Sophira

14 ms·

211.
by Sophira 1y ago
Honestly, the same is true in a lot of other areas of computing. Whenever you download an open-source program and you don't have to compile it first, you're at risk of running code that is not necessarily what's in the public
212.
by Sophira 1y ago
One thing that I wonder about is that even with Fisher-Yates, a PRNG relies on a seed value. Assuming that this seed is going to be a 64-bit value, that seed value can only go up to a maximum of 2^64-1 = 18,446,744,073,709,551,615.000, whic
213.
by Sophira 1y ago
Clearly it wasn't handled by the games which inspired this post. Posts like this don't come out of nowhere.
214.
by Sophira 1y ago
Good question. I've just tested on the latest ESR version of Firefox (115.27.0esr) and the bypass definitely works there. I've also been able to do more testing on whether the XHR/frame blocking is bypassed, and I was wrong t
215.
by Sophira 1y ago
> it looks like Gemini already picked up the story and corrected itself. Not completely. According to later posts, the AI is now saying that he denied the fabricated story in November 2024[0], when in reality, we're seeing it as it
216.
by Sophira 1y ago
I've been a bit wary of giving details due to it not getting updated. See my other comment: https://news.ycombinator.com/item?id=45085342
217.
by Sophira 1y ago
Given that uMatrix isn't being developed any more, I've been a bit wary about sharing explicit details. I can say that the bypass works on uMatrix 1.4.4 (the latest release) and that even if you've disabled JavaScript from ru
218.
by Sophira 1y ago
When it was developed, uMatrix was a brilliant method of being cautious about what runs, and it had a logger so you could easily see what domains you should enable the current domain to have access to. I still use it honestly, but I'll
219.
by Sophira 1y ago
I've seen videos of people literally using the Tesla mobile app to 'call' their FSD-enabled car to them. Given that that they coded this functionality and expose it in their app, I really don't see how Tesla can be let o
220.
by Sophira 1y ago
I believe you may have misinterpreted the comment. They're not talking about logs that were made from a login form on their website. They're talking about generic logs (sometimes not even web server logs) being generated because o
221.
by Sophira 1y ago
As I understand it from reading the article, the sites that are vulnerable are specifically vulnerable to XSS (cross-site scripting) attacks. In other words, there are attacks from someone not affiliated with the site, and are getting the s
222.
by Sophira 1y ago
That sounds surprisingly like "Humans only use 10% of their brain at any given time."
223.
by Sophira 1y ago
In other words, we're rediscovering the lessons from George Orwell's Nineteen Eighty-Four . Language is central to understanding; remove subversive language and you remove the ability to even think about it.
224.
by Sophira 1y ago
Honestly the GTA5 downloader/updater itself has pretty bad configuration. I wrote a post about it on Reddit years ago along with how to fix it. I don't know if it's still applicable or not because I haven't played it for
225.
by Sophira 1y ago
There are also things like Oobabooga's text-generation-webui[0] which can present a similar interface to ChatGPT for local models. I've had great success in running Qwen3-8B-GGUF[1] on my RTX 2070 SUPER (8GB VRAM) using Oobabooga
226.
by Sophira 1y ago
How does this upcoming feature deal with the potential problem of fake commit IDs? Commit IDs are based on a number of factors about the commit, including the actual contents and the commit ID of the parent commit. Any fully cloned git repo
227.
by Sophira 1y ago
Fun fact, I just could not work out what this was supposed to be, so I just used Whisper (indirectly, via the FUTO Voice Input app on my phone) and repeated the sentence into it, and it came out with the 'correct' transcription of
228.
by Sophira 1y ago
By the way, I would guess that this is almost certainly why LLMs can actually decode/encode base64 somewhat well, even without the help of any MCP-provided tools - it's possible to 'read' it In a similar way to how an LL
229.
by Sophira 1y ago
Yeah, I was aware of that, but I figured it was the easiest way to explain it. It's true that "character representation of a byte" is more accurate, but it doesn't roll off the tongue as easily.
230.
by Sophira 1y ago
Mathematically, base64 is such that every block of three characters of raw input will result in four characters of base64'd output. These blocks can be considered independent of each other. So for example, with the string "Hello w
231.
by Sophira 1y ago
Does read-only access not preclude the possibility of editing old comments?
232.
by Sophira 1y ago
The thing that ties cracking to the demoscene is that, as Trixter/Hornet states in the excellent documentary "Demographics: Behind the Scene"[0], copy protection itself is a creative process; you need to think about how the h
233.
by Sophira 1y ago
You're assuming that the user actually wants to sign up. In reality, it's likely that they're just clicking "Continue" in order to get rid of the dialog and couldn't care less about a signup.
234.
by Sophira 1y ago
Reddit uses it too as the backend for its Chat feature, which is also now used for private messages in general. It doesn't advertise this, though.
235.
by Sophira 1y ago
> I thought that the desktop version of a website is the "real website" i.e. that there is only one static original website and that its mobile version was some fake substitute, so I always activated the option "show deskt
236.
by Sophira 1y ago
Chip and PIN is almost how electronic passports already work - it's just that the 'PIN' is printed in the passport itself, so in order for anybody to communicate with the chip, it has to see the page which has it printed in o
237.
by Sophira 1y ago
The readme suggests that Wayland users should add a udev rule to enable direct keyboard access to the user at the physical console (read: to any process spawned by the user at the physical console). My understanding was that a major touted
238.
by Sophira 1y ago
I'm no lawyer, but my take on it is that by reproducing this particular value for the validation header, you are stating that you are the Chrome browser. It's likely that this has been implemented in such a way that other browsers
239.
by Sophira 1y ago
Because you would need to reproduce an explicit Google copyright statement which states that you don't have the right to copy it ("All rights reserved.") in order to do it fully. That presumably gives Google the legal ammunit
240.
by Sophira 1y ago
I would imagine that this serves the same purpose as the way that early home consoles would check the inserted cartridge to see that it had a specific copyright message in it, because then you can't reproduce that message without viola

More ›