* Posts by sed gawk

217 posts • joined 1 May 2008

Page:

Carnegie-Mellon Uni emits 'don't be stupid' list for C++ developers

sed gawk

Re: Oh, goodie!

Coverity is decent.

Sonar has little value to me over using Clang's static analyser, which is really rather good, combined with the usual suspects, compiling against different compilers / platforms, valgrind.

Nothing else I've seen is worth the price or more importantly offers an advance on the open source tools.

1
0
sed gawk

Re: So...

Now now, jake,

Good C style code, can be made a lot more efficient, using the more expressive C++ compilers, as an assembler man, I present you proof https://godbolt.org/g/uq6p8o

If you've not had a play recently you might be surprised.

Now if you were to complain about bootstrapping a minimal C++ runtime, compared to a minimal C runtime, fair point, but the language is a fine one, in capable hands.

How's the greenhouse doing? I'd like my own slack powered farm one day, you make it sound a lot of fun.

1
0
sed gawk

Re: not-so-smart with pointers

Smart pointers are about communicating something to the reader.

std::unique_ptr<Foo> foo ; // I own this, I can move ownership but I cant (share/copy), lifetime is as mine.

std::shared_ptr<Foo> foo; // I have an interest in this, it might outlive me, but my share keeps it alive.

std::weak_ptr<Foo> foo; // I have an interest in this, but my interest doesn't keep it alive.

Foo * foo; // a wild pointer, set to whatever what on the stack last.

1
0

Coming to an SSL library near you? AI learns how to craft crude crypto all by itself

sed gawk

Re: Not knowing how it works

You're right, I've taken two and two to arrive at five - the use of the library for ECC, and GCM have no relation to one another. I was under the impression that the library made use of point multiplications on a elliptic curve for all finite field operations, but it seems that is not the case.

https://github.com/miracl/milagro-crypto-c/blob/develop/doc/AMCL.pdf

Upvoted.

1
0
sed gawk

Re: Not knowing how it works

Just a guess, but the not knowing how it works might refer to the cypher mode that has been generated.

For example, take AES-128-GCM if you implement that cypher mode, you will need to do multiple precision integer arithmetic. This library does it with elliptic curves https://github.com/miracl/MIRACL

This is enough to change quite a lot of the underlying implementation, when compared with a non ECC implementation e.g. https://github.com/weidai11/cryptop - does it the old school way with inline asm.

The libraries will both accept the standard NIST test vectors and output correct results but the code is almost totally different, with correspondingly different internal data structures.

2
1

Londoner jailed after refusing to unlock his mobile phones

sed gawk

Re: Well?

Great Britain is named due to it being the largest of the British Isles, Great being synonymous with large, in this context.

As for our firearms laws, we don't need guns, ours is one of the few languages where glass is a verb, and a kiss might see you seeking medical attention.

12
1

McCain: Come to my encryption hearing. Tim Cook: No, I'm good. McCain: I hate you, I hate you, I hate you

sed gawk

Re: Banning encryption won't stop an attack like the one in NIce @AC

I take issue with your definition of people willing to behave in such fashion as being "perfectly healthy".

One way or another these people are not *healthy*, it's long been remarked that the prisons are populated chiefly by "the sad, the bad, and the mad", what's your evidence, that these actions come from a healthy mind?

I offer you, 1) Richard Reid, http://news.bbc.co.uk/olmedia/1780000/images/_1783237_bomberagain150.jpg He looks totally with it doesn't he?

I think there is some correlation between mental health and susceptibility to manipulation.

4
0

Next month's Firefox 48 is looking Rusty – and that's a very good thing

sed gawk

Re: Just a question

C++ loved by the pros, hated by the fakers.

There are blemishes like any language, but the arm chair, language researchers never mention anything even vaguely credible.

How about e.g. the generated assembly from a C++ program is a little harder to read than one written in C, and that is purely down to the heavily optimized STL implementations, applications that don't use the STL and do purely C style operations, will of course not have this issue.

I think your chief complaint, with C++ is that it's harder to pretend you know the language.

4
0
sed gawk

Re: How fast can you rewrite?

That is misrepresenting the bug and comment thread.

The bug is about having coloured scrollbars which use native widgets on the platforms, e.g. on OSX it uses the C based Carbon API.

The comment says coloured scrollbars require changes across the rendering layer, stuff all to do with C++.

1
0

SQLite developers need to push the patch

sed gawk

Re: Not Open Source

How much more open do you want ?

