You know what would be good?

[kauzu@infosec.exchange]

@lcamtuf bro

[breathoflife@infosec.exchange]

@lcamtuf

is pulling code from random websites a good idea?

[lcamtuf@infosec.exchange]

@breathOfLife Yes, if they display a lock icon it means they use military-grade security

[pinskia@hachyderm.io]

@lcamtuf
While C/C++ does not support that directly @compiler_explorer does.

[philip@mastodon.mallegolhansen.com]

@lcamtuf 10/10 no notes.

[marmarta@chaos.social]

@lcamtuf I think whoever made the stackoverflow module for python should get on it right now.

[a2_4am@mastodon.social]

@lcamtuf everything old is new again: https://www.w3.org/blog/2008/w3c-s-excessive-dtd-traffic/

[compiler_explorer@hachyderm.io]

@pinskia @lcamtuf through a pretty grim client-side hack...and not transitively. But, sort of yes

-mg

[eliasp@mastodon.social]

@lcamtuf I just hope the remote include handler supports a graceful downgrade in case the remote host truthfully reports not being able to support this fancy new Secure Socket Layer stuff - not everyone can spend hundreds of dollars on those certificates every year or have a beefy enough CPU to deal with the encryption overhead!

@breathOfLife

[synlogic4242@social.vivaldi.net]

@kauzu @lcamtuf yeah esp for absolutely critical software like drivers and OS kernels it would be nice if the C preprocessor let us do things like "//embed: curl [url] | sudo bash" because WHAT COULD POSSIBLY EVER GO WRONG? ha

[synlogic4242@social.vivaldi.net]

@lcamtuf @breathOfLife I would would the lock icon to have different visual tiers if its like Lichenstein's military or Uganda etc

[nothacking@infosec.exchange]

@lcamtuf Javascript called, they want their package manager back.