Retr0id

12 ms·

271.
by Retr0id 2mo ago
It's not fully mitigated by encryption, you can still do a lot of damage without being able to observe plaintexts. For example, you could "rewind" a ciphertext block to an earlier value, and induce a UAF-like condition in the
272.
by Retr0id 2mo ago
Late edit: It also makes it harder to exploit rowhammer etc., if the precise swizzling method is unknown.
273.
by Retr0id 2mo ago
Without any swizzling, certain common access patterns can end up with subpar performance, for example walking the columns of a 2d array with a certain stride - if it ends up directing every access to the same bank on the same channel, the t
274.
by Retr0id 2mo ago
Bloomberg Terminal costs ~$24K per user per year, so the fact that people are paying for it implies it offers at least that much value. As mentioned elsewhere in the thread, most of that value lies in the data sources.
275.
by Retr0id 2mo ago
Holy crap. This is like a software-reachable version of the dynamic memory aliasing hardware attack demonstrated by https://batteringram.eu/
276.
by Retr0id 2mo ago
Let's say I can build my software as a single static Linux binary (or at least, one for every supported arch) with no external deps outside of the syscall ABI. Which often isn't true for nontrivial software, but let's say it
277.
by Retr0id 2mo ago
"sudo !!" is quite firmly burnt into my muscle memory, but the whole rest of the time when I type an exclamation mark I mean it literally, and I get annoyed when it turns into a syntax error of some variety.
278.
by Retr0id 2mo ago
zero, I guarantee whatever model provider this site is a frontend for is already powering a large portion of linkedin activity.
279.
by Retr0id 2mo ago
The density of components on a phone logic board is significantly higher, which is how I define intricacy.
280.
by Retr0id 2mo ago
I think a phone does beat a thinkpad, but not by much.
281.
by Retr0id 2mo ago
Not enough tokens for some diagrams/illustrations, too?
282.
by Retr0id 2mo ago
IMHO there's never been an overall "ideal language", and there still isn't, it's just about the right tool for the job. The only thing LLMs change is that you don't need to give quite as much weight to how well
283.
by Retr0id 2mo ago
Closer to IRC, although they do have forum-like features. Unlike a regular forum, it has no web-facing presence (unless you rig up some kind of bot to mirror it).
284.
by Retr0id 2mo ago
This must be especially inconvenient for those with criminal physiognomy.
285.
by Retr0id 2mo ago
Most hobby communities in my spheres of interest have been subsumed into Discord. It is yet another silo, but it does feel lively. I don't think I'm contradicting you here, I just feel less negatively about it.
286.
by Retr0id 2mo ago
Super cool. I like how you can hop from plane to plane. However, once I hop to a satellite, it seems like I'm stuck there. It'd be nice if there were more options from that point.
287.
by Retr0id 2mo ago
Slightly silly idea to solve this: Hash all non-patched areas of the file to produce a key. Use the key to encrypt your XOR value. Thus the key can only be derived by someone who has either the original file, or the patched version.
288.
by Retr0id 2mo ago
However, if your change involves zeroing something out, you're back to storing the original data again.
289.
by Retr0id 2mo ago
I've tried this, and it is largely what I do, but it's easy to end up with a large tangled pile of markdown files, and the implementation either diverges from what's in markdown or you burn a lot of tokens keeping them in-syn
290.
by Retr0id 2mo ago
I manually approve everything (aside from the "allow commands like this" option). Not because I'm worried it's about to do something harmful but because I want to stop it from wasting tokens doing something stupid like i
291.
by Retr0id 2mo ago
You can't get from Mac-style shortcuts to PC-style shortcuts just by reassigning individual keys. If you swapped them then Ctrl+C would no longer emit a terminal break, for example.
292.
by Retr0id 2mo ago
It's common enough to just copy single-file headers into a project. Now the docs come with it.
293.
by Retr0id 2mo ago
Most of the RAM being "used" is available to be reallocated to something more important, should the need arise.
294.
by Retr0id 2mo ago
I see it the other way. Applying the skills to a job is much more lucrative, so most do that instead.
295.
by Retr0id 2mo ago
Because phreaking in the traditional sense hasn't worked for decades?
296.
by Retr0id 2mo ago
> you'll have to unlearn your muscle memory of the Ctrl key There is another option, which is to use Karabiner to revert to PC-like shortcuts. Learning the mac way is probably better if you plan to use mac exclusively, but I was tri
297.
by Retr0id 2mo ago
Yup. It's the most frustrating thing in the world, because in my experience it works (claude's claudglish-infused code that is, I can't vouch for TFA). So I brave through it to achieve whatever it is I'm working on.
298.
by Retr0id 2mo ago
> trying to gain a veneer of legitimacy > SEO For me, these terms are synonymous.
299.
by Retr0id 2mo ago
The hardest-to-mitigate bot traffic tends to come from residential proxies, and most residential connections are still v4-only. However, it is also easy to get large numbers of v6 addresses cheaply.
300.
by Retr0id 2mo ago
If pooping is the only time you spend away from your phone, you're not spending enough time away from your phone.

More ›