It's not that simple. ROP relies on known or predictable addresses and pretty much all modern OSes have some form of address space layout randomization (which keeps getting better and more sophisticated).
With good ASLR, ROP is not possible without relying on information leak bugs which are finite. So the cost for the attacker increases and it gets harder and more time intensive for reliable exploits to be written.
Allowing JIT for everything is a TREMENDOUS security violation, since it's trivially abusable and page permissions are irrelevant. There are just too many ways for clever attackers to abuse it.
If you want to give back to Pharo in a way that counts, fund improvements to the UI. The font rendering is bad right now and HiDPI screens are not even supported. This makes for a terrible first impression.
Nobody died so how is he a murderer?
I swear the amount of stupidity written on the matter defies belief. People are unable to think critically and be objective.
Disregarding the facts that:
He wasn't charged/convicted of murdering anyone
He wasn't charged/convicted of attempting to murder anyone
The supposed "hitmen" were law enforcement agents, entrapment anyone?
Ulbricht got life without parole for selling some mushrooms and running a fucking forum. Guess what the HSBC scum who laundered hundreds of millions for drug cartels got: A huge fucking paycheck and nice fat bonus.
Psychedelics have their positives and their negatives.
You can try to control the experience with controlling the set but really that doesn't mean it's gonna work. You're blasting open the door to your subconscious mind, anything could happen and when the bad shit does happen, it better be not so bad that there's nothing you can do and there better be someone there that can help you deal with it.
There are cosmic/spiritual "experiences" and "visions" one can get on mushrooms, that are utterly horrific and can utterly destroy a person's psyche or reduce him to an empty shell. They don't happen often but they _do_ happen.
Oh but it DOES mean that Rust has no value, at least regarding security. Once you give them the rope, they WILL use it. Let's see if time will prove me right.
Unfortunately, this point of view has little merit.
Security is all or nothing. You can't have a little bit of this and a little bit of that. Unless the parts of the web browser that can be "influenced" by external attacker (directly or indirectly) are written 100% in a memory safe language, you simply have no real security but the illusion of such.
And this is how that hypothetical browser fails, and why it will never amount to anything re: security, since it's gonna end up using a gazillion of C libraries, all of them full of bugs and possibly vulnerable to security exploits.
One could say that Rust also fails by allowing "unsafe" code in its core design but it's still too early to see how that will play out.
An interesting observation would be for the author to start considering why this is true. Why does the "universe" give you what you seek? Why do you get from life exactly what you think you "deserve"? It seems strange, absurd, doesn't it? As if the whole thing is a circus, a movie being played just for you.
Now what happens if you simply do nothing? Nothing at all, no hopes, no aspirations, no worries, no dreams, no passions, just live in the present moment, forget about the past, forget about the future. Why keep chasing some illusion or other, trying to satisfy meaningless urges, illusionary needs that others have placed upon you? Open your eyes and SEE.
You can read this as "mainline Guile Emacs is never gonna happen".
Guile is very low quality software (that goes double, hell, triple, for "non free" platforms like OSX and Windows) and Emacs has a reputation for being rock solid on all platforms it runs on.
The Guile fanboys may wish for Guile to replace the current core in mainline but realistically speaking (Guile has what, 1/2 developers?) that's never going to happen.
If I had to guess, I'd say most Emacs users and developers couldn't care less about Scheme/Guile (if not actively hostile).
Where GOD can be anything of significance to you but to those who have experienced it's "the universe", the Void, the Unborn, the Undying and so on.
It's funny how a lot of ppl disregard this and have no clue about the "occult" (magick!) elements of the Art. When "mystical" experiences happen to them, lacking theory/practice and a proper framework to serve as a foundation, they tend to lose the world under their feet.
The presence of a JIT makes things trivially abusable for the attacker and is a big security risk.