Domain: medium.com
Stories and comments across the archive that link to medium.com.
Comments · 634
-
Re:An American patent?
It doesn't matter. The purpose of IP (in the US) is "To promote the progress of science and useful arts, by securing for limited times to authors and inventors the exclusive right to their respective writings and discoveries."
If a patent or copyright makes a reasonable profit during it's term, the intent of those exclusive rights is met. Beyond that, locking up IP impedes progress, since others can't freely build on the original. Disney built their business using the works of the bros. Grimm, Hans Christian Anderson, Mark Twain, Lewis Carroll, Kipling, etc., but now work diligently to steal our culture from us by preventing newcomers from doing similar.
There are very, very, few inventions or works which are created with an expectation of not making good profit in less than 20 years (or for copyright, 14 years, plus one extension if the author was still alive, which was the original copyright term - patents were a bit shorter in general). And if something is going to take that long to provide enough public benefit to make a profit, it's probably better to open it up to 3rd party improvement sooner, so there's an opportunity to make it better. -
Discrimination?Here's the extract from TFA:
People spend weeks preparing for this process, afraid that the interviewer will quiz them on the one obscure algorithm they haven’t studied. “A cottage industry has emerged that reminds us uncomfortably of SAT prep,” Karla Monterroso, VP of programs for Code2040, an organization for black and Latino techies, wrote in a critique of the whiteboard interview. “An individual can spend thousands of dollars learning the cultural norms necessary to get themselves into a desk at a technology firm.”
Firstly, isn't most of this information online for free? If you have the skills necessary to work as a software engineer then it shouldn't take much time to practice and learn the skills necessary for interview. No matter which job that I apply for I have to take time to research the company, learn about their ethos, modus operandi and be able to explain to them how I'd fit in. I also have to exhibit the skills relevant to the job, which in this case is the much hated whiteboard but could equally be through presenting a portfolio, examples of past work and answering their question as they crop up. This isn't anything unique to software engineering, it applies to pretty much any professional job, whether something as low paid as an "administrative assistant" or more advanced roles as a translator or software engineer.
After reading the rest of the medium article, all that it seems to state is that the interviewing for tech roles is broken by prioritising algorithms which may not be relevant to the role posted. Again this isn't discrimination, it's a testing of unnecessary skills or are white males born with an innate ability to spew forth algorithms which they are unfamiliar with?
Have I missed something here, are interviews genuinely discriminatory?
-
Discrimination?Here's the extract from TFA:
People spend weeks preparing for this process, afraid that the interviewer will quiz them on the one obscure algorithm they haven’t studied. “A cottage industry has emerged that reminds us uncomfortably of SAT prep,” Karla Monterroso, VP of programs for Code2040, an organization for black and Latino techies, wrote in a critique of the whiteboard interview. “An individual can spend thousands of dollars learning the cultural norms necessary to get themselves into a desk at a technology firm.”
Firstly, isn't most of this information online for free? If you have the skills necessary to work as a software engineer then it shouldn't take much time to practice and learn the skills necessary for interview. No matter which job that I apply for I have to take time to research the company, learn about their ethos, modus operandi and be able to explain to them how I'd fit in. I also have to exhibit the skills relevant to the job, which in this case is the much hated whiteboard but could equally be through presenting a portfolio, examples of past work and answering their question as they crop up. This isn't anything unique to software engineering, it applies to pretty much any professional job, whether something as low paid as an "administrative assistant" or more advanced roles as a translator or software engineer.
After reading the rest of the medium article, all that it seems to state is that the interviewing for tech roles is broken by prioritising algorithms which may not be relevant to the role posted. Again this isn't discrimination, it's a testing of unnecessary skills or are white males born with an innate ability to spew forth algorithms which they are unfamiliar with?
Have I missed something here, are interviews genuinely discriminatory?
-
Re:mode complexity
So there's currently nothing to fix in the sense that these companies could freely implement such technologies and just choose not to.
There is a technology fix to this problem -- and almost all the others, large and small. If I could code I'd already be writing it. https://medium.com/@arthurfont...
