Spyke

Replies

godot

Comment on

Message from the Godot Foundation Board

Reply in thread

Godot definitely has sponsors which while not directly being "customers" are still very important when it comes to financing the development of the engine

Having said that I want to believe current sponsors won't have issues with the Godot Foundation here

europe

Comment on

French PM to resign after government falls while Macron seeks solution to crisis

Reply in thread

  • "far-right" gains lots of seats during european deputy elections
  • people shocked
  • Macron somehow figures this means people have new priorities and dissolves the general assembly
  • new elections
  • expected a swing victory for "far-right"
  • they actually lose seats
  • left coalition comes out on top, but with relative majority of seats only (<50%)
  • unexpected but welcome turn of events
  • issue: since no one has absolute majority it's difficult to vote stuff
  • budget
  • Macron wants (NEEDS) to fix the debt issue
  • they'll cut expenses in public services, mass layoffs
  • left coalition wants to find the missing money not by cutting but by taxing places where money accumulated (i.e. The Rich™)
  • left lands amends in the budget plan
  • prime minister overrules the plan using "49.3" and approves the initial Fuck The People <3 Budget Plan™
  • this unlocks the prime minister's ejection seat button
  • prime minister is ejected
  • Macron needs to pick yet another prime minister, hopefully this time he won't put one of his cronies to overrule the elected majority's priorities

Comment on

Oracle, it’s time to free JavaScript

Reply in thread

[...] it was decided that the language would be called “ECMAScript” instead. (Microsoft happily offered up “JScript”, but no-one else wanted that.) Brendan Eich, the creator of JavaScript and a co-signatory of this letter, wrote in 2006 that “ECMAScript was always an unwanted trade name that sounds like a skin disease.”

I tend to agree with these sentiments

Comment on

Critical Rust flaw enables Windows command injection attacks

Reply in thread

It's definitely not Rust's fault, but it's kinda Windows' one and cmd.exe escape logic... It's really difficult to write logic that will correctly escape any argument given to it, cmd.exe really is a pain to deal with :/

The Rust security team faced a significant challenge when dealing with cmd.exe's complexity since they couldn't find a solution that would correctly escape arguments in all cases.

As a result, they had to improve the robustness of the escaping code and modify the Command API. If the Command API cannot safely escape an argument while spawning the process, it returns an InvalidInput error.

"If you implement the escaping yourself or only handle trusted inputs, on Windows you can also use the CommandExt::raw_arg method to bypass the standard library's escaping logic," the Rust Security Response WG added.

I get that in situations where they can't safely escape a parameter they'll just stop with an error, which sound as sane as one could go with this!