Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
chlorion
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
8 ms
·
61.
▲
by
chlorion
2y ago
It depends. You can corrupt memory in such a way that allows executing arbitrary code, in which you could do anything that the process has privilege to do, which is probably reading and writing files as the current user and a lot more.
62.
▲
by
chlorion
2y ago
Would you mind explaining how you could do this?
63.
▲
by
chlorion
2y ago
Imagine an engineer in any other field acting like this. "I don't want to install air bags and these shiny safety gadgets into my cars. We have been shipping cars without them for years and it works for us and our customers."
64.
▲
by
chlorion
2y ago
I used the lite version while on chromium for some time. I noticed no difference in terms of blocking ads. The main thing I missed was the ability to block arbitrary elements with the zapper. I use this for more than just ads, so losing it
65.
▲
by
chlorion
2y ago
Yup, the MV3 version requires zero permissions and in theory should be faster. These are real benefits that for some reason nobody will admit exist. Saying anything positive about MV3 or the lite extension seems to get you downvoted without
66.
▲
by
chlorion
2y ago
There are lots of emulation methods but interpretation is probably(?) the most common or at least very common. Interpretation involves writing a VM that represents the state of various parts of the machine, and executes instructions that ch
67.
▲
by
chlorion
3y ago
Yup you can write a garbage collected interpreter for a programming language with no unsafe code at all, even for languages that have complex data structures like doubly linked lists in them. Using something like a slotmap to store the lang
68.
▲
by
chlorion
3y ago
I think python objects have a __hash__ method available on them as well that can be used for hashing. That should be even much faster than sha1, but for this use case I'm not sure how much it really matters. Would be interesting to ben
69.
▲
by
chlorion
3y ago
Using md5 for this seems like an odd choice. Sha1 is a better choice even for non-cryptographic use cases, it's quite a bit faster than md5. Even better would be something like xxhash! According to a quick bash script I wrote to benchm
70.
▲
by
chlorion
3y ago
The bounds safety C compiler extension research by Apple has measured the runtime impact of adding bounds checking to C and it is not a lot more than 1-2% in almost all cases. Even in microbenchmarks its often around 5%. The impact on media
71.
▲
by
chlorion
3y ago
Hair dryers and clothes dryers both operate by adding a bunch of heat to the thing they are trying to dry. I am not a physics expert but that seems to suggest that heat helps speed up evaporation!
72.
▲
by
chlorion
3y ago
The performance and power use cost to checking bounds is trivial! Apple has tested this, on mobile devices even, when working on -fbounds-safety. From the slides: System-level performance impact • Measurement on iOS • 0-8% bin
73.
▲
by
chlorion
3y ago
Gentoo has a script that you can source at /lib/gentoo/functions.sh that provide various helper methods, mostly for printing messages, and it provides nice little green and red starts to indicate whether something has succeed
74.
▲
by
chlorion
3y ago
In Emacs I have clangd and clang-tidy running on each key stroke! The project size is probably a lot smaller than what most people are working on though, and I have a fast CPU and NVME disk, but it's definitely possible to do! I'm
75.
▲
by
chlorion
3y ago
>For example: in VSCode the user doesn't have to understand how to install a language server, it just automagically suggests allowing it to install one for you. In Emacs, if you're using the official distribution you will have
76.
▲
by
chlorion
3y ago
X11 is objectively more bloated and full of junk than Wayland. Nothing wrong with wanting to stick to X11, but if you are doing so because you want to avoid bloat, you are probably confused.
77.
▲
by
chlorion
3y ago
There are multiple tree-sitter based major modes that are usable right now! I use python-ts-mode, rust-ts-mode, c++-ts-mode, bash-ts-mode and a few more right now and they work well. You can write your own modes with it also, but I have not
78.
▲
by
chlorion
3y ago
I think you are still conscious during the blackout, you just don't have a memory of it. Amnesia is the effect here, which is a little different than actually being unconscious the whole time. When in surgery you really are unconscious
79.
▲
by
chlorion
3y ago
>passing incompatible types is a constraint error in C just as in C++. Whether this is a warning or not depends on the compiler and on compiler flags. Much of the existing C code out there is filled with these things because they weren&#
80.
▲
by
chlorion
3y ago
Not all of it is an opinion. The LLM does not have the ability to tell you what it knows and what it doesn't know about a subject. In order to get information out of it, you need to present it with a pattern that matches with something
81.
▲
by
chlorion
3y ago
It's definitely not a myth. A trivial example is assigning pointers to incompatible types or passing them to incompatible function parameters not being an error. GCC 14 and Clang 16 are only just now making these errors by default. C++
82.
▲
by
chlorion
3y ago
In your first two examples, Google is still not providing an alternative to the original content, the people who have uploaded the content are and they are doing so illegally. Also, Google can and will delist stuff that is violating copyrig
83.
▲
by
chlorion
3y ago
Googles search engine is not selling derivative works. If you search for a Disney movie on Google search, it does not try to sell you a film derived from the movie.
84.
▲
by
chlorion
3y ago
No, and I don't think anyone is arguing that LLMs should be illegal either. I personally am not against LLMs training on things the operator has rights to, and even training on copyrighted things, but I am against it laundering those t
85.
▲
by
chlorion
3y ago
The difference is that the LLM is still copying copyrighted material in your case, but if I burn a Linux ISO, that is not happening. You do not have to produce an exact copy of something to violate copyright, and I think anything the LLM ou
86.
▲
by
chlorion
3y ago
Google is not producing something that competes with or is comparable to what it's parsing and displaying, which makes it very different. Google is displaying the exact content and a link to the source, and is functioning as a search e
87.
▲
by
chlorion
3y ago
>CD-ROM burners They can be used in an illegal way if used to copy copyrighted material, yes.
88.
▲
by
chlorion
3y ago
>We are allowed to view and consume it, to be influenced by it, and under many circumstances even outright copy it. People keep saying this but it's actually much more complicated, and in many cases you can't view copyrighted
89.
▲
by
chlorion
3y ago
I'm not sure that I understand this. The openssh developers supporting outdated systems and software forever also isn't a long term solution. Why should they pay this cost, but not you (or your company)? If you can keep unsupporte
90.
▲
by
chlorion
3y ago
There are heaps and heaps of security issues in Linux (the kernel). Simply mounting a file system can result in your system being compromised if the file system was maliciously crafted. This isn't something that is actively protected a
More ›