🦀 Bad news everyone - unwrap() is the reason behind cloudflare outage
>The FL2 Rust code that makes the check and was the source of the unhandled error is shown below
https://t.co/pZAHuuPNrO
Recently, there was a clash between the popular @FFmpeg project, a low-level multimedia library found everywhere… and Google. A Google AI agent found a bug in FFmpeg.
FFmpeg is a far-ranging library, supporting niche multimedia files, often through reverse-engineering. It is entirely the result of volunteers and a marvellous piece of technology.
For people who have never been on the receiving end of ‘security researchers’, it is difficult to understand why there is a pushback against them.
Think about the commons. In Quebec, these are pieces of land where farmers send their cows during the summer. It is collectively owned, like FFmpeg.
Everyone is responsible to care for the commons if they are using it. If you are not using it, you are supposed to stay away.
Now, imagine a rich corporation comes in and sends its well-paid agents into the commons to find issues with it. Maybe a broken barrier or a dangerous hole. So far so good… But instead of fixing the issues, the corporation says “you have a month to fix the issue or else I will report you to the government”.
How much love would the big corporation get in this context?
Why do the security researchers insist on disclosing the issue without having contributed to fixing it? So that they can get credit for it. That's their entire scheme: find issues, irrespective of whether they affect the use case of their employer... after all, all issues no matter how small can be potentially significant at some point... and then brag about it without doing the hard work of trying to fix it.
Let me be clear that no everyone working in security behaves this way. Many are good actors. But there are enough 'security researchers' behaving as parasites that it has become a recognizable pattern.
« But Daniel, who should be fixing the bugs then? »
If you are paying for commercial support, then get in touch with the folks you are paying. If you are not paying, then it is on you.
It says so in the licenses. It is part of the moral code open source. It is part of the legal framework.
Let me be clear. You do not get to bite back at Linus Torvalds if a bug in the linux kernel crashes your server. What you do is that you identify the issue, narrow it down and propose a fix. If you cannot do it, then you pay someone to do it. Or you just do not use Linux.
*Mitsuba 3* is now available! It's a major redesign of the lab's infrastructure for differentiable rendering building on the Dr.Jit just-in-time compiler announced yesterday. Full video link: https://t.co/WnfnRWiICm 1/10
A story that often remains untold. On Saturday July 16th, Search & rescue team from #Kosova🇽🇰 answered an emergency call from #Albania🇦🇱 authorities to search and rescue #Serbia🇷🇸 mountaineers stucked in Albanian Alps. 🇽🇰 team responded quickly & were able to locate/find (1/3)
C2V is finally out! And it can translate DOOM!
https://t.co/J0mFCILIAC
YouTube demo video: Translating DOOM from C to V, building and running it!
https://t.co/uADBgX8dIB
Share if you care!
🇦🇱Albanians in 🇷🇸Serbia are being stripped of their basic civic & citizenship rights by the 👉Serbian government.
Hear first-hand testimonies of 🇦🇱 from 🇷🇸 who have become effectively stateless people (w/English tran.)
https://t.co/HS0yjncyVK via @YouTube
Integration with C, simplicity/elegance and V shell are three of the main features that makes me love @v_language . This is an example of V shell script.
In Memoriam: Yulia Zdanovskaya, a 21-year old mathematician, was killed on March 8th, 2022 during a Russian forces attack on Kharkiv, Ukraine. In 2017, Yulia represented Ukraine at the European Girls' Mathematical Olympiad and won a silver medal at the competition.
📣 Thirrje e hapur për regjistrim në trajnimin: “Dizajnimi i PCB me KiCAD”
Bashkë me trajnerin @erdetn, kemi me dizajnu një pllakë (development board) me një mikrokontroller dhe qarkun përcjellës.
📆Aplikoni në https://t.co/BrXFF9D498 deri më 10 mars!
ℹ️https://t.co/M9egrypDwR
Serbia plans to maintain its neutral position regarding Russia despite enormous pressure building on the country to participate in sanctions directed at the Kremlin https://t.co/7wmHVK7vlr