Aissen

19 ms·

331.
by Aissen 3y ago
Yes, addon updates (without permission change) are automatic on most browsers. This is why an extension with many users can be worth a lot of money (especially if it has wide permissions), and the Chrome webstore has seen lots of adware&#x2
332.
by Aissen 3y ago
> And then you may just have introduced side channels in crypto code. incorrect crypto code. If overflow is intentional, it should be annotated as such in operations, will generate similar assembly and won't panic. If it isn&#x27
333.
by Aissen 3y ago
On integer wrapping, I think explicit wrap is annoying at first, but eliminates a whole class of bug. I can only agree with: > (Swift at least traps in release by default -- I wish Rust had chosen to). I enable it in release on serious p
334.
by Aissen 3y ago
> We look forward to testing the most recent AMD platform, and we expect its AVX512 and GFNI support to provide a further performance boost. It's missing a benchmark of the latest AMD CPUs (Genoa/Epyc 4).
335.
by Aissen 3y ago
Mankind has transformed deadly predators (wolves) into routine companions (dogs); and over centuries created multiple species specifically for food consumption (many plants, but also modern cows, sheep, etc.). I think hippos would have been
336.
by Aissen 3y ago
People want to rent the pricey NVIDIA DGX H100. So Google just put it in their DC, letting customers pay its full price it every ~3 months; plus they don't have to operate it, which is win (or is it ?).
337.
by Aissen 3y ago
Back of the envelope math is that H100 is twice as fast as A100 (task may vary). So your 1000-node A100 very, very fast. Now, the GPU-to-GPU links (NVLink) might often give them a big advantage for some workloads, letting them exchange data
338.
by Aissen 3y ago
Thanks to github code search, I found at least on project which has this badge that someone decided to upload to github anyway.
339.
by Aissen 3y ago
You don't really want branchless in security. The requirement is constant-time and side-channel resistance. The branchless algorithm is an implementation detail.
340.
by Aissen 3y ago
I like that we are moving away from (fake) nanometers and giving names to process nodes instead; comparing different technologies by Xnm was completely broken.
341.
by Aissen 4y ago
Oh yeah, definitely. In my implementation, even skipping reading comm (once!) if not needed gave me better perf than ss: https://github.com/anisse/tcpkill/blob/cfd96d5dec438a3722edb...
342.
by Aissen 4y ago
AFAIK there's no other ways to do this on Linux: link a given tcp connection to a process. The network uAPIs (netlink or /proc/net/tcp?) will give you an inode, and to link the inode to the PID you need to go through eve
343.
by Aissen 4y ago
In case you're interested in only closing the TCP socket, and not killing the process, I wrote a linux-only PoC: https://github.com/anisse/tcpkill/ It has two implemented methods: one uses pidfd, the other us
344.
by Aissen 4y ago
Sure: https://crates.io/crates/left-pad/reverse_dependencies https://www.npmjs.com/package/left-pad?activeTab=dependents
345.
Web color is still broken(webcolorisstillbroken.com)
4 points by Aissen 4y ago|0 comments
346.
by Aissen 4y ago
It's the same subject, but it seems Motherboard did some additional research here.
347.
by Aissen 4y ago
I was curious about the use of "sks" in the examples. It is explained in the paper: > Using DreamBooth [66], we fine-tune our Stable Diffusion spatial backbone on small sets of images of certain objects, tying their identity to
348.
by Aissen 4y ago
Microsoft deleted the public support forum for Office365 software like Powerpoint online: a product that makes money. Of course those who pay are rarely the primary users, so why hear their voice…
349.
by Aissen 4y ago
It might soon become 5 years by law, at least in the EU. https://ec.europa.eu/info/law/better-regulation/have-your-sa...
350.
by Aissen 4y ago
Scaleway has AMP2 instances which are VMs using those cores. You can get a 60 vCPUs one at 140€ / month. And, you can pay by the hour, too: https://www.scaleway.com/fr/amp2-instances/ (also, Oracle cloud has
351.
by Aissen 4y ago
For example, handle decentralized authorizations and attenuation in a distributed system: https://www.biscuitsec.org/docs/getting-started/introduction... I think the lack of real-life examples Biscuit's power
352.
by Aissen 4y ago
They are often cheaper than Amazon in the marketplace, and have a very good reputation. A bit of shame :-/
353.
by Aissen 4y ago
Dupe: https://news.ycombinator.com/item?id=35415305
354.
by Aissen 4y ago
Meh, the PSK can be used to connect to the network. The "cleartext" really does not matter unless you reuse passwords, which you shouldn't do. Anyone with physical access to your Echo probably has a dozen other methods to get
355.
by Aissen 4y ago
What is clickbait here ? They found new vulnerabilities, reproduced old ones, across various products, and crafted an exploit.
356.
How did the Hyperspace switch from Windows to Linux and back on 2009 netbooks?(cohost.org)
2 points by Aissen 4y ago|0 comments
357.
by Aissen 4y ago
This is a custom-made fuzzer for H.264, in Rust, that has found many vulnerabilities. It should be released during Usenix Security 2023.
358.
by Aissen 4y ago
It's good that they finally released something on the back of the Primephonic acquisition: https://www.apple.com/newsroom/2021/08/apple-acquires-classi...
359.
by Aissen 4y ago
This design allows you to smell the coffee, something the mylar bag wouldn't allow. It also uses capillarity to prevent liquid bubbles from escaping while you drink. See more: https://blogs.nasa.gov/ISS_Science_Blog&#x2
360.
by Aissen 4y ago
$395 is cheaper than a spaceflight-designed flight-certified espresso coffee cup ($650): https://spaceware.co/products/flight-space-cup (you can find articles about this).

More ›