|
Daniel Pfeffer wrote: Not without a full security review of every line in the code.
Direct quote from an acquaintance of mine back in the 90s: "That's the beauty of open source! You can read it and make your own changes!"
Daniel Pfeffer wrote: Which ain't gonna happen.
Pretty much my response. I've got my hands full already with my own code and need to focus on that.
|
|
|
|
|
Yeah, very few people are capable of understanding that code, nevermind putting in the time to read millions of lines of complex code and figuring out what each of them does.
|
|
|
|
|
...and then, some bugs are so subtle even experienced developers might not catch them knowing there's a bug and staring at the code.
|
|
|
|
|
And then, do you trust the compiler?
A long time ago there was a proof of concept where someone had modified a gcc compiler to that if it compiled a linux kernel it would insert a backdoor in the logon process, and if it compiled a gcc compiler, it would insert the code that would make the compiler do this.
I wouldn't necessarily trust a Chinese distro any more than I would trust an American distro or Windows or Mac OS or a Cisco firewall.
Imo, if an agency like the NSA or their Chinese equivalent wants in on your network, they have the resources to do so regardless of what you are running.
|
|
|
|
|
Bruno van Dooren wrote: Imo, if an agency like the NSA or their Chinese equivalent wants in on your network, they have the resources to do so regardless of what you are running.
It's also cheaper to just break down your front door.
xkcd: Security
|
|
|
|
|
And beat me with a rubber hose until I log in as a domain administrator in my company. I know. But that is visible and will trigger a response to the breach. Siphoning away our data without anyone noticing is where the game is at.
|
|
|
|
|
As I already answered there[^]
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
No. More specifically, I trust the people but not the CCP government that forces the people do certain things. Everyone knows the story of the boy who cried wolf, yet few people learn the lesson behind it. Their track record doesn't lend itself to blind trust.
Jeremy Falcon
|
|
|
|
|
I'm not even sure I trust the people. Chinese culture simply doesn't include the concept of private property. They have "private property" but from a cultural standpoint, it has no real meaning.
|
|
|
|
|
Your Apple phone isn't yours either. Apple decides what happens to it. Microsoft decides what happens to your Windows machines. Etc. And they will sell your data to the highest bidder, as does every other company, while the NSA has backdoors into pretty much everything, with or without cooperation from the tech companies.
|
|
|
|
|
|
#Worldle #486 2/6 (100%)
π©π©π©π©π¨β‘οΈ
π©π©π©π©π©π
https://worldle.teuteuf.fr
not too hard
"A little time, a little trouble, your better day"
Badfinger
|
|
|
|
|
Chris, have you thought of integrating ChatGPT to help people debug?
I am just curious if the asking for help has or will go down after ChatGPT?
I am not using it to debug, no, not me, never, I prefer humans.
I hope the human aspect always stays around but some of us like myself don't wish to wait for a reply sometimes when time is pressing. Or maybe Codeproject just expects all of us to be using tools like ChatGPT?
asking for a friend. ![Java | [Coffee]](https://www.codeproject.com/script/Forums/Images/coffee.gif) ![Green Alien | [Alien]](https://www.codeproject.com/script/Forums/Images/alien.gif)
|
|
|
|
|
Why would someone use Code Project for answers to questions if they are using Chat GPT? The integration would not make any sense, really.
I have a paid subscription to Open AI ChatGPT and use it all the time. Not ashamed of it either. I usually use Google to cross check questionable answers for accuracy, but it gets me 80-90% of the way there.
Just saying.
|
|
|
|
|
I am just curious as a hobbyist programmer.
I m used to asking real people for help on Codeproject when I was learning C++ back in the day. I hate C++ thank goodness for C#.
I believe tools like ChatGPT should be used like an assistant.
I am honestly making so much progress in my stuff lately because of ChatGPT.
I wouldn't mind if Codeproject had some sort of interface is all.
|
|
|
|
|
I absolutely love C++. I love that you can essentially open a dialogue with the compiler in the code instead of just the runtime executable. In essence you can make the compiler run code at compile time to generate code involving complex compile time computations.
The closest thing C# has is that new code generation feature, which works entirely differently, though admittedly I haven't use it.
Aside from that, no language can do what C++ can do in that respect, at least to my knowledge.
Metaprogramming is powerful.
There's smoke in my iris
But I painted a sunny day on the insides of my eyelids
So I'm ready now (What you ready for?)
I'm ready for life in this city
And my wings have grown almost enough to lift me
|
|
|
|
|
What C++ compiler/IDE are you using?
"A little time, a little trouble, your better day"
Badfinger
|
|
|
|
|
i use gcc and vs code usually
There's smoke in my iris
But I painted a sunny day on the insides of my eyelids
So I'm ready now (What you ready for?)
I'm ready for life in this city
And my wings have grown almost enough to lift me
|
|
|
|
|
Can gcc be integrated in VS Code as a default compiler/debugger?
Advertise here β minimum three posts per day are guaranteed.
|
|
|
|
|
Yeah. If on windows you just have to install something like MiniGW to get gcc to run under windows and then VS Code will detect the compilers.
It doesn't work as well with WSL, but there's an extension for that which I haven't used and seems like work.
There's smoke in my iris
But I painted a sunny day on the insides of my eyelids
So I'm ready now (What you ready for?)
I'm ready for life in this city
And my wings have grown almost enough to lift me
|
|
|
|
|
I should add, there are subtle differences between MSVC and GCC in the way they generate function returns (and possibly other things)
One side effect of this, is calling DirectX or GDI+ functions can lead to crashing with GCC. You have to modify a system header to make it work, but you can do so in a non-destructive manner. I won't get into it here, because it's a lot of stuff, but if you ever run into that situation let me know and I'll give you the deets.
There's smoke in my iris
But I painted a sunny day on the insides of my eyelids
So I'm ready now (What you ready for?)
I'm ready for life in this city
And my wings have grown almost enough to lift me
|
|
|
|
|
honey the codewitch wrote: In essence you can make the compiler run code at compile time to generate code involving complex compile time computations.
Which hopefully even you use very seldom.
I have been doing code generation since the 80's (or perhaps early 90s?)
I have done it in many languages. Mostly one shot but sometimes even as part of the build.
No need to do it as you describe though. There is enough complexity in what I do.
|
|
|
|
|
It's primarily about optimizing but because of the way it works you must design for it.
If it serves the design, I'll use it. For example, my graphics library supports arbitrary binary footprints and representations for pixels. The only way to compute the shifts to get at the individual channels efficiently is to do so during compile time.
One of the places I hated using it, but it was really the only way, is building execution chains, similar to a SQL execution plan except at compile time, to spit graphics at a display or another draw destination in the way that most efficient for it. At runtime, even computing that would have not been worth any savings you'd pick up downstream.
There's smoke in my iris
But I painted a sunny day on the insides of my eyelids
So I'm ready now (What you ready for?)
I'm ready for life in this city
And my wings have grown almost enough to lift me
|
|
|
|
|
You're not even talking in terms of an "option". "Time is pressing": use two browser tabs.
(Use it or lose it)
"Before entering on an understanding, I have meditated for a long time, and have foreseen what might happen. It is not genius which reveals to me suddenly, secretly, what I have to say or to do in a circumstance unexpected by other people; it is reflection, it is meditation." - Napoleon I
|
|
|
|
|
JoeSox wrote: Chris, have you thought of integrating ChatGPT to help people debug?
Better to ask ChatGPT:
ChatGPT, have you thought of registering in CodeProject to help people debug?
This may be more effective and doesn't require any development.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
