Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

C Meeting adjourned.

Uncategorized
12 9 1
  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd you deserve everything. i'm so sorry it's like this

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd ooof, that sounds super rough /∆\ sorry yo, hopefully there's some avenue for improvement? (or escape)

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd Well this is all kinds of rough...

  • @thephd Well this is all kinds of rough...

    @thephd On some level, i sympathize with demands for implementation & use experience; c++ definitely suffered during the aughts because a bunch of features got adopted without *any* implementations (and that is generally a bad idea).

    Back then, when the time came for a vote on adopting a new feature, Clark Nelson was the only person who consistently asked, "has it been implemented?", and voted against if the answer was "no".
    [...]

  • @thephd On some level, i sympathize with demands for implementation & use experience; c++ definitely suffered during the aughts because a bunch of features got adopted without *any* implementations (and that is generally a bad idea).

    Back then, when the time came for a vote on adopting a new feature, Clark Nelson was the only person who consistently asked, "has it been implemented?", and voted against if the answer was "no".
    [...]

    @thephd
    These days, i would want someone asking, "has it been taught, and did someone observe coders using it?", which seems much more doable in the age of twitch & other live streaming services.

    (That is definitely a much bigger ask for proposal authors, but it should yield more polished designs.)

  • @thephd
    These days, i would want someone asking, "has it been taught, and did someone observe coders using it?", which seems much more doable in the age of twitch & other live streaming services.

    (That is definitely a much bigger ask for proposal authors, but it should yield more polished designs.)

    @thephd That said, the idea that vendors want to block all new features *regardless* of implementation experience is... very strange. In the long run, it seems counter to their interests...?

    I don't know what to make of it.

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd frustrating experience to go through, sorry it all ended up going that way 🫂

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd A friend of mine recently showed a proposal about variadic macros, that you had invited her to a C standard meeting over. Was that thing shelved again too ?

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd closures seem like a pretty obvious feature and I'm surprised C still doesn't have them natively after all these years
    We got compile-time type inference before we got closures, somehow

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd thank you for fighting for people who want to write C like it's no longer the 90s

  • C Meeting adjourned. Pretty much nothing I was happy about made it through, including things I did and did not work on. For the things I was responsible for...

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20printf%20string%20size%20specifiers.html

    Sized strings are not important to the Committee for C, and printf will remain printing with (int) casts. There was no direction to continue, but some said they'd change their vote if I implemented it and came back to show it was a low-cost, simple implementation.

    -- https://thephd.dev/_vendor/future_cxx/papers/C%20-%20Functions%20with%20Data%20-%20Closures%20in%20C.html

    Closures had some direction to continue but faces extreme opposition because (most) implementers want to either (a) ignore captures altogether and do something with no local state; (b) standardize no-captures and promise to do something maybe, later. Tough.

    All the other papers I was happy about on the agenda didn't get anywhere, and some of the issue resolutions went the way I didn't like, but it's not really worth mentioning because I'm not a Big Implementation (and apparently, not a Real C Person). Not much I say can matter.

    I think vendors want to close C down basically, as a sort of thermostatic backlash to the various changes being proposed and from so much being one in C23. I can't really stop that and it's unfortunately bad because there's various "simple" proposals that have long-term consequences.

    But we're not really illuminating those consequences in discussion or papers right now. I have a lot of papers right now that'd just be "there are betters ways to do this, please let's think about this" and I'm kind of tired just from thinking about it.

    Maybe I'll be a more effective advocate next meeting. Who knows.

    I also realize everyone is going to continue to clown on me as being a C++ person no matter how much expertise I have/gain in C, so I think I have to implement a compiler or do a complex renounciation-of-C++ post of something before people evaluate my work on its technical merits purely. It also doesn't help that most changes I am working on tackle significantly large areas that I always get "eww, C++" as a default reaction, even for things like defer, which is -- generally -- pretty annoying.

    Knee-jerk Anti-C++ hatred is wearing on me. Worst part is, nobody properly communicates what's C++-centric about anything we standardized, other than the spellings. They don't even read the history of their own features. E.g., __auto_type and auto coming from C first, because it was implemented for macro shenanigans while C++ was still goo-goo-gaa-gaa and using typedef typename foo::typename bar:: typename baz;-style crap and didn't realize the goodness of type deduction until 10 years after __auto_type was making for clean C macros. But no, no, it's a "C++ invention", and you can't convince them otherwise.

    Brutal to have to live with it and deal with.

    I'll figure something out, eventually.

    @thephd urgh, rough, sorry ypu have to deal with that

  • oblomov@sociale.networkundefined oblomov@sociale.network shared this topic on

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • Ciao!

    Uncategorized
    1
    0 Votes
    1 Posts
    0 Views
    Ciao! Sto scrivendo la Settimana Sovversiva di oggi e sto facendo questo toot come esempio.Guardate, un link!https://settimana.kenobit.it/subscription/form(Potete usarlo per iscrivervi alla mia newsletter gratuita, ma questo post è più per illustrare quanto sia facile condividere un link sul Fediverso)
  • 0 Votes
    1 Posts
    1 Views
    Qualche tempo fa Notepad++ finì nel mirino di un attacco piuttosto sofisticato: il meccanismo di aggiornamento automatico del programma venne compromesso da hacker legati a uno stato, che riuscirono a sostituire i file legittimi con versioni manomesse. Un episodio che aveva fatto parecchio rumore, e che il team di sviluppo aveva già iniziato ad affrontare nelle versioni precedenti.Con la versione 8.9.2, il cerchio si chiude.Il “doppio lucchetto” che protegge gli aggiornamentiIl problema originale stava nel fatto che il processo di aggiornamento non verificava in modo sufficientemente robusto l’autenticità dei file che scaricava. La risposta del team è stata costruire quello che loro stessi chiamano un sistema a “doppio blocco”: due verifiche indipendenti, una sull’altra.La prima, già introdotta nella v8.8.9, riguarda il pacchetto di installazione scaricato da GitHub, che adesso viene verificato tramite firma digitale. La seconda, novità di questa 8.9.2, riguarda il file XML che il server di aggiornamento invia al programma per comunicargli che esiste una nuova versione: anche quello è ora firmato e verificato. In questo modo, anche se un malintenzionato riuscisse a intercettare uno dei due passaggi, l’altro blocco terrebbe.Oltre a questo, anche WinGUp, il componente che gestisce gli aggiornamenti automatici, è stato irrobustito: rimossa la dipendenza da libcurl.dll (un vettore classico per attacchi di tipo DLL side-loading), eliminate due opzioni SSL considerate rischiose, e la gestione dei plugin è ora riservata esclusivamente ad applicazioni firmate con lo stesso certificato di Notepad++.Cos’altro c’è nella 8.9.2Sul lato funzionalità, arriva la possibilità di “oscurare” una selezione di testo, utile ad esempio per condividere screenshot senza mostrare parti sensibili del documento. Completano il quadro alcune correzioni di stabilità e ulteriori fix di sicurezza.Chi preferisce non usare l’aggiornamento automatico può escluderlo durante l’installazione oppure, per ambienti aziendali, distribuire il pacchetto MSI con il parametro NOUPDATER=1. FONTE notepad-plus-plus.org
  • 0 Votes
    2 Posts
    1 Views
    @GustavinoBevilacqua è colpa degli operai comunisti che non hanno messo l'Italia a ferro e fuoco dopo la marcia dei 40K
  • Ma porca sandracca

    Uncategorized
    6
    0 Votes
    6 Posts
    0 Views
    @francommit @matz @GustavinoBevilacqua immagino si possa praticare anche con quello