News for hackers. Stuff that matters.
Re:Theo de Raadt 'Re: new: lang/zig' by tyingq on Sunday February 28, 2021 @07:43AM (#26293008)
Languages other than C as imaginary enemies.
Re:Theo de Raadt 'Re: new: lang/zig' by spacemanmatt on Sunday February 28, 2021 @07:50AM (#26293039)
He railed against the breathless descriptions not the languages themselves. I still agree with his put-up-or-shut-up position, and with throwing cold water on hype. My trade is engineering, and while I like whimsy as much as most humans, I will fight it when precision is critical.
Re:Theo de Raadt 'Re: new: lang/zig' by tyingq on Sunday February 28, 2021 @08:02AM (#26293117)
"He railed against the breathless descriptions not the languages themselves."

He said Rust obviously had nothing and that proper privsep was exceedingly rare in languages other than C.

Re:Theo de Raadt 'Re: new: lang/zig' by spacemanmatt on Sunday February 28, 2021 @08:38AM (#26293322)
Is he wrong?
Re:Theo de Raadt 'Re: new: lang/zig' by tyingq on Sunday February 28, 2021 @09:17AM (#26293552)
About "Rust has nothing"? That wouldn't be a productive conversation.

On privsep being rare outside of C? What's the measure? I suspect privilege separation is present or not more based on the type of software, not the language used. And I'm sure you can find bad/good examples in software written in C, Go, Rust, Zig, etc.

Re:Theo de Raadt 'Re: new: lang/zig' by paedubucher on Sunday February 28, 2021 @07:45AM (#26293017)
Not willing to use something others suggest doesn't make it your enemy.
Re:Theo de Raadt 'Re: new: lang/zig' by tyingq on Sunday February 28, 2021 @07:48AM (#26293034)
There's all sorts of things in the OpenBSD ports collection that Theo probably doesn't use. A public rant about something you characterize as inconsequential is a bit odd.
Re:Theo de Raadt 'Re: new: lang/zig' by iamatologist on Sunday February 28, 2021 @07:52AM (#26293052)
Sebastien Marie wanted to make Zig work on OpenBSD. I don’t know why Raadt then respondend by saying that Zig hasn’t proved that it can do what it claims to do. But maybe I don’t understand this mailing list’s culture (or what “import Zig” means in this context other then to port to OpenBSD).
Re:Theo de Raadt 'Re: new: lang/zig' by dvfjsdhgfv on Sunday February 28, 2021 @07:57AM (#26293074)
> I don’t know why Raadt then respondend by saying that Zig hasn’t proved that it can do what it claims to do.

I know why. It's because Zig hasn’t proved that it can do what it claims to do.

Re:Theo de Raadt 'Re: new: lang/zig' by iamatologist on Sunday February 28, 2021 @08:04AM (#26293139)
Does an application need to prove it can do what it claims to do before it can be ported to OpenBSD? Seems like a high bar. :-)
Re:Theo de Raadt 'Re: new: lang/zig' by dvfjsdhgfv on Sunday February 28, 2021 @08:26AM (#26293262)
It's not a high bar, just plain honesty. I remember a while ago someone was promoting a language called v, making many claims of which some turned out completely untrue. This might be a norm in commercial software - some people believe that you can't sell anything if you don't exaggerate - but the open source world in general prefers a more honest approach. Hence many projects always remaining at 0.x release, for example.
Re:Theo de Raadt 'Re: new: lang/zig' by spacemanmatt on Sunday February 28, 2021 @08:40AM (#26293338)
It is a high bar that makes OpenBSD in security-sensitive roles way more appealing than a distribution with a lower bar. That high bar paid for itself repeatedly when I ran OpenBSD in the late 90s and early 2000s.
Re:Theo de Raadt 'Re: new: lang/zig' by tyingq on Sunday February 28, 2021 @09:21AM (#26293573)
That's true, but not for the ports collection. There's all sorts of software there with historically bad track records in security. That's the point...it's just ports of a bunch of popular software.
Re:Theo de Raadt 'Re: new: lang/zig' by iamatologist on Sunday February 28, 2021 @09:08AM (#26293502)
Fair enough.