Do you apply the same reasoning for software that use javascript, the JVM, the CLR or some other kind of VM?

These are server CPUs, not something you wanna put in your laptop or desktop.

write only medium

I guess you meant “write once”?

Anyway, this won’t prevent attacks that somehow swap the CD being read, or the backend logic for where to read the data from.

You cited Git as an example, but in Git it’s possible to e.g. force-push a branch and if someone later fetches it with no previous knowledge they will get the original version.

The problem is the “with non previous knowledge” and is the reason this isn’t a storage issue. The way you would solve this in git would be to fetch a specific commit, i.e. you need to already know the hash of the data you want.

For the Wayback Machine this could be as simple as embedding that hash in the url. That way when someone tries to fetch that url in the future they know what to expect and can verify the website data matches the hash.

This won’t however work if you don’t already have such hash or you don’t trust the source of it, and I don’t think there’s something that will ever work in those cases.

Lots of major companies like Microsoft and IBM also contribute to Linux, it doesn’t make them saints nor even necessarily compare to what they get for using the volunteer dev work inside Linux.

Most of those companies actually contribute to the kernel or to foundational software used on servers, but few contribute to the userspace for desktop consumers on the level that Valve does.

CEO bonuses should be awarded 10 years after their mandate

The reputation loss is probably worse than whatever fine they end up paying

Time to pull a Meta/X and change name

Unfortunately some things will IMO always remain a natural monopoly. For example good luck trying to convince developers to write their apps for all those different operating systems.

Luckily Apple strictly controls the App Store and will never allow apps to abuse this, right? Right?

Your parent comment was mentioning the fact that their store still does not support user reviews, which should be one of the most basic features.

Epic chose not to try and compete with Steam on that front

Forget competing, they lack even the basics.

Where’s the punch?

In the face of everyone expecting an upgrade

To be fair trees still use energy for doing this, but that energy is conveniently provided by the sun.

High or low level doesn’t matter. Mathematically it just makes more sense to use 0-based indexing https://www.cs.utexas.edu/users/EWD/transcriptions/EWD08xx/EWD831.html

Jokes on you, I subscribed to my mobile plan 8 years ago and I still pay 6€ for unlimited calls/sms and 30GB (Italy, Iliad)

Isn’t there already Box64/Box32? Not to mention most Linux software is already compiled for ARM thanks to being open source.

They used to, but they weren’t very good.

TBF the report says this was done using credential stuffing, so it wasn’t really Roku’s fault.

Because Rust is not the only language that made this faulty assumption. It is an issue that affects Rust’s stdlib, just like it is an issue that affects Python’s stdlib and other libraries. In fact this was first reported as a vulnerability to yt-dlp (where it was actually exploitable) and then discovered it applied to many other libraries (where the exploitability is highly dependent on how the feature is used).

Rust here is only used as clickbait because of its aim to be “safe”, but its position is no different from other languages.

If you read the article from the researcher that discovered the vulnerability you’ll see they never call out Rust in particular, only as part of a list of languages that are affected. https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/

It’s also extremely unlikely that you’d be running a bat script with untrusted arguments on Windows.

It happens in yt-dl, which is where this was first reported https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-hjq6-52gw-2g7p