blincoln

9 ms·

61.
by blincoln 1y ago
This. There are no flip-covers on the switches in any of the photos I've seen. Additionally, it looks like the side guards are only on the left and right sides of the pair of cutoff switches, not in-between the two switches. So if on
62.
by blincoln 1y ago
The peer comment to your own has a link to a real doc that supports the claim: https://ad.easa.europa.eu/blob/NM-18-33.pdf/SIB_NM-18-33_1
63.
by blincoln 1y ago
I don't think it's fair to say that pilot error is confirmed yet. It seems like a reasonable hypothesis, but what if the electronics glitched out and acted as though the cutoff switches had been flipped (the first time), even if t
64.
by blincoln 1y ago
This is one of the first scenarios that came to mind for me as well. i.e. hypothetically, no one flipped the switches to cutoff initially, but a glitch in a computer component caused the same effect, including some indication (a status ligh
65.
by blincoln 1y ago
This is often a useful practice, because it prevents providers' badly-written/-configured attempts at antimalware from blocking files that the recipient knows they want to accept.
66.
by blincoln 1y ago
Are you sure the extended warranty would have covered it? I paid for an extended warranty on the first car I ever bought. Turned out it didn't cover any of the things the salesperson cited as good reasons to pay for it, and to maintain
67.
by blincoln 1y ago
Adderall is an amphetamine, but it is not methamphetamine. It would be closer to accurate to compare it to Dexedrine than meth.
68.
by blincoln 1y ago
Have you tried HDMI output from the computer running Anukari to an HDMI capture dongle on a second system, so that all of the recording overhead is offloaded? I'm very rusty at music, but I always had a big soft spot for unusual/u
69.
by blincoln 1y ago
I'm American, and I fully support moving to the metric system. But it's a tough sell for most people. If someone is an adult, it's a bunch of new information to learn, and unless they work in a field that involves measurement
70.
by blincoln 1y ago
If one isn't technical, DRM sounds like a great thing. "Finally, a way to keep people from getting your content without paying for it!" Of course, it doesn't, and makes the experience worse for actual customers. Seeing t
71.
by blincoln 1y ago
Trains move quickly enough that even someone on foot may not hear them before being run over. It's why one should never walk along railroads. If someone on foot may not hear a train in time, how well is someone in a car with the window
72.
by blincoln 1y ago
I'm guessing you've never lived in a rural area? * Protection against aggressive wild animals. * Protection against aggresive humans. This often applies elsewhere, but becomes less and less optional the further away law enforcemen
73.
by blincoln 1y ago
Cert pinning is a very common practice for mobile apps. I'm not a fan of it, but it's how things are today. Seems likely that that will have to change with shorter cert lifetimes.
74.
by blincoln 2y ago
Command/data channel separation can and does exist in the real world, and humans can use it too, e.g.: "Please go buy everything on the shopping list." (One pointer to data: the shopping list.) "Please read the assigned
75.
by blincoln 2y ago
Does modern lead-free soldering still end up having tin whiskers? That was always the big downside as far as I was concerned. A quick internet search implies it's still a thing.
76.
by blincoln 2y ago
I think it would be possible to use a model like prepared SQL statements with a list of bound parameters. Doing so would mean giving up some of the natural language interface aspect of LLMs for security-critical contexts, of course, but it
77.
by blincoln 2y ago
Definitely a missed opportunity that the article didn't discuss that obviously-derivative borrowing has been happening a lot longer than ML image generation has been around. And that borrowing is OK! Indiana Jones' appearance is v
78.
by blincoln 2y ago
There are plenty of dishwashers now that will do fine without rinsing the dishes beforehand, even e.g. LG models that are not expensive. Needing to rinse used to be the norm, but if one buys a dishwasher in the 2020s that won't work wi
79.
by blincoln 2y ago
I definitely support the author's "make an image of the hard drive as soon as you buy vintage hardware". There have been some amazing finds that way, especially game prototypes. Often, the data has been marked deleted and eve
80.
by blincoln 2y ago
Do you still have the drive? You might be able to recover the content. The level of difficulty might be anything from "plug it into an adapter and make an image with dd" to "find a working drive of the same type and start swa
81.
by blincoln 2y ago
Wouldn't using crypto_box mean the developer would have to implement their own custom authorization mechanism from scratch? i.e. it looks like a reasonably good way of exchanging encrypted messages, but I don't see anything in the
82.
by blincoln 2y ago
I'm guessing they didn't want to be directly responsible for dropping a zero-day that allows authorization bypass in countless systems across the planet before the parties responsible for those systems have a chance to fix them. I
83.
by blincoln 2y ago
The biggest problem with having separate accounts for everything is that a lot of the users will make their own "wish it were SSO" by setting their passwords in the systems to the same value. Then, when the weakest system is explo
84.
by blincoln 2y ago
The animation in the article looks like a simplified diagram of a rotary engine or a drill that will cut polygon-shaped holes instead of round holes. The article mentions a connection to the Fourier transform, which makes sense because nest
85.
by blincoln 2y ago
Modern web apps make a mind-boggling number of cross-origin requests, and many of them are to multi-tenant SaaS providers. You'd be constantly flooded with permission popups, and attackers would just host part of their code on one ot m
86.
by blincoln 2y ago
HttpOnly is mostly a vestigial artifact of the 2000s. As soon as web apps began relying on JS in the browser making calls to APIs, that same JS started needing access to the session token, or credentials equivalent to the session token. If
87.
by blincoln 2y ago
The HttpOnly flag isn't really practical in modern web apps where so much logic runs in JS in the browser and makes requests to APIs. It's a leftover from an earlier era of web app architecture. If it can be enabled without breaki
88.
by blincoln 2y ago
CSRF tokens are only valid for a particular user, or session, or sometimes even a particular page load. If there's a way for evil.com to obtain a CSRF token that's valid for an arbitrary user, it's a vulnerability, just like
89.
by blincoln 2y ago
It gets more interesting when someone gives the LLM the power to trigger actions outside of the chat, the LLM has access to genuinely sensitive data that the user doesn't, etc. Convincing an LLM to provide instructions for robbing a ba
90.
by blincoln 2y ago
I'm pretty sure the paid version of PowerAmp for Android will do what you want, with or without explicitly creating a playlist. I have many thousands of mp3s on my phone in nested folders. PowerAmp has a "shuffle all" mode th

More ›