• 2 Posts
  • 93 Comments
Joined 1 year ago
cake
Cake day: July 9th, 2023

help-circle


  • Did you read it? The author is clearly biased against OpenBSD.

    As an example, he dedicates quite a lot to talk about “ROP gadgets removal” (which is an ineffective mitigation employed by OpenBSD), however he also states:

    Anyway, removing ROP gadgets the way OpenBSD is doing it doesn’t add a large amount of complexity, doesn’t harm performances nor debuggability, so why not, but it doesn’t make exploitation significantly harder, at all.

    When you consider the fact that some mitigations which were considered overkill were proven significant with time (for example, OpenBSD was completely unaffected by Spectre v1 and similar exploits since they disabled hyperthreading), statements like these make it clear to me that the author is biased.

    Edit: This is not to say the website is deceptive, it’s just that it doesn’t provide a good analysis or comparison of the security of different systems IMO.










  • dsemy@lemm.eetoProgrammer Humor@lemmy.mlFortune Teller
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    5
    ·
    9 months ago

    My problem was with the first line of your comment:

    Yeah, I’ve given up trying to know all the libraries in my projects.

    This leads me to assume that you don’t actually know that those dependencies are as well maintained as you claim.

    Obviously dependencies are important and make sense to use in many cases, but using trivial dependencies to speed up development isn’t good.

    As for your second point, I don’t care who solved the problem. If you care, I hope you’re smelting your own sand to build your own CPU and assembly language. But I’m obviously also not solving the exact same problem as the library already solved.

    I was just saying it isn’t you who solved the problem in that case, really, as the hard work was done for you. Honestly though, it was pointless and rude so I apologise.



  • dsemy@lemm.eetoProgrammer Humor@lemmy.mlFortune Teller
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    26
    ·
    9 months ago

    You think your code is higher quality with more dependencies? All you’re doing is offloading complexity to a separate project.

    If you make a program that does “something worth doing”, but you need some specialty library to actually do it (which you didn’t implement yourself), than sorry, but it wasn’t you who did it.