bri3d

30 ms·

541.
by bri3d 2y ago
Oddly, it actually originates from the Ruby ecosystem - `pganalyze` initially created `libpg_query` to parse Postgres in Ruby. `libpg_query` in C does the "magic" of reformulating Postgres's query parser into an AST generator
542.
by bri3d 2y ago
Yes, the same way. It's all based on the extremely useful ` https://github.com/pganalyze/libpg_query ` project, which is where the "extracted the parser from Postgres" part comes in. Supabase's LSP al
543.
by bri3d 2y ago
This doesn't make sense. Energy in the system is conserved. On an ICE car, brakes convert the energy to heat. On an EV, motors convert the energy to electricity. The tires experience the same net force. EVs wear tires more quickly, in
544.
by bri3d 2y ago
Worth noting that 50-60% of passenger cars in France are diesel, but Paris have been gradually banning older higher emission diesels (Crit’air 3, 4, 5) from Paris. Banning cars outright also works, of course, but I suspect a lot of the redu
545.
by bri3d 2y ago
I think one thing that the linked article (which I think is great and I generally agree with!) misses is that libraries and abstraction can patch over the lack of composability created by heterogeneous systems. We see it everywhere - AI&#x2
546.
by bri3d 2y ago
To the sibling comment’s point, I suppose it’s not weird in the Java ecosystem. The parquet-java project has a design where it deserializes Parquet fields into Java representations grabbed from _other_ projects rather than either having som
547.
by bri3d 2y ago
This seems to come from parquet-avro, which looks to attempt to embed Avro in Parquet files and in the course of doing so, does silly Java reflection gymnastics. I don’t think “normal” parquet is affected.
548.
by bri3d 2y ago
There seems to be some weird beef in the background here with the TrollStore developers and Verichains, but Verichains come out looking much better here by naming the exploit what it actually is rather than misleading puffery around “sandbo
549.
by bri3d 2y ago
I think it’s worse from a time wasting standpoint, really - a lot of modern UX does have thousands of hours of UX research dumped into it, but with faulty metrics driven goal seeking and internal politics bolted on. I agree that Vibe Brandi
550.
by bri3d 2y ago
I think the fall happened a long time ago. It's funny - I'm recently accused often of wearing rose-colored glasses on HN, but I think the present is actually quite a bit better than 15 years ago was when it comes to privacy. It&#x
551.
by bri3d 2y ago
No; note the last sentence in the article: "a bypass is not even needed on most Linux distributions, because they allow unprivileged users to obtain full capabilities inside namespaces by default (and therefore to exploit CAP_SYS_ADMIN
552.
by bri3d 2y ago
Well, kind of, I don’t think it’s that crazy. This service does two things: * Performs image OCR on images, generically. This is then used for several features: “I type a word in the search box and it can look through my screenshots and pho
553.
by bri3d 2y ago
> There's little here worth being curious about. I’m all for OP returning the computer Google broke, as sibling comments have suggested, but the curiosity route would have been fruitful for them too; I’m pretty sure the flag I poste
554.
by bri3d 2y ago
This. Go to chrome://flags and disable “Enable OCR For Local Image Search” and I bet the problem goes away. It’s a stupid feature for Google to enable by default on systems that are generally very low spec and badly made, but it’s
555.
by bri3d 2y ago
The source is available: https://chromium.googlesource.com/chromium/src/+/refs/tags/1... It’s not “training an AI model on screen contents without consent.” It is a stupid feature for Google to enab
556.
by bri3d 2y ago
Oh! The ancient 2017 WiFi article - I see now; I thought you were referring to the OP's NSO group exploit.
557.
by bri3d 2y ago
Qualcomm, not Broadcom, and the linked article series doesn't discuss the IOMMU at all - it's not related to this exploit as far as anybody knows. Maybe you're thinking of the "Operation Triangulation" exploit chain
558.
by bri3d 2y ago
I don't think there's anything cryptographic about the baseband communication on an iPhone, or that they're connected through the Secure Enclave. I think they're just PCIe endpoints with IOMMU (which is fine as long as t
559.
by bri3d 2y ago
How does one of these points relate to the other in any capacity?
560.
by bri3d 2y ago
They don't use a residential IP space; they use Azure Data Center (which, being less popular, isn't blocked as often as for example EC2).
561.
by bri3d 2y ago
I don't really get this argument: "you're saying that one thing, namespaces, isn't implemented in any way resembling a microkernel, but what if we replaced it with another completely different thing, a hypervisor? Then i
562.
by bri3d 2y ago
OK, I get what you are saying now, and I agree if we are talking about KVM. That's not how Kubernetes works by default, so I thought we were talking about container runtimes. I still disagree strongly from both a practical security and
563.
by bri3d 2y ago
> if you can just use one of those mics? They're extremely omnidirectional and very sensitive. With a single mic with no beamforming you get basically all of the sounds from every part of the room, including and especially horribly
564.
by bri3d 2y ago
If you enjoy tedium it runs really well on ARM Windows in Parallels.
565.
by bri3d 2y ago
It’s not “some of the concepts” nor minutae, though, it’s literally the difference between a microkernel and a monolithic kernel. Presenting capabilities / namespaces to userland is a completely different and in the case of Linux, orth
566.
by bri3d 2y ago
Not at all? If anything they’re filling the opposite role. Microkernels are about building interfaces which sandbox parts of the kernel. Namespaces are about giving sandboxed userlands full access to kernel interfaces.
567.
by bri3d 2y ago
It's fascinating to me that people have a mis-conception that Google are universally more open about these features, and therefore things will be easy for Apple. I do think they're more open, but the equivalent features are absolu
568.
by bri3d 2y ago
> The listed features are all functionalities that Apple is using to gain an unfair advantage for ADJACENT products and services. It is not an issue that iOS has such features, the EU doesn't care. AirDrop and AirPlay seem pretty be
569.
by bri3d 2y ago
> Yes, IMO when you hit some amount of market saturation your patents should be invalidated and your work made open. I actually agree with this much more than I agree with the notion that if a company is able to vertically integrate a ha
570.
by bri3d 2y ago
The AT+T analogy is so different that there is a clear term for it in economics: "natural monopoly." It is quite obvious to me that natural monopolies require strict regulation. I do not believe that smartphone handsets are a natu

More ›