizzyOrange@programming.dev 6 points 3 weeks ago

Uhm, ship both. Most type systems are not expressive enough to 100% explain the correct use of an API.

[–] FizzyOrange@programming.dev 4 points 3 weeks ago

In my experience unless you are pretty much immediately popping the stash it's much better just to make a branch and do a normal commit. I would recommend avoiding git stash in general.

[–] FizzyOrange@programming.dev 2 points 3 weeks ago

Why? MATLAB is pretty dense normally, and most MATLAB code is hacky scripts that wouldn't bother with "boilerplate" anyway.

[–] FizzyOrange@programming.dev 1 points 3 weeks ago

Oh that reminds me. I wouldn't recommend PIC in the 21st century but there's a really cool project called BIO that is an open source alternative to Raspberry's PIO (programmable IO). It's RV32-E with custom x16-31 registers that control the pins directly. Very neat idea.

It's by Bunnies Huang and he talks about it in this talk about Xous.

The hardware is (or will be) here: https://www.crowdsupply.com/baochip

May be a bit hardcore for a beginner though.

view more: ‹ prev next ›