GSoC 启动！

C++ exit-time destructors

Comments

via maskray.me via raymii

MaskRay

C++ exit-time destructors

In ISO C++ standards, [basic.start.term] specifies that: Constructed objects ([dcl.init]) with static storage duration are destroyed and functions registered with std::atexit are called as part of a

Optimize CSS with SAT Solving https://github.com/matthewhague/sat-css-tool

GitHub

GitHub - matthewhague/sat-css-tool: Minify CSS files through refactoring

Minify CSS files through refactoring. Contribute to matthewhague/sat-css-tool development by creating an account on GitHub.

Show HN: Making a Compiler to Prove Tmux Is Turing Complete https://willhbr.net/2024/03/15/making-a-compiler-to-prove-tmux-is-turing-complete/

willhbr.net

Making a Compiler to Prove tmux Is Turing Complete

You can use features of tmux to implement a Turing-complete instruction set, allowing you to compile code that runs in tmux by moving windows. I feel like I really have to emphasise this: I’m not running a command-line program in tmux, or using tmux to launch…

今日晚餐

Great ideas in theoretical computer science https://www.cs251.com

The Montreal problem: Why programming languages need a style czar https://earthly.dev/blog/language-style-czar/

Earthly Blog

The Montréal Effect: Why Programming Languages Need a Style Czar

<p>Here is a non-realistic scenario: You are choosing the programming language for what will eventually become something large. Picture a col...

#今天又看了啥 #security
可怕！虚拟机里点了个链接，物理机居然被黑了！
InstantView from Source

利用了6个2023年的 CVE，组成了一套攻击链，让你在 VMware 虚拟机里的 Chrome 浏览器中点开一个链接，然后外面真实的物理计算机就中招了。

CVE-2023-3079，Chrome V8 JavaScript 引擎漏洞，执行恶意代码；
CVE-2023-21674，本地沙箱提权；
CVE-2023-29360，Windows 操作系统内核驱动程序漏洞，提权到虚拟机高权限；
CVE-2023-34044，获取虚拟机敏感信息；
CVE-2023-20869，利用虚拟机可以共享外面物理机的蓝牙设备，通过虚拟机和外部通信的通道，传递特别构造的数据出来，外部的虚拟机宿主进程处理的时候缓冲区溢出，执行恶意代码；
CVE-2023-36802，Windows 内核驱动程序漏洞，获取外部真实物理机至高权限

Telegraph

可怕！虚拟机里点了个链接，物理机居然被黑了！

大家好，我是轩辕。 试想一个场景：当你在虚拟机中的Chrome浏览器点开一个链接，然后外面的真实电脑就被黑了。 你觉得这可能吗？ 虚拟机大家应该都用过吧，尤其是咱们网络安全从业者，基本上都必不可少的要与虚拟机打交道。 很多时候一些敏感的网址、文件，都不敢在真机上直接点开，而是在虚拟机中点开。这样即便遇到恶意程序，虚拟机重置一下快照就好了。 但你有没有想过，虚拟机也不是固若金汤的，在虚拟机里面点开一个链接，也可能直接让你电脑中招！ 前几天，我在安全大佬tk教主的微博里就看到了这么一个案例。 这是一家韩国安…

“觉得自己还不够抽象”

全球多地麦当劳系统发生故障无法点餐

包括日本和澳大利亚全国在内的全球多地麦当劳门店在15日发生系统离线，顾客可能无法正常下单。 目前该公司正在调查影响程度等细节，由于会计系统存在问题，一些商店还停止接受移动订单。目前尚不清楚需要多长时间才能重新上线。

—— 日经新闻，每日邮报

Lancern's Treasure Chest

https://github.com/bloomberg/clang-p2996

Bloomberg 开源的 P2996: Reflection for C++26 的实现

就等北京 3 号线了 😁

4.3

Paul Alexander, ‘the man in the iron lung’, has died https://www.bbc.com/news/world-us-canada-68555051

BBC News

Paul Alexander: 'Man in the iron lung' dies at the age of 78

Paul Alexander worked as a lawyer and lived for decades in a metal cylinder which breathed for him.

House passes bill to force TikTok sale from Chinese owner or ban the app https://www.nytimes.com/2024/03/13/technology/tiktok-ban-house-vote.html

NY Times

House Passes Bill to Force TikTok Sale From Chinese Owner or Ban the App

The legislation received wide bipartisan support, with both Republicans and Democrats showing an eagerness to appear tough on China.

祝各位订户 std::numbers::pi 节快乐！

TIL: CMake 3.29 加了一个变量 CMAKE_LINKER_TYPE 可以用来直接指定 linker 了，不用再写 -DCMAKE_{EXE,STATIC,SHARED,MODULE}_LINKER_FLAGS='-fuse-ld=lld' 这种东西了

所以什么时候把 split debuginfo 也支持一下啊

https://cmake.org/cmake/help/git-master/variable/CMAKE_LINKER_TYPE.html