ameliaquining

5 ms·

61.
by ameliaquining 2mo ago
The trouble is, sometimes governments do things that they shouldn't do.
62.
by ameliaquining 2mo ago
For the benefit of readers: This is apparently a list of vulnerabilities that were found with the help of Z.ai's models (presumably GLM-5.3), not vulnerabilities in Z.ai's software or services. Also, it's in Chinese by de
63.
by ameliaquining 2mo ago
This blog post is about an open source project that you can look at for yourself and decide whether it's suitable for your use case.
64.
by ameliaquining 2mo ago
Google Password Manager does in fact have E2EE. It's quite straightforward to enable. Your interlocutor is complaining that it's not the default, which I'm quite sure is a deliberate decision made on the grounds that the typi
65.
by ameliaquining 2mo ago
Would they in fact have less work to do? Government funding might be the right answer, but it's not necessarily going to happen automatically; the concern (which applies in other domains besides this one) is disrupting the means by whi
66.
by ameliaquining 2mo ago
The real question is whether his gambit to neutralize the investigation against him actually works. At this point it's too early to say.
67.
by ameliaquining 2mo ago
It's mostly negative polarization driving things these days, so I don't think that idea makes as much sense as it once did.
68.
by ameliaquining 2mo ago
What precisely is that definition of memory safety? I'm not sure I follow.
69.
by ameliaquining 2mo ago
Question for someone who knows more about this stuff than I do: Why don't the problems in the "economic collapse" section also apply to IPv6? Or do they, and we've only been saved by lack of adoption?
70.
by ameliaquining 2mo ago
Your Markdown-format research report is full of mojibake, you might want to fix that.
71.
by ameliaquining 2mo ago
In fairness, they exist by virtue of having working implementations that (at least a few) people actually use, not by virtue of being an Internet-Draft.
72.
by ameliaquining 2mo ago
I am fairly sure the authors do understand this (see: "Most network engineers would laugh this off as an April Fools RFC written by an enterprise architect on buzzword overdrive."). But since the proposal got a lot of attention, r
73.
by ameliaquining 2mo ago
Most political scientists don't agree with this. The Wikipedia page provides a good overview: https://en.wikipedia.org/wiki/Political_polarization_in_the_...
74.
by ameliaquining 2mo ago
The U.S. was way less politically polarized back then.
75.
by ameliaquining 2mo ago
What precisely do you mean by "this process"? The kind of linking that Fil-C supports is pretty different from what the blog post proposes.
76.
by ameliaquining 2mo ago
Can you please link to specific false statements and explain why they're false?
77.
by ameliaquining 2mo ago
You're looking too much at the complete memory safety goal; the important part here is the interop non-goal. Designing a foreign function interface between Fil-C and regular C, in a way that upholds both languages' expectations ab
78.
by ameliaquining 2mo ago
Also they have been prohibited by customary international law for over 150 years. The people talking about bringing them back are mostly trolling.
79.
by ameliaquining 2mo ago
https://github.com/bluesky-social/atproto-website If I'm understanding this codebase right, it's a hand-rolled framework based on MDX and Next.js; the UI elements you're referring to were designed from s
80.
by ameliaquining 2mo ago
The reason nobody's just giving it to them isn't because the amount of data's too much of a hassle, it's because nobody can figure out who has the keys to the now-defunct storage company, and Iron Mountain quite reasonab
81.
by ameliaquining 2mo ago
That's dynamic, not static; it doesn't help much with a race that's hard to trigger.
82.
by ameliaquining 2mo ago
Why would enterprises need Keybase's product?
83.
by ameliaquining 2mo ago
LLMs are not at the point where they can reliably complete this kind of task without making mistakes. The model checker can tell you whether the formal design specification contradicts itself, but it can't tell you whether it matches t
84.
by ameliaquining 2mo ago
The program existed under a different name well before the Hugging Face incident. Hugging Face certainly would have qualified for admission. They just didn't bother to apply.
85.
by ameliaquining 2mo ago
If you (like me) found this hard to read, Reuters wrote up a decent summary: https://www.reuters.com/world/trump-signed-memo-allow-use-cy... On a related note, https://mentalwires.tumblr.com/post/6
86.
by ameliaquining 2mo ago
Interesting. I don't think this kind of technique could realistically have caught the bug in advance, though; you're not going to model the entire codebase in TLA+, so the investigation in that post modeled just the parts that tur
87.
by ameliaquining 2mo ago
I admit to curiosity as to whether static analysis could have caught this. E.g., Rust's type system (yeah yeah I know) catches all data races, unless they originate in unsafe code, which this one might or might not have; a hypothetical
88.
by ameliaquining 2mo ago
Do you happen to have a link?
89.
by ameliaquining 2mo ago
Bun is an unrepresentative example of a Rust codebase for this purpose because (1) it was a direct port from a memory-unsafe language, and (2) it has a major C++ dependency (JavaScriptCore) whose objects in memory are deeply entangled with
90.
by ameliaquining 2mo ago
Source? I haven't heard of that failure mode being especially prevalent. (Also, by "bypassing the borrow checker" do you mean unsafe raw pointers, Rc/RefCell, or something else?)

More ›