Reputation
25,964
Next tag badge:
100/100 score
14/20 answers
Badges
4 61 121
Newest
 Nice Answer
Impact
~1.0m people reached

Oct
28
awarded  Yearling
Oct
2
comment Can I use open source libraries in my project which is released into the public domain?
The GPL explicitely lists "Public Domain" as a compatible license (see gnu.org/licenses/license-list.en.html#PublicDomain ) so there is no need to license the whole work under the GPL.
Aug
5
awarded  Good Answer
Jul
12
awarded  Necromancer
Jul
8
awarded  Good Answer
Jul
1
awarded  Nice Answer
Jun
6
awarded  Popular Question
May
21
awarded  Popular Question
Mar
18
awarded  Enlightened
Mar
18
awarded  Nice Answer
Feb
20
awarded  Caucus
Feb
13
comment How do you unit test an encoder?
Aside from carefully reading the standard and creating a test case for every rule, there is hardly a way to avoid that both an encoder and a decoder contain the same bug. For example, let's assume that "ABC" must be translated to "xyz" but the encoder doesn't know that and your decoder also wouldn't understand "xyz" if it ever encountered it. The handcrafted testcases do not contain the "ABC" sequence, because the programmer wasn't aware of that rule, and also a test with encoding/decoding random strings would incorrectly pass because both encoder and decoder ignore the problem.
Jan
29
awarded  Nice Answer
Jan
26
comment Is Ken Thompson's compiler hack still a threat?
An evil compiler that only recognizes it's very own source is easy to build, but relatively worthless in practice - few people who already have a binary of this compiler would use it to recreate said binary. For the attack to be successful for a longer period, the compiler would need more intelligence, to patch newer verdions of its own source, thus running into the problems described in the snswer.
Jan
12
answered Fundamental Difference between fn() and new fn() in javascript
Dec
31
comment How to document a dual open source license?
Windows user will click on either, and windows will have no clue how to open a .gpl or a .bsd file.
Dec
31
comment Why must the burden of proof rest with the caller and not the method of the class that is being called?
That link doesn't deliver any usable content to non-subscribers.
Dec
22
awarded  Nice Answer
Dec
21
comment Are all security threats triggered by software bugs?
@m3th0dman You probably misunderstand me. I'm not saying that this is a major problem everybody must care about. It's more like a theoretical proof that a hardware problem can create a security thread. That said, it's imaginable that an attacker who discovers the faulty bit(s) on a server might find ways to pad his input until something critical is put on those memory locations.
Dec
21
comment Are all security threats triggered by software bugs?
Very small, obviously, but if it happens, it is a security thread not caused by a software bug.