-
Re: The Guardian goes full racist
Actually, there is no "official" Black Lives Matter, so you're making a false claim there. Perhaps you're just ignorant, and don't realize that the group lacks an organised structure.
Actually, there is. And I linked to their site, explained why they were considered founders and that other major organizations were acknowledging them as such. If you're calling these women liars, please say so. And provide evidence.
I could go searching on Youtube for the dozens of different video clips I've seen of groups of people chanting the same phrase that's at the top of the BLM website, the quote from the most wanted terrorist with a $2M bounty on her head, but not for an AC. You're going to have to at least log in to make me do the legwork for you.However, it seems you don't know that your attempt at guilt-by-association is also false
The context here is the banning of entire subs. In the other post where I discussed this point, I made a more explicit rejection of guilt by association. People who unknowingly tweet their support or even unknowingly join protests are not automatically sympathizers with everything they do and stand for.
But it's still a real organization with real goals that, by their own admission, go far beyond ending police brutality.Be a little more aware, it looks desperate when you make such far-fetched attacks.
And it looks dumb when you post pathetic denialism as an AC. Go educate yourself. If you want to call those women liars, if you want to prove proof that statements ilke 'over 30 different BLM regional chapters exist' are lies then please, be my guest.
-
Re:"Labor Shortage"
Except talent is bullshit. Don't push the mythical creator nonsense where people are born with certain abilities or they aren't. What people call talent is actually a person's persistence in pursuing a skill and being passionate enough about it to become an expert. The easiest way to show this kind of progression is through visual artists: https://medium.com/@noahbradle... Artists don't wake up one day being talented, they spend decades improving their craft. The same applies to any skill, including abstract thinking. Anyone can have a talent for abstract thought, they just need the interest and dedication to improve that skill.
-
Re:Critical mass?!?! DAMN that Trump!
Especially now that he might get 19% of Rosneft, Russia’s state oil company ( https://medium.com/@yonatanzun... )
-
Re:'Developed a Clear Preference' For Trump
And that's probably related to why our western liberal democracy is one of the least free and least repsentive of the people.
I don't see any evidence this is true.
Besides, 49 of those small elections violate the 14th Amendment: https://medium.com/equal-citiz...
How... novel.
-
Re:'Developed a Clear Preference' For Trump
most of us have always wanted the EC to go away, and to use a normal electoral method...like every other western democracy in the world.
further, the EC as implemented by the states, violates the 14th Amendment: https://medium.com/equal-citiz... -
Re:'Developed a Clear Preference' For Trump
-
Re:'Developed a Clear Preference' For Trump
And that's probably related to why our western liberal democracy is one of the least free and least repsentive of the people.
Besides, 49 of those small elections violate the 14th Amendment: https://medium.com/equal-citiz...
-
Re:First rule of journalism.
For a long time articles on Ars by Jon Stokes pretty much set the standard for enthusiast rehash. Plenty of real journalism could only wish to be as good as much of what Jon wrote back in the day.
Can't say, though, that I'm as impressed with his recent output.
But I'm even less impressed with this:
The AR-15 has to go: Sorry, Jon Stokes, but your toy isn't more important than people's lives
-
Re:NSA playbook?
Seems par for the course
-
Re:I hope those in power learned
all the county breakdown does is magnify the problems of the electoral college by counting even more arbitrary lines on a map, instead of people.
that way, instead of one WY voter having equal weight as 3 CA voters, you can have one voter from Bumphuk County Alaska, having the same impact as 5 million voters from LA County CA, further diluting those damn non-republican voters.
which is why the GOP loves it, and their proposal for EC reform involves switching from state level, to county (or congressional district) level.
compared with democrats simply wanting to use the basic democratic model used by every other democracy of one person, one vote, and in order to win, you gotta appeal to each individual person, rather than a handful of under populated states that have disproportionate representation (in violation of the 14th amendment)
and no, the founders weren't universally smart. the EC is a prime example of one of their big mistakes, being amended 3 (4?) times in quick succession, and the whole thing being obsoleted and its entire purpose undercut the moment political parties came into existence.
