Conversation

Notices

1. Embed this notice
   SuperDicq (superdicq@minidisc.tokyo)'s status on Wednesday, 05-Nov-2025 19:27:06 JST SuperDicq

   • twinspin

   @twinspin6@outerheaven.club Good security researchers probably can code, but from my personal experience the entire infosec community is full of clout chasers who all wanna be the one who finds the next big vulnerability instead of actually fixing anything.

   • 翠星石 likes this.
   • Embed this notice
     SuperDicq (superdicq@minidisc.tokyo)'s status on Wednesday, 05-Nov-2025 19:28:42 JST SuperDicq

     in reply to

     • twinspin

     @twinspin6@outerheaven.club They also really like telling actual programmers how to do their job and what tools/languages they should be using, without having much experience doing much programming themselves.

   • Embed this notice
     SuperDicq (superdicq@minidisc.tokyo)'s status on Wednesday, 05-Nov-2025 19:44:04 JST SuperDicq

     in reply to

     • twinspin
     • Sofia

     @sofia@bottom.business @twinspin6@outerheaven.club Nobody is expecting security researchers to architect a new software system from scratch like an engineer.
     
     But if you're smart enough to find security issues, you can definitely write a 10-line patch file.

     翠星石 likes this.
   • Embed this notice
     Sofia (sofia@bottom.business)'s status on Wednesday, 05-Nov-2025 19:44:06 JST Sofia

     in reply to

     • twinspin

     @SuperDicq@minidisc.tokyo @twinspin6@outerheaven.club i mean, that's like complaining that a pharmaceutical researcher doesn't know how to run a drug manufacturing plant lol, they're just different jobs
     
     Research vs engineering roles being separate is ubiquitous across industries

   • Embed this notice
     mangeurdenuage :gnu: :trisquel: :gondola_head: 🌿 :abeshinzo: :ignucius: (mangeurdenuage@shitposter.world)'s status on Wednesday, 05-Nov-2025 20:53:32 JST mangeurdenuage :gnu: :trisquel: :gondola_head: 🌿 :abeshinzo: :ignucius:

     in reply to

     • twinspin
     @SuperDicq @twinspin6 Don't you like rust ?
   • Embed this notice
     SuperDicq (superdicq@minidisc.tokyo)'s status on Wednesday, 05-Nov-2025 20:53:32 JST SuperDicq

     in reply to

     • twinspin
     • mangeurdenuage :gnu: :trisquel: :gondola_head: 🌿 :abeshinzo: :ignucius:

     @mangeurdenuage@shitposter.world @twinspin6@outerheaven.club No, I don't like like Rust.
     
     I have actually tried writing Rust at some point and I find the syntax quite cumbersome. I am also not very fond its package manager Cargo. And I especially don't like that if you want to do literally anything with a C library, which is of course very common if you want to write a useful program, you have to wrap almost everything in unsafe { } blocks which really defeats the purpose of Rust in the first place.
     
     Rust also has various issues and limitations with reproducible builds, something GNU C already fixed in the 90s. Let's hope gccrs actually delivers.
     
     And on top of that the Rust Foundation is a terrible organization in the way they enforce their trademarks and things like that.

   • Embed this notice
     SuperDicq (superdicq@minidisc.tokyo)'s status on Wednesday, 05-Nov-2025 21:34:54 JST SuperDicq

     in reply to

     • twinspin
     • mangeurdenuage :gnu: :trisquel: :gondola_head: 🌿 :abeshinzo: :ignucius:

     @mangeurdenuage@shitposter.world @twinspin6@outerheaven.club Also thing that is maybe a little bit off topic.
     
     I am not a fan of software that tries to hold your hand and is very restrictive in what you can and can't do. Software designed by cool people just let's you do really stupid things like "sure, whatever kiddo". This is what makes hacking fun.
     
     I also fucking love dynamically typed languages. Stuff like PHP and Python are my bread and butter.
     
     Yes these languages have strict typing systems too, but only if you want to use them and make your life as a programmer more annoying, it's all optional.
     
     I really fucking love abusing insane shit that probably makes strict type enthusiasts cry like comparing two strings that contain dates without converting them to DateTime first because they are in ISO8601 and that shit just happens to work because the interpreter also just happens to see the date that is actually a string as an integer and compares those.