homoglyph
stage0
Our great sponsors
homoglyph | stage0 | |
---|---|---|
4 | 22 | |
491 | 888 | |
- | - | |
0.0 | 3.9 | |
over 1 year ago | 3 months ago | |
JavaScript | Assembly | |
MIT License | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
homoglyph
-
Every Programmer Should Know
Homoglyphs
-
Hope whoever has to debug this is wearing a helmet cause they'll definitely smash their head against the wall
The largest I could quickly find is https://github.com/codebox/homoglyph/blob/master/raw_data/chars.txt and it doesn't even have o.
- Trojan Source: Invisible Vulnerabilities
-
Programming: How would I turn utf 32 characters/symbols into something I can compare a string to?
However I found this library that you could probably use somehow. But honestly right now I would consider it a more pragmatic solution to write a very short Python program that takes any UTF-8 encoded text file as input and produces the normalized variant as output and then use that file for further processing.
stage0
- Running the "Reflections on Trusting Trust" Compiler
- Stage0: A minimal bootstrapping path to a C compiler capable of compiling GCC
- Goodbye to the C++ Implementation of Zig
- Stage0 – A set of minimal dependency bootstrap binaries
-
Nixpacks takes a source directory and produces an OCI compliant image
Somewhat tangential, but I'm curious how big the bootstrap seed for Nix is. That is, if you wanted to build the entire world, what's a minimum set of binaries you'd need?
Guix has put quite a bit of work into this, AFAIU, and it's getting close to being bootstrappable all the way from stage0 [0]. Curious if some group is also working on similar things for Nix.
[0]:https://github.com/oriansj/stage0
-
"Do you believe that every upstream project... is examined by an expert who can accurately identify whether said project contains malware...?"
https://www.bootstrappable.org/ has some good info. Reading the source of https://github.com/oriansj/stage0 is also very enlightening. It's set its goal to be understandable by 70% of programmers.
- Stage0 - A set of minimal dependency bootstrap binaries
-
Common libraries and data structures for C
Even if they aren't, people absolutely should be able to bootstrap new platforms from scratch. It's important to have confidence in our tools, in our ability to rebuild from scratch, and to be safe against the "trusting trust" attack among other things.
Lately I've been catching up on the state of the art in bootstrapping. Check out the live-bootstrap project. stage0 starts with a seed "compiler" of a couple hundred bytes that basically turns hex codes into bytes while stripping comments. A series of such text files per architecture work their way up to a full macro assembler, which is then used to write a mostly architecture-independent minimal C compiler, which then builds a larger compiler written in this subset of C. This then bootstraps a Scheme in which a full C compiler (mescc) is written, which then builds TinyCC, which then builds GCC 4, which works its way up to modern GCC for C++... It's a fascinating read:
https://github.com/oriansj/stage0
https://github.com/fosslinux/live-bootstrap/blob/master/part...
Even if no one is "using" this it should still be a primary motivator for keeping C simple.
-
How To Build an Evil Compiler
One countermeasure not mentioned here is bootstrapping a compiler with a program small enough to be manually verified. The stage0 project is under 1KB (small enough that the binary can be, and has been, manually checked against the hand written assembly), and GNU Guix (a system for reproducible, isolated builds) is currently working on moving it's bootstrap speed to stage0. That means that, fairly soon, there will be a large set of software that doesn't have a connection to an original C compiler.
- A minimal C compiler in x86 assembly
What are some alternatives?
awesome-remote-job - A curated list of awesome remote jobs and resources. Inspired by https://github.com/vinta/awesome-python
rizin - UNIX-like reverse engineering framework and command-line toolset.
learn-regex - Learn regex the easy way
arocc - A C compiler written in Zig.
Public-APIs - 📚 A public list of APIs from round the web. [Moved to: https://github.com/n0shake/Public-APIs]
chibicc - A small C compiler
remote-working-list - A list of job boards and websites for nomadic workers seeking freelance work
libcperciva - BSD-licensed C99/POSIX library code shared between tarsnap, scrypt, kivaloo, spiped, and bsdiff.
learnxinyminutes-docs - Code documentation written as code! How novel and totally my idea!
bug - Scala 2 bug reports only. Please, no questions — proper bug reports only.
going-to-production - A reference checklist for topics which should be covered before going to production.
c4 - C in four functions