-
More Evidence of my GW Dissent Hypothesis
I know, you're already modding me down as "Off Topic" or "Over-Rated." What people are trying to sell me as a Man Made Global Warming is nothing more than a change in our Magnetic Field that's letting things in that it shouldn't be. Want proof? Want Evidence? Look no further than the Global Historical Climatology Network Dataset hosted by NOAA. The Pan Evaporation rate explains it all. If you map out the average delta from over time, you'll find no argument for any significant global warming AT ALL from 1950 to 2005. After 2005 something goes a bit queer. Negative deltas start to vanish during Solar Minimum. Cosmic Rays in excess? Then with the last solar cycle, the delta follows it. Why would the latest solar cycle show in the evaporation rate, but not prior ones? Solar storms leaking through the Earths EM? But, no, data-driven dissent of Global Warming is entirely unacceptable.
-
Re:so is there a good theory?
I know ethan is not loved here anymore, but: https://medium.com/starts-with...
-
Form over Function, thats why
Or as this article puts it more eloquently:
https://medium.com/@eshan/the-...
With open source software like Firefox it is more a failure of having the right people (engineers) at the right positions (the decision making ones). Instead they are left chasing the latest widget "feature" that no one ever asked for.
For a long time I thought that the "standard" Firefox was already bad, until I switched to my Tablet 80% of the time: Firefox for Android is just plain torture. Multiple crashes every day. Most of the time when clicking on a text field or adress bar, FF apparently hates those. other times its idling and crashes for no reason. Not to mention its hunger for memory. Unfortunately it is the only browser there that has all the features I need via addons (Mostly adblock and noscript). Opera is much better, unfortunately its adblocking is faulty and it does not recognize my hardware keyboard at all.I remember my wikiwalks back in 2005-2007: I used to have 50-130 tabs open and nothing bad happened. That was on a Laptop from 2004 with a single core CPU. So really, it has gone downhill by orders of magnitude.
-
Bad software endangers software development
The reality is most companies don't care about security.
When was the last time your boss added a security audit to your sprint? When was the last time someone said, "make sure you add enough time on this task to make it secure."? Security is not a priority for companies, so we don't spend time thinking about it.
For these reasons I advocate irresponsible disclosure: we need to give companies motivation to improve their code. -
They are all USB ports now
Okay, so the Touch Bar is really useful...but can you honestly defend the loss of USB ports?
What loss of ports? It has four!! All of them are USB and power too, it's actually pretty amazing. And all of them are orientation-neutral (you can plug them in either side up).
The actual PLUGS may be a bit different but time and adaptors heal all wounds. In the long term having them all be the SAME plug is way more awesome.
Being a Slashdot reader how can you seriously be *against* a change that is better for hardware people?
If you lose your dongle or it dies or breaks
The are like $2 each, I have four as they are cheap and tiny. How would they "break" anyway, basically being a passthrough??? Being so cheap an plentiful I have a number of them here and there, I don't worry about not having one with me.
there's no possible excuse for it except to drive the sale of dongles.
Or, you know, not wanting to keep users having to use a shitty ancient standard until the end of time. Which I guess you are for? What an asshole!
-
Re:Total Coincidence
You have a weird model of investigations where someone needs to prove things before actually investigating. It may indeed prove that nothing can be found here. But the only way to know that is to actually examine facts. Declaring that there's nothing to be found without even looking just makes you look biased.
Anyhow, it's not as if we haven't seen pedos in places of power before. Here's a big list:
https://medium.com/@LoriHandrahan2/daniel-rosen-s-arrest-1f7befb1762c#.sa25w4uo3I'm not going to claim anyone is guilty of anything without proof. However, anyone who starts yelling and screaming for people to stop looking is just going to make themselves look more suspicious. You don't normally get well-connected media types to all jump on a story like this...
Well there ya go. It's gone past slandering and harassing innocent people and now some nut nearly went on a killing rampage because of this "investigation".
-
Re:Total Coincidence
You have a weird model of investigations where someone needs to prove things before actually investigating. It may indeed prove that nothing can be found here. But the only way to know that is to actually examine facts. Declaring that there's nothing to be found without even looking just makes you look biased.
