• 1 Post
  • 162 Comments
Joined 3 years ago
cake
Cake day: September 11th, 2023

help-circle






  • Seems like a positive feedback loop:

    1. Netflix creates show that’s pretty good
    2. People watch it
    3. Netflix takes too long to release season 2
    4. People forget show exists, stop watching
    5. Netflix drops a season years later
    6. No one watches it because they forgot what happened in season 1 and Netflix shows are so serial that you have to know what happened
    7. Netflix cancels show due to low viewership
    8. Fans of the show feel jilted and slam Netflix on social media
    9. Rinse and repeat


  • Ah right, so that would be a 3D array.

    • T* is a single row of T
    • T** is a list of rows
    • T*** is a list of “layers” in the third dimension

    This would be incredibly hazardous to pass around as a bare pointer with no context, though. I’d expect to see this in a struct that, at minimum, also includes fields for the size of each dimension.









  • Interestingly, developers in ecosystems like Go, Rust, and those utilizing native Web APIs—where robust standard libraries drastically reduce reliance on third-party code and strict cryptographic verification is built into the core toolchain—reported zero instances of a college dropout’s weekend project wiping out global logistics infrastructure today.

    As someone who’s built a career in Rust, it is 100% susceptible to an attack like this. The community is just generally paranoid enough to avoid depending on super niche packages.

    Even so, Cargo still doesn’t have code signing and crates.io doesn’t have 2FA. They just barely rolled out email alerts for new crates being published with your API key.

    And there’s dozens of single-author crates that are depended upon by millions of lines of code, any one of which could easily be a vector in a supply chain attack. In fact there have been attempted supply chain attacks against crates.io, but to my knowledge they’ve all relied on typo-squatting.

    We’re definitely overdue for a major attack.