• 0 Posts
  • 134 Comments
Joined 2 years ago
cake
Cake day: June 23rd, 2024

help-circle


  • The Problem with open source is, it relies on self exploitation. Most OS Dev don’t get paid, so they’ve got to work another jib full time. This leads to a lot of burned out devs from their project and that is a real problem.

    Before a project becomes self sufficient on donationa, it needs to become really big. Most projects simply never reach that scale.





  • Its timing based. When piped a script, bash executes each line completly before taking the next line from the input. Curl has a limited output buffer.

    1. Operation that takes a long time. Like a sleep, or if you want it less obvious. A download, an unzip operation, apt update, etc.
    2. Fill the buffer with more bash commands.
    3. Measure on the server if at some point curl stops downloading the script.
    4. Serve a malicious payload.


  • Has the same vibes as anthropic creating a C compiler which passes 99% of compiler tests.

    That last percent is really important. At least that last percent are some really specific edge cases right?

    Description:
    When compiling the following code with CCC using -std=c23:

    bool is_even(int number) {
       return number % 2 == 0;
    }
    

    the compiler fails to compile due to booltrue, and false being unrecognized. The same code compiles correctly with GCC and Clang in C23 mode.

    Source

    Well fuck.