amluto

59 ms·

931.
by amluto 11mo ago
My old Windows phone had a slide out keyboard that was conceptually nice but had a bizarre ortholinear layout and particularly poor switches.
932.
by amluto 11mo ago
The common device that this doesn’t work well for is the Raspberry Pi 5. For full power mode it needs an unusual 5V/5A power supply, and that is quite unusual.
933.
by amluto 11mo ago
Claude regularly computes a reply for me, then reports an error and loses the reply. I wonder what fraction of Anthropic’s compute gets wasted and redone.
934.
by amluto 11mo ago
Service can’t do anything about the state machine being wrong. The Rivian app does not permit you to send a command to the car while the app thinks the car is processing a command. Trunk opening? You can’t unlock the door. On top of this,
935.
by amluto 11mo ago
IMO Calibri and Times New Roman are both poor choices: they are not free. The US Government’s works are not generally subject to copyright, and IMO it’s rather obnoxious for their fonts to be restricted. Also, Calibri is specifically a Mic
936.
by amluto 11mo ago
Neither Calibri nor Times New Roman are free to use, although they are free in certain contexts for Windows users. The US Government is paying plenty for them.
937.
by amluto 11mo ago
I love how the two factor screen has no obvious way to tell it that you want a different account. Hint: you can often avoid some of this mess by adding the authuser=user@domain to the URL.
938.
by amluto 11mo ago
> Gemini via studio Excuse me? If you mean AI Studio, are you talking about the product where you can’t even switch which logged in account you’re using without agreeing to its terms under whatever random account it selected, where the
939.
by amluto 11mo ago
I don’t know much about the kind of giant motor that would be used in a ship, but as a general principle: the load that a motor presents to the drive electronics does not resemble your house in the slightest. To power your house (or, more g
940.
by amluto 11mo ago
Exactly. This workflow step takes a rather important secret and sticks it on a VM where any insufficiently sandboxed step before or after it can exfiltrate it. GitHub should instead let you store that key as a different type of secret such
941.
by amluto 11mo ago
Fine. Then let people set up a little WASM app that gets access to the secret and has an API callable by the workflow. And make that app be configured as part of the secret’s configuration, not as a file in the repository.
942.
by amluto 11mo ago
By itself, that doesn’t help if the thing in the sandbox does useful work for two hours and then does rm -rf /
943.
by amluto 11mo ago
Or if I want the sandbox to be able to create commits, which is extremely useful.
944.
by amluto 11mo ago
You seem to be talking mostly about the CD part. Some thoughts: On the one hand, CD workflows are less exposed than CI workflows. You only deploy code that has made it through your review and CI processes. In a non-continuous deployment
945.
by amluto 11mo ago
I want a variant of this where I make a worktree that has no ability to push anywhere including its parent. Instead the parent worktree pulls from it automatically. That way I can run some sandboxed workflow that might arbitrarily corrupt
946.
by amluto 11mo ago
With a secure enclave or an HSM, there's a secret, but the users do not have access to the secret. So, if you have a workflow that needs to, say, sign with a given private key, you would get an API that signs for you. If you need to
947.
by amluto 11mo ago
In my experience, most of the more important Java-on-the-web stuff was Java Web Start as opposed to applets. And Java Web Start was all kinds of bad. About the only remotely good thing I could say is that it has a sandbox. Which protected
948.
by amluto 11mo ago
> The researchers identified four fundamental security properties that CI/CD systems need: admittance control, execution control, code control, and access to secrets. Why do CI/CD systems need access to secrets? I would argue
949.
by amluto 11mo ago
Is the sloping voltage curve that much of a problem? ISTM it might simplify cell balancing and SOC determination.
950.
by amluto 11mo ago
It’s not quite “just”. A way to safely and efficiently connect and disconnect them would be needed.
951.
by amluto 11mo ago
And when that last way fails, what do you do? I like to have a separate monitoring process that monitors my process and a separate machine in a different datacenter monitoring that. But at the end of the day, the first process is still goi
952.
by amluto 11mo ago
I no real complaints about CHERI here. What’s a pointer, anyway? Lots of old systems thought it was 8 or 16 bits that give a linear address. 8086 thought it was 16 + 16 bits split among two registers, with some interesting arithmetic [0].
953.
by amluto 11mo ago
Hah, this is IA-64. It has special hardware support for register spills, and you can search for “NaT bits” here: https://portal.cs.umbc.edu/help/architecture/aig.pdf to discover at least two magical registers to h
954.
by amluto 11mo ago
Oh, to be clear, I would not do this if I needed that degree of reliability. Or maybe I would use an MMU but drive it with a kernel written in the old fashioned way with no allocation. It would depend on what hardware I had available and wh
955.
by amluto 11mo ago
I want some defined way to tell the compiler that I am intentionally ignoring the result. I encounter this when trying to do best-effort logging in a failure path. I call some function to log and error and maybe it fails. If it does, what,
956.
by amluto 11mo ago
Not if you use GCC. https://godbolt.org/z/zYdc9ej88 clang gets this right.
957.
by amluto 11mo ago
If you have memory to spare and are using hardware with an MMU, you can remap your logical address to a different page. Linux can do this, but only for user memory.
958.
by amluto 11mo ago
I don’t think the problems they were dealing with had much to do with any of those properties of Rust. Their issue seems to have been that they weren’t using native JavaScript/TypeScript and that their situation was improved by using n
959.
by amluto 11mo ago
I once interned at a lab that used a piece of surely overpriced hardware that integrated with Simulink. You would make a Simulink model, and you’d click something and the computer would (IIRC) compile it to C and upload it to the hardware.
960.
by amluto 11mo ago
We will start finding out whether people who got the varicella vaccine instead of chicken pox get shingles at a similar rate soon — the older members of this population are approaching shingles age. Here’s a study that looks good: https:&#

More ›