TheDong

53 ms·

931.
by TheDong 3y ago
"Rust wouldn't help" "This bug can't be implemented in rust" "I meant that Rust doesn't fix the bug in Java. Even if you write rust code, you can also write buggy java code too so rust didn't fix
932.
by TheDong 3y ago
Let me get this straight: Your attack is "I can spoof an email from address". Is that not true for literally anything that accepts email? The person who receives your spoofed message gets a link to the original message (message-ur
933.
by TheDong 3y ago
Monkeys aren't algorithms nor computers, so that doesn't seem very relevant. Let's look at a totally different analogy: compression algorithms. If I take a digital artist's work which they publish as a png or psd file, a
934.
by TheDong 3y ago
Humans are special and can create new copyrights. The process of a human brain synthesizing stuff does act as a barrier to copyright infringement. Machines and algorithms are not legally recognized as being able to author original non-deriv
935.
by TheDong 3y ago
That isn't firm evidence, but courts don't need firm evidence to start a case and discover new facts. They very well can ask LLM experts, and openAI themselves, whether that output is highly likely to have been derived from the co
936.
by TheDong 3y ago
I will list all the cross-applications I have found for Rubik's cube solving to other disciplines, ordered from most to least useful: 1. It has an application to the discipline of waiting. This is easily it's most powerful applica
937.
by TheDong 3y ago
The linux kernel, which is open source and does want contributors, is doing more-or-less just fine with an email-based PR and review flow. If it's an open source project, it should be using an open source review platform that allows im
938.
by TheDong 3y ago
The argument is about harm to the general populace, not about harm to a specific group they dislike. Are indoor smoking bans good? The justification is that second-hand smoke has significant negative impacts on the general populace. Are tab
939.
by TheDong 3y ago
If your goal is to be simpler, and also more powerful, could you write down what that means? If your goal is to just poke around without a plan, or to just copy features without a unifying vision, it seems unlikely it ends up simpler or mor
940.
by TheDong 3y ago
I've had quite a few issues with go version updates. I've written up a couple over here: https://news.ycombinator.com/item?id=29763324 There's more than that. What I really want is to be able to update the co
941.
by TheDong 3y ago
After skimming the site and code: Do not use this, just use anki. Anki has a free web version (anki web), and has free-as-in-AGPL desktop apps as well. Maybe one day this software will be comparable to anki, but right now it's missing
942.
by TheDong 3y ago
Your response there comes off poorly to me too. When I read the thread in context, it's clear that the response is within the hypothetical raised in the very first comment "if those websites used Caddy", that hypothetical. Th
943.
by TheDong 3y ago
>>3 > Why is that unclear? The usual advice is to follow what the stdlib does. Let's look at an example. Let's say we close a file and then try to set a deadline on it: f, _ := os.Create("/tmp/filenam
944.
by TheDong 3y ago
I don't think that glib saying applies to signal. Signals money comes from two sources: 1. User donations - you can in fact be paying for it, 2. A 50 million dollar initial fund provided by a benevolent sponsor, and probably some other
945.
by TheDong 3y ago
This is hacker news, we're allowed to look at the source code here if we want to. If you view source, you'll see <meta name="generator" content="Gatsby 2.15.26"/> If you view your network re
946.
by TheDong 3y ago
The threshold is being increased from 60 to 100 for bots which didn't delegate auth, but not for any tools that used specific user-ids. It's misleading. To quote from reddit's docs: https://support.reddithelp.com&#
947.
by TheDong 3y ago
> So what if Apollo charged $6 per month [...] If only a third of those users paid, that would be over $350,000 per month. [...] I don’t know what the operating costs are for Apollo Total nonsense. If you increase the price of something
948.
by TheDong 3y ago
Checklist are what Danial is complaining about. NVD saw the vuln, thought "Oh, I think that fits in the 'authentication bypass' checklist entry", and ranked it as high severity. Danial is saying that no, the curl develop
949.
by TheDong 3y ago
Minimalist is just a self-identified label, so you're welcome to call yourself a minimalist if you feel that it fits. You don't have to look for some technical workaround to some exact definition here, and pedantically arguing abo
950.
by TheDong 3y ago
The SEC certainly thinks gemini is running an illegal exchange, and said so quite clearly when charging them of that earlier this year: https://www.sec.gov/news/press-release/2023-7 The case has not been dropped,
951.
by TheDong 3y ago
> This SEC action has nothing to do with Binance being a crypto exchange The SEC press release ( https://www.sec.gov/news/press-release/2023-101 ) includes a section titled "UNREGISTERED OFFER AND SALE OF CR
952.
by TheDong 3y ago
Okay, let me try that: $ echo -e 'package main\n\nimport _ "golang.org/x/image/draw"' > main.go $ go run main.go main.go:3:8: no required module provides package golang.org/x/ima
953.
by TheDong 3y ago
https://web.archive.org/web/20230606071959/https://www.homed...
954.
by TheDong 3y ago
I'll eat my files if this gives 8x on normal applications reading normal sized files from real SSDs or HDDs. The commenter mentions "greater than 8x" on a very artificial benchmark of reading /dev/zero. The original
955.
by TheDong 3y ago
You can do that with async functions too by having the caller use, for example in rust, 'runtime.block_on(async_handle)' You're talking about doing this: f1 := func() error { return nil } ctx_f1 := func(context.Cont
956.
by TheDong 3y ago
> you can't call async code from a sync context (hence the color issue), but I can always pass a "context.Background()" or such as a context value if I don't already have one. You can always pass context.Background, i
957.
by TheDong 3y ago
> Two programs running under same user can’t by default read each other’s memory. 'gdb -p $pid' works fine for me on linux as a non-root user for another pid of the same user, and that sure lets me read all memory. I think &#x
958.
by TheDong 3y ago
I mean, if you use 1Password on both linux and iOS, you now trust both the mobile and desktop teams at 1password. You trust two separate supply chains, one for the iOS app dependencies, one for the linux dependencies. If you use bitwarden,
959.
by TheDong 3y ago
> A user wouldn't be able to know what they were saying yes too, unless they could understand and approve each individual API call or operation done by the plugin. I don't understand this. The suggestion I had was basically: Us
960.
by TheDong 3y ago
There's a clear point where an API call is being made. That point is when a blocking consent prompt could show up. Like, at worst openAI could "mitm" the prompt's call, and display a pop up modal asking for permission. I

More ›