Brian Smith

[Brian Smith @BRIAN_____]

@dadrian It is? Where can I read about that?

[MrRatable @MRatable]

Unbelievably embarrassing for Google that Gemini hasn’t committed any cybercrimes yet

[Brian Smith @BRIAN_____]

@tqbf @davidcrawshaw Import “math/rand”

[Brian Smith @BRIAN_____]

@TonyAndracki23 His HR/9 is one of the lowest on the team.

[Brian Smith @BRIAN_____]

@veorq Every standard protocol would be P-384+AES-256-GCM without it.

[Brian Smith @BRIAN_____]

@_SamMcGonigle Funny, but by DRS he is 2nd this year.

[Frank @jedisct1]

The epoll uaf https://t.co/grDutada6V

[Brian Smith @BRIAN_____]

@carllerche @alexkirsz @zeddotdev Gerrit has been doing this pretty well, IMO, for over 11 years.

[Brian Smith @BRIAN_____]

@PritchardA20237 @TalkinYanks Except Wrigley.

[Brian Smith @BRIAN_____]

@NateRoper_ What was it before May 6th last year?

[Brian Smith @BRIAN_____]

@d0nutptr How did the branch get eliminated? It didn’t just get moved upward to the code that pattern matches the enum?

[Brian Smith @BRIAN_____]

@__apf__ @groby Just wear the frames without any lenses. That asserts dominance over both groups.

[Brian Smith @BRIAN_____]

@dadrian Would you buy a book on this topic?

[Brian Smith @BRIAN_____]

@rmhrisk @WatsonLadd @CrowdStrike @Microsoft I’m guessing it’s closer to arbitrary code execution, but done in a way that allows dynamic loading beyond what the kernel would allow normally, and routing around authenticode using their own authentication.

[Brian Smith @BRIAN_____]

@conorniland1 @4TheTennis Hello from SoCal. Took about 12 days.

[Brian Smith @BRIAN_____]

@conorniland1 @4TheTennis Shipping is almost half the total cost this way. I hope you get a good deal for the US publishing rights soon.

[Brian Smith @BRIAN_____]

@AlecMuffett @c7five @mer__edith There’s a out of nuances in that (look at how browsers web APIs for file access work and how access is brokered with a fairly convenient UI, which I would love Word to mimic) but I am not sure what that has to do with the tweet you replied to. Note that “silly” ≠ vulnerability.

[Brian Smith @BRIAN_____]

@AlecMuffett @c7five @mer__edith That’s not what I’m saying. It’s poor marketing to do silly stuff with cryptography when the product’s primary marketing is driven by the founders’ crypto expertise—especially when even Chrome (the father of Electron) already addressed the same concern, before Electron existed.

[Brian Smith @BRIAN_____]

@AlecMuffett @c7five @mer__edith Other applications have made better choices for key storage using same tools across the same platforms. I think people do generally expect that higher level of key protection from Signal. However, I would say it hardly matters b/c Electron is an overwhelming security weakness.

[Brian Smith @BRIAN_____]

@tweagio Really nice. Not sure why all the BUILD files still need to be written by hand. It seems like a tool should be generating the initial versions of them, at least. In the past I got stuck with tests because the test environment isn’t the same uunder Bazel as under `cargo test`.

[Brian Smith @BRIAN_____]

@nick_r_cameron @aeruhxi I think the intent is you use Arc/Rc primarily for cases where that advice is true, so if you’re using Arc/Rc then there is a presumption that you want to increment reference counts instead of copying. Maybe people are too quick to reach for Arc/Rc, but that’s a different issue.