Conversation

Notices

1. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 12-Dec-2024 00:59:51 JST Haelwenn /элвэн/ :triskell:
   https://security.gentoo.org/glsa/202412-19
   > rewrite ls(1) in Rust
   > arbitrary code execution
   • Embed this notice
     H. Faust (hfaust@shitposter.world)'s status on Thursday, 12-Dec-2024 01:12:00 JST H. Faust

     in reply to
     @lanodan
     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Christmas Sun (sun@shitposter.world)'s status on Thursday, 12-Dec-2024 01:15:10 JST Christmas Sun

     in reply to
     @lanodan lmao the issue seems to be it has git integration
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 12-Dec-2024 01:16:56 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Christmas Sun
     • H. Faust
     @hfaust @sun Typical rust-rewrite feature creep, no idea why but almost all rust rewrites have a bunch of stuff bolted on.
   • Embed this notice
     H. Faust (hfaust@shitposter.world)'s status on Thursday, 12-Dec-2024 01:16:57 JST H. Faust

     in reply to

     • Christmas Sun
     @sun @lanodan But why?
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 13-Dec-2024 20:47:47 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Sandro :nixos: :verified_gay:
     • Christmas Sun
     • H. Faust

     @sandro @hfaust @sun With most of ripgrep performance being from the research done by the author of the_silver_searcher aka ag, and either implementation would likely make your whole system a *lot* faster if there would be a grep(1) compatible interface. And by that I mean mostly posix standard, with maybe few bits that are common between GNU grep and BSDs grep.

     At least I don't think there's any need for bug-for-bug compatibility, that's what Enterprise distros try to do, upstreams meanwhile tend to fix their bugs and occasionally make breaking changes to APIs.

   • Embed this notice
     Sandro :nixos: :verified_gay: (sandro@c3d2.social)'s status on Friday, 13-Dec-2024 20:47:49 JST Sandro :nixos: :verified_gay:

     in reply to

     • Christmas Sun
     • H. Faust

     @lanodan @hfaust @sun exa/eza is a ls replacement, not a rewrite.

     Also rewritting things in bug-to-bug compatibility is no fun. Writing a tool that replaces the existing one with useful new features and at the same time being mostly memory safe and sometimes even was faster is a way more motivating combination. See ripgrep.

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 13-Dec-2024 21:15:59 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Sandro :nixos: :verified_gay:
     • Christmas Sun
     • H. Faust

     @sandro @hfaust @sun Well that part of autoconf is designed broken, like pretty much all of autoconf.

     I don't think I've had a year where it didn't have a serious bug, even just compilers getting 2 digits in their major version broke it. And so each time more and more autoreconf gets added to packages, typically coming with patches so autoreconf would actually work, or even patches to ./configure directly because it just wouldn't work.

   • Embed this notice
     Sandro :nixos: :verified_gay: (sandro@c3d2.social)'s status on Friday, 13-Dec-2024 21:16:01 JST Sandro :nixos: :verified_gay:

     in reply to

     • Christmas Sun
     • H. Faust

     @lanodan @hfaust @sun Using ripgrep as grep in userland mostly works with the exception of -E. Using it systemwide will probably unveil many edge cases in especially in shell script monsters like autoconf who check eg the copyright header of mkdir if it supports -p.