bowlofstew

I went down a similar path with my "system" albeit hard to call it that but moreover an itch that needed scratched. I found both of these sites useful for bouncing ideas around with other like-minded individuals.

     nuclearphynance.com
     forum.wilmott.com

It is real and they have done similar auctions in the past.

http://www.nbcchicago.com/blogs/ward-room/Program-Offers-Eng...

Thanks, I had not seen that channel before.

Awesome work over at the Mozilla team! This is way better than what I would expect after using Opera, Brave, and others on iOS.

I have been using this build today and like it. My only minor gripe is the selection of only 3 locations for the VPN. This one doesn't so far from what I see but then again, it is free.

Yes, the good guys will use it in many ways that were never intended....

http://www.nytimes.com/2014/07/21/us/politics/edward-snowden...

This is a nice contribution to OSS. Why C++98 though?

Seriously, gtfo on this one? I didn't know warez posting was permitted here.

That is an incredible loss for Facebook. Congratulations to the D foundation and community though!

I couldn't agree more. I like how he is very pointed at C/C++ and doesn't mention any of the safer, garbage collected languages....OH NOES, they have issues too!

Java: https://www.exploit-db.com/exploits/36101/

.NET: https://www.exploit-db.com/exploits/35280/

Python: https://www.exploit-db.com/exploits/33251/

At least my code/data running in "the cloud" is safe:

http://www.jcomputers.us/vol9/jcp0904-30.pdf

https://www.cs.unc.edu/~reiter/papers/2012/CCS.pdf

I can keep going here but you get the point. Perhaps he should have also taken it further and proposed that we move onto Mill processors since the underlying hardware has a history of issues:

sinkhole: https://www.exploit-db.com/exploits/37724/

rowhammer: https://www.exploit-db.com/exploits/36310/

Yes in C/C++ you can make mistakes (#gotofail) but in other languages, I would argue you can fuck-up in ways that are not nearly as obvious such that static analysis can't catch. A nicety about C/C++ is the tooling has gotten pretty damn good over the last 43 years (clang, gcc, valgrind, etc) and can catch most of these kind of bugs. The onus is on the developer to do the correct thing though and it appears that over at Adobe, etc that they (historically) could give 0 shits about doing this. It honestly seems to be though, that they are tightening up things.

Perhaps we should rebuild everything from the ground up....

Agreed, FUD post there. There is no mention of them trying to track down the phones to the original owners, etc.

So unfortunately the people that you as a sysadmin are protecting against don't care about your need for a buffer to update systems. Once the patch release is out there, the exploit writers know the target and can just create the exploit quickly without a PoC.

previous discussion @ https://news.ycombinator.com/item?id=9592601

That is awesome. I am going to give that a shot today.

+1 catch.

There is also lest:

https://github.com/martinmoene/lest

bandit:

https://github.com/joakimkarlsson/bandit

cpputest:

https://github.com/cpputest/cpputest

Agreed, I enjoy reading it as well. Keep up the great work!

That is a nice tool....nice work!

That isn't working for me. Probably easier to just wget from http://www-afs.secure-endpoints.com/afs/ANDREW.CMU/usr2/apod...

I have similar thoughts here. I have been a tester for their new C++ IDE and previously used emacs. I haven't used emacs since starting the beta test program. It handles modern C++ (11) well but there are still some rough edges (support for all of boost & STL for instance) they are working on. Additionally, it has quick-fixes, code analysis, code generation, and awesome navigation out of the gate....no github repo of configuration required.

That being said, once they release this in production, I'll be buying it on day one and won't look back at emacs.

Very cool and congrats!

I updated and it looked frozen as well. After a long stroll the coffee shop, it appears to have came back and reported a successful update although the "Outdated" icon still shows the same amount as when it started. Regardless, I applaud their efforts.