The code starts /*

** 2005 February 15

**

** The author disclaims copyright to this source code. In place of

** a legal notice, here is a blessing:

**

** May you do good and not evil.

** May you find forgiveness for yourself and forgive others.

** May you share freely, never taking more than you give.

**

*************************************************************************

*/

4
0

Fear and Brexit in Tech City: Digital 'elite' are having a nervous breakdown

sed gawk

Delusional

"The UK is proof that free movement of labour doesn't work", do you have any further reason why free movement of people, as opposed to generations of under-investment is to blame https://en.wikipedia.org/wiki/Correlation_does_not_imply_causation

"When a foreign employee is taken on that puts pressure on the local infrastructure..."

Where as when a Londoner moves to Preston, the local infrastructure is unaffected, as the housing, social provisions magically adjusts itself...

A sensibly run system would only permit an employer to take on a foreign worker if the local authority gave assurance there was sufficient free accommodation and capacity in public services to take them on.

You are arguing for a command economy, please consider moving to a country with such a regime and allowing us, including me a British born chap, the freedom to run my business and trade with the EU, including working shock horror, in Europe, and earning Euros, and paying VAT, Corp Tax, NI, Income Tax to HMRC. I was lucky enough to work on a E.U. funded science project, it meant the E.U. paid for the open sourcing of scientific data, money which was spent in the U.K.

Explain how my business taking money from the E.U. and paying tax here *because* of free movement is "is proof that free movement of labour doesn't work".

I think your premise is flawed, and your prescription for toothache is decapitation, thanks to you, and your ilk, we are worse off, and likely to have one of the most illiberal home secretaries in our history as PM.

3
0

Here's how police arrested Lauri Love – and what happened next

sed gawk

Here's one for your stats

I was arrested, held over night in a police cell, denied access to writing materials and a lawyer for thirty-six hours, most infuriatingly, I had an "appropriate adult" forced on me as some sort of chaperone. This came about after I was falsely accused of being a "nut, who had attempted to harm someone", this was complete nonsense, with not a scrap of evidence to support it, and was thrown out by the CPS.

I got not an apology not even the slightest acknowledgement that as an innocent sane person, it was wrong to put me in a glass fronted police station cell, based on some fantasy I would top myself.

Hilariously, they didn't take, my belt or my glasses, but did take my shoelaces, I pointed out that surely I could actually top myself with a belt, but not with shoelaces, they didn't take the belt but refused me a pencil and writing materials, one of my rights as an "arrested person", your other rights btw, are legal counsel, and someone to be informed of your whereabouts.

I was seriously unhappy, and disgusted that not a scrap of evidence was presented to me, that explained my time in a cell, nor was there any consequences for my accuser.

I suspect in hindsight that telling the arresting thug to keep his hands to his self or state his grounds for arrest, and read me my rights, probably didn't help.

The scary thing if you can do that to a person who knows their rights, counts lawyers among his friends, what can you do to some poor sod, who doesn't know their rights.

11
1

Microsoft releases cross-platform .NET Core 1.0 at Linux event

sed gawk

Re: why would think it doesn't

Someone upthread asked what was "proper open source", I offered an opinion deliberately refraining from an .NET view, as I'm a *nix guy and I'm blissfully ignorant of the .NET build ecosystem.

1
0
sed gawk

Re: A well specified reference implementation is available.

LibreOffice implements the ODF specification found here https://docs.oasis-open.org/office/v1.2/cs01/OpenDocument-v1.2-cs01-part3.html

LibreOffice is mostly Java with some C, So toolchain is available from source, e.g. openjdk/ant/maven GCC/make etc.

I made no mention of Linux or Windows, but LibreOffice counts in my book, why would think it doesn't?

1
0
sed gawk

Re: proper open source enterprise qualities libraries

Proper Open Source:

J Random User, is as empowered to make changes to the software as the original author.

J Random User, may use the software as provided without fear of patent infringement.

All tools required to go from bare metal to deployed artifact are available in source form to J Random User.

A well specified reference implementation is available.

5
0

Lauri Love at risk of suicide if extradited to US, Brit court hears

sed gawk

The message as you still don't get it...

If you can't do the time, don't get caught.

4
1

My plan to heal this BROKEN, BREXITED BRITAIN

sed gawk

Trying to implement single rules across such diverse cultures as present in the EU will always fail

What does "diverse cultures" mean here?

The EU is about tedious agreement on things like how wide a push fit domestic water pipe fitting should be, or harmonizing employment rights across countries.

Diverse cultures, just sounds wrong here, perhaps you could expand on the idea.

Different economical models, sure. but culture, nah not buying it.

