btown

31 ms·

541.
by btown 2y ago
There's some nuance here. Even the most battle-tested system, with distinct slots for executable code and primitive values, might have a way in which an untrusted primitive input can overrun a buffer, or be split in an unsafe way, an
542.
by btown 2y ago
Does anyone know if https://github.com/tj-actions/verify-changed-files/ was compromised as well?
543.
by btown 2y ago
Both were independently named for https://en.wikipedia.org/wiki/John_James_Audubon !
544.
by btown 2y ago
While there are a lot of these "messaging bills" that do serve purely political purposes - see https://rollcall.com/2024/07/25/messaging-bills-are-loud-but... for a somewhat informal discussion of t
545.
by btown 2y ago
Python implementation (not mine) for comefrom and goto, so old it predates a pypy package - and very much for good reason! https://entrian.com/goto/
546.
by btown 2y ago
It's also the case that e.g. Amazon will rarely show the exact product you search for, and will instead promote an equivalent product that pays them for placement - often extremely similar looking. Web searches are getting worse too, w
547.
by btown 2y ago
People are downvoting comments about the impact of this bill on LGBTQ+ people, but “protecting minor children from the transgender [sic] in this culture” was literally the stated motivation by the senator who co-introduced KOSA: https:&#x2
548.
by btown 2y ago
Any links to the research here?
549.
by btown 2y ago
One of the challenges I imagine you'll face as you move towards active advisory is that the more an alerting tool is relied upon, the more an absence of a flag from it is considered a positive signal that things are fine. "I did
550.
by btown 2y ago
This reminds me of how Yahoo Messenger was silently a significant part of the oil trade, and its shutdown may have subtly made the industry more opaque: https://www.reuters.com/article/technology/oil-traders-prepa.
551.
by btown 2y ago
Hi there, inventor of the kebab plugin for traindeck here. I'm afraid I was the one who introduced the concept of kebab case, way back in the early 1990s. Back then, trains didn't have enough processing power to handle full cuts o
552.
by btown 2y ago
And going beyond this: my layman's understanding of biology is that the way in which genes are expressed can be highly nonlinear and modulated by all sorts of different pathways. If you have some clarity on how these pathways work, pro
553.
by btown 2y ago
The 1995 Frameset proposal from Netscape that started it all: https://lists.w3.org/Archives/Public/www-html/1995Sep/0034.h... > Hi. I'm the Netscape Navigator marketing guy. Please forgive the t
554.
by btown 2y ago
Gevent IMO is more of a having-discipline footgun than a fundamental one: it makes itself so easy to use, without sprinkling asyncs in your day-to-day code, that you can forget that it has the same problem as explicit Python asyncio… namely
555.
by btown 2y ago
One “fun” thing about it is that it’s higher level than you think, because the actual chip may do things with branch prediction and pipelining that you can only barely control. I remember a university course where we competed on who could h
556.
by btown 2y ago
This is Infamous Dropbox Comment https://news.ycombinator.com/item?id=9224 energy
557.
by btown 2y ago
> Rails has started to show its age amid with the current wave of AI-powered applications. It struggles with LLM text streaming, parallel processing in Ruby, and lacks strong typing for AI coding tools. Despite these constraints, it rema
558.
by btown 2y ago
In the spirit of http://www.catb.org/jargon/html/Z/Zawinskis-Law.html ... "Every program attempts to expand until its clients and counterparties are so varied in protocol version (and implementation comp
559.
by btown 2y ago
For some context on that infamous classname, see https://stackoverflow.com/a/13515403 and https://entreprenerd.lowagie.com/ As the commenters above note, the "upgrade" to AGPL was both highly
560.
by btown 2y ago
Yep! https://stackoverflow.com/questions/62161819/what-exactly-is...
561.
by btown 2y ago
> well indexed documentation Indices are, by definition, lossy representations of their underlying data. If you use stemming and lemmatization to preprocess both documentation and query text, you're already departing from a truly ha
562.
by btown 2y ago
Specifically, I've seen that a common failure mode of the distilled Deepseek models is that they don't know when they're going in circles. Deepseek incentivizes the distilled LLM to interrupt itself with "Wait." whi
563.
by btown 2y ago
I'd also add that AI code generation in non-formally-verifiable languages, at places with concurrency requirements like Nvidia, might end up in the short-term creating more hard-to-spot concurrency bugs than before, as developers bec
564.
by btown 2y ago
https://techstrongitsm.com/features/turn-rivers-4-4-billion-... provides more context here: "Turn/River, which specializes in optimizing software companies and cloud-based software-as-service companies, alrea
565.
by btown 2y ago
The "cookie farm for profit" point is worth elaborating on. From the original paper https://arxiv.org/pdf/2311.10911 : > More concretely, the current average value life-time of a cookie is €2.52 or $2.7 [
566.
by btown 2y ago
There is a valid criticism that when you rely heavily on synthetic outputs, you bring along the precursor model's biases and assumptions without fully knowing the limitations of the data set the precursor model was trained on, as well
567.
by btown 2y ago
At the risk of wading into politics - consider a legal environment, in any country, where laws become increasingly strict, but where prosecutorial discretion, pardon powers, and a justice system designed to allow well-resourced law firms to
568.
by btown 2y ago
Part of this is that YouTube makes this viable only for creators whose inbound viewers are likely to stay to watch a majority of the content; otherwise, the algorithm penalizes your content for every "bounce." A comedy short that&
569.
by btown 2y ago
Curious about this approach! It looks like you're connecting to https://livekit.io/ under the hood - do you have custom server side components intercepting the video stream and doing video analysis & lip movement p
570.
by btown 2y ago
FYI a quick search shows that React has already integrated this on its main branch! https://github.com/facebook/react/pull/32036 I'm not exactly sure what the developer experience of this would be, but I

More ›