Anyhow, it's not as if we haven't seen pedos in places of power before. Here's a big list:
https://medium.com/@LoriHandrahan2/daniel-rosen-s-arrest-1f7befb1762c#.sa25w4uo3I'm not going to claim anyone is guilty of anything without proof. However, anyone who starts yelling and screaming for people to stop looking is just going to make themselves look more suspicious. You don't normally get well-connected media types to all jump on a story like this...
-
Re:When do we switch to OpenBSD?
It's why we need full and embarrassing disclosure, to motivate companies to take security seriously.
When companies start failing because of lack of security, then we will see them take it seriously. Not before. -
Re:Change the law
But maybe you know more than he does.
Quite a lot of people, now with third level qualifications, a vast array of information at their digitial fingertips, well read on current affairs, and who have followed a number of political and legal cases, in fact know quite a bit more about the electoral college and its legalities than some Harvard Law Professor who lives in the same social, cultural, intellectual, and economic bubble where the rest of the media commentariat physically and mentally reside.
Let them vote Clinton.
Let them eat Cake.Let someone actually go online and tell me that Marie Antoinette never said the latter because that's what people are able to do in a few clicks now. Go straight to the source and challenge or accept the declarations of Harvard Professors et al for themselves.
Of course, Herr Professor and his ilk will sneer at shallow understanding and lack of "real education". Meanwhile the world continues to implode in slow motion under the stewardship of the Intellectual yet Idiot class, in spite of their perfect resumes, and for the first time in human history the majority of the population has the capability, means, access, and (especially if they're unemployed/stuck in commutes) the time to prove in a few minutes that these people are Bullshitters and very often Complete Liars.
Clinton was supposed to be leading by 5-15% in the polls. Literally. She was supposed to have a 90% chance of winning. I had every newspaper in the country -- the world -- and every "learned" Harvard professor and equivalents telling me the same.
I feel like I'm living in the Soviet Union. So forgive me if I don't immediately fawn over the credentials of yet another "really smart guy" from an Ivy League Institution when it comes to this elections, or just about anything these days really.
-
Re:Why won't Democrats support the outcome?
"Why won't Democrats support the outcome?"
You do realize that the Democrats do support the outcome, right? Hillary Clinton conceded and called on her supporters to accept the US election result. Hillary's campaign is not contesting the election.
The article in question here is from a computer security specialist who is not with the campaign or with the Democratic party saying that the Democratic party should ask for a recount
-
Re:To do it properly, let's dump Android
I hate apps, now a more influential commentator has followed this line of thought, this week: https://medium.com/javascript-... They break the philosophy and freedom of the web,
This, my friend. Help spread the word. Lets go back to the real WWW.
-
To do it properly, let's dump Android
As far as I'm concerned Android is a sticky layer of ugliness, spyiness, syrupiness and general insecurity attached with sticky tape onto the top of a Linux kernel. Most of this shit is written in Java, the COBOL of the 1990s with it's murky license and endless lines of code, to do one little thing.
Secondly as I've said here: https://slashdot.org/comments.... I hate apps, now a more influential commentator has followed this line of thought, this week: https://medium.com/javascript-... They break the philosophy and freedom of the web, as if Facebook etc. hadn't done that already (as a friend said, I used to surf but now I visit 'sites').
All in all, my old friend William of Ockham: https://en.wikipedia.org/wiki/... is spinning in his grave right now and dreaming of a non-Android, non 'apps', non-commercially tied future. Like John Lennon, I'm probably dreaming, but just 'imagine'... -
Re:This is kind of ridiculous...
If your account is disabled you should have every right to know why and there should always be a path to correct it.
If your account is disabled because they suspect you are actually an identity thief who stole the account, they probably don't want to tell you what gave you away. This totally sucks if you are the genuine owner of the account.
There was a path to correct it. The story is newsworthy because for some reason the normal way to correct the problem wasn't working.