1
0

Microsoft releases open source bug-bomb in the rambling house of C

sed gawk

Re: C is not an applications programming language

I'm not sure you can really measure in this manner, in the code as posted, you have an integrated timer, which starts to explain some of your differences, for example, the python slowdown over javascript is likely related to the explicit delay loop in the python code.

Your other difference is explained by not using the stack in C++, hence it's not exactly idiomatic C++ code, I would expect the rest of the difference comes from actually freeing the memory in C++, hence incurring the overhead that java avoids by just exiting and allowing the O/S to reclaim the memory.

I would suggest using a high precision external timer using the monotonic clock, and measuring using the same timer across all the candidates, essentially you are looking at needing a few hundred thousand iterations in order to converge on something like an reasonable approximation.

Thank you for posting your methods, and opening the debate.

0
0
sed gawk

Re: C is not an applications programming language

If you want to check for yourself, see macrorodent.blogspot.fi, where I just copied the benchmarks. If you get interesting results, please post comments there.

Cheers, I'll check it out.

0
0
sed gawk

Re: C is not an applications programming language

I'd be wary of drawing conclusions from implementing half a page of code in various languages and running it.

I also find it hard to believe that you'll outperform C or C++ in an integer focused task, using a JVM language. I'd be very interested to replicate your results, if you provide some details on your methodology.

0
0

Linux devs open up universal Ubuntu Snap packages to other distros

sed gawk

Fellow Gentoo user here,

1) try a binhost, there are X86 and AMD64 binhosts available, if you run a stable amd64 without too many tweaks, everything from base-layout to KDE is available without direct compilation.

2) ICU is support for internationalization, harfbuzz is for font rendering, as it happens I have only two packages that rely on harfbuzz (TeX-Live and Wt), and these applications can be installed in isolation in gentoo by specifying the ROOT environment variable when emerging, e.g. ROOT=/opt/vendor-application emerge -k tex-live

0
0

RIP ROP: Intel's cunning plot to kill stack-hopping exploits at CPU level

sed gawk

Re: It'd be nice to have a system...

If you would like to do this on linux, a solution exists.

In essence, compress your desired root filesystem into a SquashFS file, e.g. rootfs.squashfs.

Using an Initial Ram Disk (initrd) mount an OverlayFS root, using a TmpFS mount for the writable portion. This leaves you with a system composed of a kernel, initrd, squashfs-root and some space for changes. When you want to "commit" changes, simply update rootfs.squashfs with your new changes.

This will run from memory and is effectively a Live-CD

3
0

US nuke arsenal runs on 1970s IBM 'puter waving 8-inch floppies

sed gawk

Re: Some Department of Commerce weather alert systems use Fortran

HPC is still C, Fortran, Assembler, then C++

25
0

Lost containers tell no tales. Time to worry

sed gawk

Re: dev0ps

It does happen, but there are many vested interests in keeping business people with a clue away from it people with a clue. In an open environment, it makes it much harder to find jobs for the boys.

1
0

UK needs comp sci grads, so why isn't it hiring them?

sed gawk

without having a deeper understanding of advanced mathematics,

I only wish I could understand more, to my eternal regret, I stink at maths.

It's part of your toolkit, practical examples.

1) You wish to figure out which part of your system is slow, some basic stats is useful here.

2) You wish to do some simple 2d animation, sooner or later you will need "mechanics" to specifiy parameters.

3) You are tasked with implementing a cipher mode of operations given a paper and you need to figure out what all the weird squiggles mean, some background knowledge of groups, finite fields, generators, might help.

This stuff is helpful in ways that are not obvious until you are tasked with something out of your mathematical grasp, believe me, it's not fun, but it is of value.

3
0

Learn a scripting language and play nicely: How to get a DevOps job

sed gawk

t I wouldn't trust many of them to implement a B+ tree library in C.

TBF, I've met many a "developer" I wouldn't trust with C, it's truly scary the number of people who don't get undefined behavior means all bets are off.

4
0

Miguel de Icaza on his journey from open source to Microsoft: 'It's a different company'

sed gawk

Re: you have no idea of what COM and ActiveX really are.

COM is a lovely idea, hindered from being used in a horribly overly complex manner.

Having the registry involved as opposed to some much simpler approach makes COM error prone in an unacceptable number of difficult to fix ways.

For example, PAM has roughly the same need to allow runtime loading of Components, having solved it with a config file, okay not a wonderfully intuitive one, but orders of magnitude easier than fixing a corrupted registry hive.

