chc4

6 ms·

31.
by chc4 1y ago
It is darkly amusing to me that Paxos is still cited by people as a "good algorithm" to choose and understandable - including the cutesy island metaphor from the paper to appear approachable - and the Raft paper opens with a parag
32.
by chc4 1y ago
This is one of the things that I'm also looking on at Zig like a slow moving car crash about: they claim they are memory safe (or at least "good enough" memory safe if you use the safe optimization level, which is it's o
33.
by chc4 1y ago
Following Magic the Gathering and DnD is always fun, because the dynamics are they are the two products that Hasbro make a profit on and keep the company afloat while they repeatedly lose money on every other toy line...while everyone is al
34.
by chc4 1y ago
Oh neat, thanks! The OP is surprisingly light on details on how it actually works and is mostly benchmarks, so this is very appreciated :)
35.
by chc4 1y ago
Using the free playground link, and it is in fact extremely fast. The "diffusion mode" toggle is also pretty neat as a visualization, although I'm not sure how accurate it is - it renders as line noise and then refines, while
36.
by chc4 1y ago
ADP say that they handle payroll for one in six of all companies in America. That is both a large sample size, and probably broadly representative of the economy. There will of course be some business segments that are over or underrepresen
37.
by chc4 1y ago
I'm generally pretty bearish on AI security research, and think most people don't know anything about what they're talking about, but XBOW is frankly one of the few legitimately interesting and competent companies in the spac
38.
by chc4 1y ago
See, using AI as the equivalet of super-IDE snippets or to generate things in isolation is probably really good! It's also categorically not the same thing as what all of the AI hypemen (including the OP) are describing, with it repla
39.
by chc4 1y ago
While everyeone is just unilaterally asserting things, I'll jump in: no they won't. Practically every output of LLMs I've seen (even the "cutting edge" agentic ones that everyone says you have to evaluate or else yo
40.
by chc4 1y ago
These definitely are extensions that you could add to S-expressions, no one can disagree there.
41.
by chc4 1y ago
Are you somehow under the impression that Android devices aren't hacked as well?
42.
by chc4 1y ago
Relevant background for the fork is https://gitlab.freedesktop.org/xorg/xserver/-/issues/1797
43.
by chc4 1y ago
"Privacycoins" exist and lots of anarchist cypherpunks are able to use them to buy drugs, so I'm liable to say yes
44.
by chc4 1y ago
It does seem slightly silly that a through-line of the article is disgust at societal power dynamics and surveillance, and then not recognize that Bitcoin and other proto-cryptocurrencies were invented by anarchist cypherpunks as a solution
45.
by chc4 1y ago
Nothing really. I invest the majority of my money. I'll buy the occasional $50 video game and get take-out a lot, but I don't have any large expenses (modulo rent and utilities) or expensive hobbies. I have the money to go travel
46.
by chc4 1y ago
The "equivalent-but-more-efficient program" example given at the top is almost exactly that, though
47.
by chc4 1y ago
You don't need to compute dominators. A topological sort of the graph gives you a computation order where your definitions are computed before their use.
48.
by chc4 1y ago
Microsoft DCOM is a network RPC system that includes distributed GC, ftr.
49.
by chc4 1y ago
One of my personal favorite examples is Seth Dickinson, who wrote some of the lore for Destiny, including the Book of Sorrow and Marasenna in-game lore books, which are IMO some of the best parts of the universe. He then went on to write Th
50.
by chc4 1y ago
Going for the pipe spray is a kinda weird technique, and I'm honestly surprised that it worked. Usually just the fact that you are able to spray over the allocation at all isn't enough, and you also have to worry about your spraye
51.
by chc4 1y ago
I'm vaguely surprised that https://www.runzero.com/sshamble/ didn't find this. They did a scan over the entire internet trying invalid SSH state machine transitions, which I guess didn't cover this seque
52.
Hacking My Coworker (In Minecraft) [pdf](redvice.org)
3 points by chc4 1y ago|0 comments
53.
by chc4 1y ago
nothing much, what's uptalk with you?
54.
by chc4 2y ago
They're making a joke about how Matrix e2e is so high friction and unreliable that even if you should have access to a channel you'll get "unable to decrypt message" errors from key or identity issues - not that they wou
55.
by chc4 2y ago
You don't have to actually saturate the egraph, or compute a globally optimal extraction. There are schemes that drive the rewrite exploration by "expected value" of the rewrite, for example, to avoid bloating the egraph with
56.
by chc4 2y ago
Thinking about it more, a lot of bugs come around downstream of your initial function inputs, and you'd still be able to catch things like "heap allocation and then out of bounds read from that allocation with an offset derived fr
57.
by chc4 2y ago
I'm suspicious of the effectiveness. Most people are doing symbolic execution to find bad pointer dereferences as bugs, whereas this tool is doing it to build the least constrained model and then checking the code against that same m
58.
by chc4 2y ago
The diagram in the post has the user device talking to the attacker device over Bluetooth, and the bug description explicitly says "An attacker within bluetooth range" - which heavily implies to me your device actually is pairing
59.
by chc4 2y ago
The attacker controlled proxy is the one that logged in, and so captured a valid session for the user account that they can use afaik
60.
by chc4 2y ago
I don't use BLE PassKeys, but wouldn't the user also have to be paired with the attacker controlled BlueTooth device to get the connection request? Does the "The victim’s Authenticator connects to the attacker’s Client"

More ›