I'm an Apple user
I guarantee you that a similar problem could happen to you. Move to another city and it might look like you are an identity thief; then, one Apple employee screws up and you might be rejected in the appeal. Google doesn't have a monopoly on that.
P.S. Consider how Apple treats the people who submit apps to the App Store, and they paid $99 for the privilege.
https://medium.com/@alariccole/apple-literally-stole-my-thunder-253aed27a455
-
It goes like this
Threaten to kill the President-elect: It was just a joke
Physically attack another girl for posting a pro-Trump message on social media: We don’t want a mistake during a highly emotional and intense time to affect her long-term futureClaim that someone pulled on your hijab with no physical evidence: We will Not Tolerate “Hate Crimes” in San José
-
Re:Implementation not protocol
If only the implementation had been written as carefully as the specification. But it won't be, because companies are lazy.
-
Re:This just in
Sadly, this is not true.
-
Re:Neel Mehta is a real crumbum
Not only that, the arguably ethical thing to do is to always disclose. In most cases the exploits are being actively used (see previous link).
-
Re:How is this a problem, exactly?
Counterargument. Essentially, there is no way to know that this exploit wasn't being actively exploited (and let's be honest: five months to fix the bug means they aren't taking security seriously).
-
Re:why?
They're not actually building a new browser engine, much less calling it Quantum. This is an internal project name (project, not product!).
If I understand correctly, they've been experimenting with Servo, a browser engine they've built using the Rust programming language. Rust aims for speed, concurrency and safety, which is highly desirable but hard to achieve on modern (multi-cpu/multi-core) devices using conventional programming languages.
Now their plan is to gradually replace bits and pieces of Gecko (the current rendering engine) with parts from Servo. This is a process they already started and which will take some time to complete. Some of the benefits are already present in their nightly browser builds, others at least sound very promising.
If you want to learn more about the project and/or the resulting transition, take a look at these articles (the post at softpedia is quite misleading IMHO):
- https://medium.com/mozilla-tech/a-quantum-leap-for-the-web-a3b7174b3c12#.s4zttcbxe
- https://billmccloskey.wordpress.com/2016/10/27/mozillas-quantum-project/(I hope this helps to clear up some of the confusion)
-
Re:Renewables will never work
And it seems the folks here forget that 'renewable capacity' has nothing to do to what they actually end up generating.. Sort of like 'instantaneous peak output power' they used to hype in stereo equipment.
And of course power can be stored - the question is at what cost - if the cost is magnitudes higher than the cost of generation, I'm not going to do it.
Battery power is expensive power - REALLY expensive power.
The renewable industry is all about controlling people by selling a false narrative.
The cost of renewables never seems to include the cost of the back up power plant cost for nights when the wind does not blow...
This is a good example of a bed of Procrustes... by the Intellectual-yet-idiot class...
-
Re:Why?
iMessage does more than SMS - it supports things like encryption, photos, group chat, continuity (start a conversation on one device, and continue on another), etc. If an iMessage user talks to a non-iMessage user, then you're right, it does route the message over SMS, but with reduced functionality.
Now here's where Apple got clever (or evil, if you're an Android user like me). Normally the messages that you receive are drawn inside blue bubbles. But when you're talking to a non-iMessage user, their messages appear in green bubbles, to let you know that some functionality won't be available. To an iOS user, another way of viewing this is: the person you're talking to has a shitty phone which doesn't support all the awesome things that an iPhone does.
This is particularly noticeable when you're in a group chat. If one of the people is a "green bubble", then the whole group chat is routed over SMS and therefore functionality gets degraded to support them. The Android user essentially drags everyone with them back to the dark ages of SMS, and Apple subtly shames them with green bubbles. The Android user doesn't even notice this, but every iPhone user does.
For just basic functional messaging, this doesn't matter - SMS gets the job done. But for social chatting, it can be a problem. When kids these days want to start a group chat using a feature that isn't supported by SMS, they'll have to decide whether to forget about that feature, or just not invite the Android user.
I've spoken to one iOS-using college student who says that even though Android phones are on par with iPhones (not better, just on par), iMessage is the one thing that keeps her from even considering Android. If you're in college trying to make new friends, your choice of phone can get in the way of your social life!