7
0

The web is DOOM'd: Average page now as big as id's DOS classic

sed gawk

Re: Yep

Might I recommend firebug, and simply deleting the offending markup from your rendered DOM.

I find it surprisingly cathartic ;)

0
1

Snafu! BT funnels all customers' sent email into one poor sod's inbox

sed gawk

Re: elderly relative

Might I recommend Vonage, they do a landline number which will redirect to your mobile, if someone leaves you a message, you get it emailed.

I pay about 12Quid a month IIRC too lazy to check.

No affiliation, just a customer.

1
0

Official: EU goes after Google, alleges it uses Android to kill competition

sed gawk

Re: Bonkers

Does having fragmented Android really benefit the consumer?

Which consumer?

a) the end user who can take there choice in a wider ecosystem as "the market dictates".

b) the service providers which purchases services and statistics from google ?

c) the development shops who might actually like some input into the sort of API calls available, and see a opportunity to have some independant players able to compete on quality?

2
0
sed gawk

Re: Surely the AFA prevents companies...

Re: Derived code in android...

Depends what you call android.

There is clearly a lot of existing C libraries in Android Sqlite/libPNG etc. Linux is clearly existing code.

I would describe Android as roughly the BINDER IPC layer + some runtime functionality, that I think is original work from Google.

But the core api's are within google's control, it's their process that starts the "App" code, rather then some easy to replace /sbin/init shim so one way or another they retain considerable influence

3
0

NZ Pastafarians joined in noodly wedlock

sed gawk

Re: Bunch of tosspots

The church's (increasingly historical) significance in society is not because it's religious claims are inherently believable - rather, it is because societies have tended to function reasonably well and flourish under Christianity.

Do you have even a vaguely tenable justification for your rather dubious claim, or do you expect me to take it on his noodly appendages.

4
1

Pair programming: The most extreme XP practice?

sed gawk

Re: Crap...

DevOPS = Firing OPS, make MTTR more important than MTBF.

Ultimately, so long as we are up and making money, we prefer to be available, and we'll settle for eventually consistent.

If the answer to fixing it is "turn it off and turn it back on again" why is that we have OPS?

OPS needs rightly or wrongly a better answer than "I don't fancy being a programmer".

Applications need "monitoring" why doesn't that get built into the applications and services directly.

If it can't be automatically installed, how are we testing it, and if we can automate, build, deploy, test, package, upgrade, and retire stuff on C/I then at what point is it worth having a dividing line between making it work and making it supportable.

We don't have an OPS team, we do have a DevOPS team, staffed by exactly the same people who where in the OPS team, they do mostly the same stuff they did in the OPS team, ie. automate, advice, support, deploy and monitoring.

0
0
sed gawk

Re: Dumbing down of Society

Software is not a sport, if you really must dumb us down, we are somewhere between story tellers (its not real) and lawyers (except when it is).

Pairing is; you write the test, I make it pass, I write the test, you make it pass.

I don't particularly need you next to me to do that, in a lot of ways it's easier to use a shared screen -x session on a server to do pairing.

1
0

Job ad promises 'Meaningless Repetitive Work on the .NET Stack'

sed gawk

Re: @christian berger

"It's only in the 1980s that, with things like the emergence of C++, we look at languages and deliberately create more difficulties."

Boo hoo, you have to specify your requirements explicitly. System programming in the large is much easier in C++, even procedural programming is easier in C++. C is still a little faster, and a little tighter on resources, but at quite large drop off in shared knowledge.

// common knowlege of lifetime, access levels, and interface.

const std::vector<std::string> &

VS

// knowlege of size and static type

const char **

0
0

Canny Canadian PM schools snarky hack on quantum computing

sed gawk

Re: And For Corbyn

Bet you you paid more than you will

0
0

BT hauled into Old Bailey after engineer's 7-metre fall broke both his ankles

sed gawk

Re: Sub judice

No one has speculated about the facts, only made allusions to their own personal experiences, and generally chewed over the general principle of H & S.

In other words, back under your bridge

2
0
sed gawk

Re: More than reported here? @boltar

Your original point about taking responsibility is buried under the refusal to countenance the idea, that it might possible, given the preponderance of evidence, be this poor chap's fault.

I'm not given to being a bleeding heart myself, but frankly, the tone of your comments suggests your opinion is not swayed by where the responsibility lies.

I've been put under pressure to do things that where unsafe, exploitative, and on one memorable occasion blatantly illegal. I'm happy to tell *anyone* where to stick it under these circumstances, but not everyone can make that choice every time, and it's just contemptible to deny that reality in such an prurient fashion.

