Hacker Newsnew | past | comments | ask | show | jobs | submit | nickitolas's commentslogin

How does that square with this comment from greg from today?

https://www.openwall.com/lists/oss-security/2026/05/01/3

(About heads up to distros)

> Nope, sorry, we are NOT allowed to notify anyone about anything "ahead of time" otherwise we will have to tell everyone about everything. That's the only policy by which all the legal/governmental agencies have agreed to allow us to operate in, so we are stuck with it.


I don't know, this is the one that I mentioned:

https://www.openwall.com/lists/oss-security/2026/03/30/5

You can see my name under "Timeline", I asked kindly for both distros-list and a longer embargo than usual and got them.

I guess Greg is not allowed to notify distros-list, but someone else is?


He's full of shit lol

I don't think itd be ok, personally. My impression is regulations and regulatory institutions can be very slow to evolve after technological advances, unless the government is financially liable. A scheme I would be more comfortable with is mandatory insurance and insurance companies with a financial incentive absorbing the liability. On top of that probably add some bare minimum regulatory requirements/certifications.


Harfbuzz does shaping, my understanding is slug does rendering. So they do different things


I have no experience with minors using Linux. Do they not typically have sudo access?


Clang can target windows just fine afaik, although I'm sure the whole process could be improved.

That said, as long as windows is the bigger more profitable market I wouldnt expect a switch, unless the dev tooling situation becomes dramatically better on linux


> In addition, success is generally pretty well-defined. Everyone wants correct, performant, bug-free, secure code.

I feel like these are often not well defined? "Its not a bug it's a feature", "premature optimization is the root of all evil", etc

In different contexts, "performant enough" means different things. Similarly, many times I've seen different teams within a company have differing opinions on "correctness"


"life of the program" might imply it needs to begin life at program start. But it can be allocated at runtime, like an example in the list shows. So its rather "lives until the end of the program", but it doesnt need to start life at the start of the program


Not who you were asking but for me about 1800 hours of study+srs+reading+listening for simple shows (not "tons of idioms". Or at least not ones Im not already familiar with). This was for japanese, european languages should be easier.


Speaking as an argentinian, every time I hear about someone using crypto in that way its to avoid taxes, which seems legally murky/gray (if not directly illegal, but not currently prosecuted) to me.


Is games not a part of tech?


Of course, but there are some oddities in tool use compared to other industries. At my job we use Perforce for version control for example, which I think is more common in the game industry than other solutions for whatever reason. Naturally everyone here hates it.


> Perforce for version control for example, which I think is more common in the game industry than other solutions for whatever reason.

The last game I worked on was like 80gb built. The perforce depot was many terabytes large, not something you want to have on every person's workstation. Games companies use Perforce for a very good reason.


But not everybody here has to try and manage many GB or even TB of assets in their VCS. I wager game company build/dev engineers know what they are doing in picking Perforce.


It is a _decision_ to put those assets in the same VCS as your source code. It's not one you are required to make.


...maybe, but there a good reason not to make that decision, assuming you have a VCS that can manage large files?

I am very much not in this industry, but it seems to me that if the assets and code depend on one another, you'd want to keep them together.


no


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: