VyseofArcadia | 4 months ago | on: Two Paths to Memory Safety: CHERI and OMA
VyseofArcadia's comments
VyseofArcadia | 10 months ago | on: Show HN: Bhvr, a Bun and Hono and Vite and React Starter
VyseofArcadia | 10 months ago | on: A $20k American-made electric pickup with no paint, no stereo, no screen
VyseofArcadia | 10 months ago | on: A $20k American-made electric pickup with no paint, no stereo, no screen
VyseofArcadia | 10 months ago | on: Microsoft subtracts C/C++ extension from VS Code forks
> Embrace
Yay, MS loves open source!
> Extend
Wow, VS Code is so useful!
> Extinguish
shocked Pikachu meme
VyseofArcadia | 10 months ago | on: Avoiding skill atrophy in the age of AI
VyseofArcadia | 10 months ago | on: GCC 15.1
I can deal with the footguns if they aren't cheekily mutating over the years. I feel like in C++ especially we barely have the time to come to terms with the unintended consequences of the previous language revision before the next one drops a whole new load of them on us.
VyseofArcadia | 10 months ago | on: Microsoft subtracts C/C++ extension from VS Code forks
IIRC Apple at least has always been fairly clear and consistent with what bits of its software are open and what bits aren't. To my knowledge they haven't been breaking off chunks of Darwin and closing them. (Although if I'm wrong do correct me.)
VyseofArcadia | 10 months ago | on: SerenityOS is a love letter to '90s user interfaces
VyseofArcadia | 10 months ago | on: Multipaint: Draw pictures with color limitations of 8-bit and 16-bit platforms
VyseofArcadia | 10 months ago | on: The Subjective Charms of Objective-C
That's ok, C++23 is going to add another group of features that will be half-adopted at best in legacy codebases that will totally fix everything this time for real.
[0] in the same codebase via the unholy chimera that is Objective-C++
VyseofArcadia | 10 months ago | on: Four Years of Jai (2024)
Agreed, 45 minutes is insane. In my experience, and this does depend on a lot of variables, 1 million lines of C++ ends up taking about 20 minutes. If we assume this scales linearly (I don't think it does, but let's imagine), 19k lines should take about 20 seconds. Maybe a little more with overhead, or a little less because of less burden on the linker.
There's a lot of assumptions in that back-of-the-envelope math, but if they're in the right ballpark it does mean that Jai has an order of magnitude faster builds.
I'm sure the big win is having a legit module system instead of plaintext header #include
VyseofArcadia | 10 months ago | on: Four Years of Jai (2024)
As an industry we need to worry about this more. I get that in business, if you can be less efficient in order to put out more features faster, your dps[0] is higher. But as both a programmer and an end user, I care deeply about efficiency. Bad enough when just one application is sucking up resources unnecessarily, but now it's nearly every application, up to and including the OS itself if you are lucky enough to be a Microsoft customer.
The hardware I have sitting on my desk is vastly more powerful that what I was rocking 10-20 years ago, but the user experience seems about the same. No new features have really revolutionized how I use the computer, so from my perspective all we have done is make everything slower in lockstep with hardware advances.
[0] dollars per second
VyseofArcadia | 10 months ago | on: Replacing CVE
VyseofArcadia | 10 months ago | on: Replacing CVE
The key thing to borrow from physical engineering is the concept of a sign off. A PE would have to sign off on a piece of software, declaring that it follows best practices and has no known security holes. More importantly, a PE would have the authority and indeed obligation to refuse to sign off on bad software.
But expecting software to have clear, well-understood, deterministic requirements and follow a physical engineering requirements-based process? Nah. Maybe someday, I doubt in my lifetime.
VyseofArcadia | 10 months ago | on: Replacing CVE
I 100% agree. I wouldn't want to gatekeep software development in general. I would only put the PE requirement on companies that are running a service connected to the internet that collects user data.
Want to make an application that never phones home at all? Go nuts. Want to run a service that never collects any sensitive data? Sure thing! Want to run a service that needs sensitive data to function? Names, addresses, credit card info? Yeah, you're going to need a PE to sign off of that.
Side note, I was a math teacher in a previous life. Congrats on the relatively new career, and thanks for your service.
VyseofArcadia | 10 months ago | on: Replacing CVE
VyseofArcadia | 10 months ago | on: Replacing CVE
And in the current economic climate, even principled and diligent SEs might be knowingly putting out broken software because the bossman said the deadline is the end of the month, and if I object, he'll find someone who won't. But if SEs were PEs, they suddenly have standing, and indeed obligation, to push back on insecure software and practices.
While requiring SEs to be PEs would fix some problems, I'm sure it would also cause some new ones. But to me, a world where engineers have the teeth to push back against unreasonable or bad requirements sounds fairly utopian.
VyseofArcadia | 10 months ago | on: How Nintendo bled Atari games to death
VyseofArcadia | 10 months ago | on: How Nintendo bled Atari games to death