4
0

Google broke its own cloud AGAIN, with TWO software bugs

sed gawk

"availability zones" from the same provider

Better to take one availability zone from Google and one from Amazon (say). You end up paying for the traffic which goes from one to the other; but you get genuine resilience.

You really don't, you just make sure that multiple big vendors are a risk to your business.

If you want resilience run it in house, and fail over to AWS.

0
0

Windows 10 with Ubuntu now in public preview

sed gawk

Re: @Tom 38

`Put another way, would you write an app for windows using Linux and WINE as your primary development environment? If you would, thanks for coming, next CV please.`

We develop using a sane buildsystem(autotools), and sane language (C++).

We use boost and write extensive tests which are run automatically.

The software is exclusively developed on linux, and deployed on windows 7 & 10.

The flow is from git to cross-compiled release-tarball to msi is all linux.

It hits windows only as a msi on a fresh vm.

Write to the standard, and it doesn't really make any difference provided you work with a sane toolchain.

1
0
sed gawk

Re: So problems with pocesses and filesystems

Top is walking the proc filesystem at a guess.

providing a libc with compatible entrypoints is actually not that big a deal, making it actually work like real unix is more work.

Basically windows is at heart a thread scheduler, unix was at its design single threaded.

That's not something a little LD_PRELOAD magic is going to paper over.

TL;DR use linux if you want linux.

4
1

Jenkins 'fesses up after inadvertently slurping users' usage stats

sed gawk

Re: Quite disturbing

Think cron with a web interface

0
0

Microsoft to make Xamarin tools and code free and open source

sed gawk

@Kristian Walsh I don't see the difference and 'var' != 'auto'

C# is fine if you want to work on windows, but proposing C# for cross platform work is misguided.

Both typenames are messy and both declarations allocate memory on the heap, being a little shorter is good but lets face it, it's the same pig with different lipstick.

C++11 auto is part of a *cohesive* set of features, which eases things like perfect function forwarding and allow concurrent code to be written more easily and cleanly.

Var lets you autocomplete a few less chars, which is meh especially in the land of intelisense or whatever Microsoft are calling ctags these days.

0
0

Facebook throws BlackBerry an HTML bone

sed gawk

Re: @tommy pock

>> As an IT professional I'm sure you're able to convey your dislike for something without resorting to churlish and juvenile dysphemisms.

I see you are a recent entrant to the profession, welcome, always good to have new blood.

3
0
sed gawk

This, 100 times this

Email is just fine, if you don't have time to email it to me, I don't have time to read it.

3
0

Bash on Windows. Repeat, Microsoft demos Bash on Windows

sed gawk

Re: A very interesting detail - the root fs is per-user

Thank you, I did not know this, upvoted.

0
0
sed gawk

Re: A very interesting detail - the root fs is per-user

The windows model doesn't have the concept of "root".

Users have attributes which make them root, rather than a fixed uid as Unix does.

It's likely a kludge to work around this rather than anything more interesting.

I love to hear the rationale for how you imagine windows could be more suitable for running Linux/Posix applications that Linux/BSD/*nix.

I write tons of *nix code and without fail, running *nix code on windows require wrapping bits of Win32 to make it look like POSIX. Take select(2), runs nicely across BSD/Linux/OSX tops out at 64 descriptors on Windows. In short, windows sucks at running windows code, never mind POSIX code.

0
0
sed gawk

Re: It will have the same limitations

okay, I'll bite.

On *NIX its trivial to control order of process startup, on Windows, it's not the case.

Windows is just not a production ready environment for fine grained control over applications and services that people on *NIX take for granted. If you bought into that ecosystem, you have my sympathy.

I want you to run a named pipe server which starts prior to WinLogin.exe

So that a CredentialsProvider can connect to it from WinLogin.exe

Look at the windows boot process to see what an overengineered poorly implemented mess of an operating system, you are comparing to over 40 years of battle-hardened design principles, systemd not withstanding.

2
0
sed gawk

Re: How is this different?

Basically

1) write an ELF loader in C/C++ compile to P/E format

2) write a wrapper around the exported linux ABI (the syscalls list) in plain C - compile to P/E format

3) make sure your magic wrapper is specified in the LD_PRELOAD environment variable passed to the ELF loader.

4) realise cross-compilation is already a thing.

5) face-palm

0
0
sed gawk

Re: How is this different?

So I can run linux code on windows, great, why do I need windows in this equation?

1
1

Page:

Forums

Biting the hand that feeds IT © 1998–2017