There's plenty more "green bubble" hate if you search on Google. Here's an example: https://medium.com/message/its...
-
Re:Dns
-
Re:Best part about LinkedIn!
I especially like it when someone only marginally associated with me gives me an endorsement for a skill I do not possess. "Oh, yeah, he's a computer guy - I'll endorse him for PC Repair and Excel Pivot Tables".
Okay, technically I can repair a PC. And I certainly could figure out pivot tables if I had a reason for doing so. But even so, I really wouldn't those to be listed as part of my professional skill set - I'd rather work at Jimmy Johns than do either one.
Maybe a better example is my recent endorsement for Java. I haven't even looked at Java for, I dunno, maybe 15 years? And even back then, I didn't do much more than poke at it.
Unfortunately no one has endorsed me for Bow Hunting yet...
-
Re:How so?
The hackernoon link seems rather oriented toward simple, hack-it-together sorts of applications. Yes, if you're just making a personal web page or something you probably don't need a complete build system or anything like that.
Sadly, that's not the case. The whole Javascript/front-end development scene is awash with tools/libraries du jour; what this article calls "magpie front-end developers". As the cited Airbnb example demonstrates, there's a quite a few large web development teams using shiny new things because they are "cool" but that don't add much (if any) business value.
-
Re:Holy flamebait batman!
The jobs aren't going away because people here are being replaced by better technology, the jobs are going away here because people are being replaced by workers in other countries who can work for less.
That's what has been happening, and will likely continue. But those outsourced jobs are now also disappearing due to technological advancement. When it's cheaper to buy machine labor than pay workers in China $5 a day... those jobs are never coming back, to any country.
Deep Learning Is Going to Teach Us All the Lesson of Our Lives: Jobs Are for Machines
This is one of the better articles I've read with some interesting sources. Apparently there is an AI that is being tested to handle customer service calls. It ramped up to handle 6/10 calls at the call center tested within 2 months and could potentially put 250 million people out of a job.
-
Re:Holy flamebait batman!
It is well known that the majority voice - both in staff and readers - at slashdot has leaned conservative for over a decade now.
It's not a conservative or liberal issue, it's a fringe issue. Gary Johnson is open to the idea, and Milton Friedman supported something similar (he called it negative income tax). Bernie Sanders is ambivalent in his support for it.
In a world where we are deciding an election based on whether to invade Russia, whether reality TV qualifies you for the presidency or not, whether it's worse to grope a woman or defend a groper.........and in a world where people decide the answers to those questions based on whether it matches their 'team' or not......the words 'liberal' and 'conservative' mean nothing.
Politics is a team based sport, and people vote that way. The issues are less important than the team winning. And frankly, if you investigate your opinions and find that they match more than 80% with either party's platform, then you are playing the team game. Stop and think. -
Re: Another reason to use 2 factor auth
Unfortunately, I can't claim that was the problem. Instead, I'll plead "typing on a treadmill using the hideous onscreen keyboard of a Surface Pro".
AT ANY RATE...
The point was, 2-factor auth would take care of this. I'm certainly not happy with Russian intelligence trying to mess with the U.S. election (and yes, the evidence is strong they are: see here), but regardless, since Podesta's email was STILL open as of a few days ago when a password reset sent to it was used to hack his Twitter account, it seems clear some folks desperately need some help with securing their accounts.
P.S. yes, my account is original. -
Re:It will keep happeningHere are a few:
Breathe
Konfabulator
Patenting an app's features, using pictures of the app itself.
Examples of features taken from apps (not necessarily kicking them out)
Blog post of dev whose animated weather app was refused shortly before Apple implemented the same thingI'm sure there's more, but it's too depressing to keep searching for them. Honestly, as an academic/scientific programmer I feel like I could never try to write a commercial application. Any idea you have is already present in an overbroad patent owned by someone with deeper pockets than you.
-
Re:Zoning needed
John Zimmer from Lyft describes an evolution in his Medium article that would address the issues you raise.
-
Re:This is what we were talking about.
You can say that for any software that has a bug and ALL software has bugs.
Yes, and it must be trivial to find lots of mission-critical FOSS projects with the number of open issues growing in the same manner.
/s
BIND and sendmail maybe? But at least they do not try to become a dependency of every other software.Seems like you need to read this "How to Throw a Tantrum in One Blog Post" https://medium.com/@davidtstra...
Oh, another thoughtful post from a systemd developer.
-
Re:This is what we were talking about.
You can say that for any software that has a bug and ALL software has bugs. Seems like you need to read this "How to Throw a Tantrum in One Blog Post" https://medium.com/@davidtstra...
-
Re:I don't hate on systemd but this is really bad
Titled: How to Throw a Tantrum in One Blog Post https://medium.com/@davidtstra...
-
Re:And of course the systemd devs throw a tantrum
https://medium.com/@davidtstrauss/how-to-throw-a-tantrum-in-one-blog-post-c2ccaa58661d
Can't have anyone criticizing any aspect of the holy systemd.
Whole thing boils down to:
"Following security practices in an init system is hard, and you've never done it so leave us alone."
Completely ignoring the fact that the only reason they patched this thing is because he made a big deal out of it.
And on what planet is testing for corner cases like empty strings the domain of fuzz tools?
That seems like a pretty standard test case to me.
I can understand if you don't test for a 1MB string, but empty seems like a no brainer.For those who don't want to follow OP's link:
The systemd project applies both unit testing and static/dynamic analysis to systemd. We’ve done this for years; I ran the first Coverity scans myself. Testing inputs of empty strings, excessively large data structures, and other invalid permutations is the realm of fuzz testing, which is a recent project even for the Linux kernel. Despite Linux being used for critical systems for decades, fuzz testing only began as side-projects “in beta” in 2007 and more earnestly in 2013. It’s clearly a valuable technique, but implying that comprehensive testing of invalid inputs is “obvious” is misleading about the state of major projects.
WHAT
THE
FUCK?!?!
It's too much to expect systemd to test for invalid inputs from non-privileged user-space?
Are you fucking kidding me?!?!?
Who the fuck is David Strauss? And when is he scheduled to matriculate from kindergarten?
Too much to expect him to test?!?!!?!
Pathetic. Thalidomide-brain pathetic.
-
Re:RTFA, please.
That is far from a detailed description and more of a list of uninformed rants. Much better to read the informed reply to TFA here: https://medium.com/@davidtstra...
More clueless autonomic defensiveness without any reflection on what the impact of the bug actually is. I especially enjoyed this old chestnut as the author attempts to fisk the original bug report:
These accusations are true for every major production kernel (Windows, Linux, and BSD) and every alternative to systemd (in the sense that they’re almost all written in C and run many of their operations as root).
"SystemD, let me just stop you there. I know the Linux kernel. I've worked with the Linux kernel. You're no Linux kernel."
The incredible hubris of asserting parity with the core of the entire OS, the ignorance that underlies the statement that init was written in C and runs as root, so it's every bit as vulnerable... How the fuck do you even make code run? Do you even teh logic?
The SystemD team is the Microsoft of a new generation. Doubling down on their mistakes; shouting louder when they don't get their way; using every available ratiocination and intellectual contortion to excuse themselves; resorting to any means to make their strategy win, instead of stopping to ask themselves for once, 'Are we following a winning strategy here?'
Thank g*d I quit writing software last year. Dealing with Microsoft's mind-crushing blindness was enough for one lifetime. Now I can just grump about it and walk away.
-
Re:RTFA, please.
That is far from a detailed description and more of a list of uninformed rants. Much better to read the informed reply to TFA here: https://medium.com/@davidtstra...
What does feel surreal is that people now all of a sudden pretend that SysV init where without exploits while going completely berserk when systemd have a non remote exploitable denial of service bug that cannot be used to take over the machine that also where patched three days ago...
-
Re:lawsuits
If it does become a problem like you suggest, then it can be modified slightly, to:
Sue companies when they do stupid shit.
There are too many cases of clear negligence.