cjbprime

6 ms·

31.
by cjbprime 1y ago
Not really, though. They're both (retracting the gear, and cutting off fuel) just toggle switches, as far as your brain's conscious mechanisms go. Doing them both on every flight dulls the part of your brain that cares about how t
32.
by cjbprime 1y ago
> There is no possible way to confuse these two actions. This is obviously an overstatement. Any two regularly performed actions can be confused. Sometimes (when tired or distracted) I've walked into my bathroom intending to shave,
33.
by cjbprime 1y ago
> I wonder if a built in delay would make sense for safety. (Presumably delaying the amount of time before a raging engine fire stops receiving fuel would also have an impact on safety?)
34.
by cjbprime 1y ago
It's not that nonsensical. After it's accessed the private repo, it leaks its content back to the attacker via the public repo. But it's really just (more) indirect prompt injection, again. It affects every similar use of LLM
35.
by cjbprime 1y ago
I don't know that ChatGPT's voice mode is using audio as a transformer input directly. It could just be using speech to text (e.g. Whisper) on your input, and then using its text model on the text of your words. Or has OpenAI said
36.
by cjbprime 1y ago
Then the malware would provide that confirmation to the wallet too. Defending yourself from malware running on the same (Windows) machine is mostly impossible.
37.
by cjbprime 1y ago
You should try AI sometime. It's quite good, and can do things (like "analyze these 10000 functions and summarize what you found out about how this binary works, including adding comments everywhere) that individual humans do not
38.
by cjbprime 1y ago
Ghidra's a decompiler and WinDBG is a debugger, so they'd be complementary.
39.
by cjbprime 2y ago
Semiconductor fabs are actually decently large (>20k employee) cities.
40.
by cjbprime 2y ago
It's a British thing -- another example is that Brits would use e.g. "Apple have decided to.." instead of "Apple has decided to.." (for every group of people including "the government", not just businesses
41.
by cjbprime 2y ago
I agree with you, which is why I'm redirecting the blame to the CVSS standard, which does not agree with you.
42.
by cjbprime 2y ago
That's a CVSS issue. Heartbleed only affected Confidentiality, and CVSS rates scores on a triad of Confidentiality, Integrity, and Availability. RCE affects all three.
43.
by cjbprime 2y ago
Looks like it was possible to include the `x-middleware-subrequest` header in your request, tricking the state machine into thinking you'd passed auth already. (Don't use the user input itself to encode state!)
44.
by cjbprime 2y ago
Could be measurement noise..
45.
by cjbprime 2y ago
The fact that those certificates had been issued without a secure method of verification is the thing that was wrong with those certificates. Dyndns is not the only use case for having someone control a subdomain without having the full tru
46.
by cjbprime 2y ago
> the incorrect belief that there's some emergency button you can press to demand that a court consider your arguments ASAP ... isn't that exactly the legal button the complainant pushed to prevent the revocation?
47.
by cjbprime 2y ago
(I think Sectigo's argument is that Digicert did not even attempt to convince the court that it should be allowed to revoke those certificates in the mandated timeframe. If they had attempted and failed, I don't think they would b
48.
by cjbprime 2y ago
Those companies are always ready to defend themselves in court, and this is a country with extremely strong free speech rights.
49.
by cjbprime 2y ago
> The problem in this particular case is that Cursor is not selective in what env vars are loaded, it serializes _everything_. That seems like an odd choice to me. If you want to stop it having access to your secrets, that is done by not
50.
by cjbprime 2y ago
Env vars are fine for secrets, as long as you provide the right env vars to the right processes. You can unset them before launching a new process, or better still, not "export" the sensitive ones to all processes.
51.
by cjbprime 2y ago
Why do you think it would be? If 200 humans share enough air to dilute the relative concentration of poison in that air effectively, none of those humans will receive lethal doses of poison.
52.
by cjbprime 2y ago
Not really -- the circular dependency issue happened 28 minutes after the customer impact started. That issue was a cause of the outage being double the length it could have been, but not an original cause of the outage.
53.
by cjbprime 2y ago
(iLok has a software-only client that works similarly to the cloud license check-ins you mentioned, it's commonly used by VSTs.)
54.
by cjbprime 2y ago
> variable names limited to two characters (It sounds like there was a justified reason for that here, though -- the variable names are not minimized during compilation to disk.)
55.
by cjbprime 2y ago
> Something that was very common with BASIC interpreters but still baffling is how they were running on machines with extremely limited memory and fairly limited CPU time, but for some reason decided not to make integer types available t
56.
by cjbprime 2y ago
With the current default mobile keyboards, I'd guess it's slower, not faster.
57.
by cjbprime 2y ago
That is not what happened. Carlsen refused to change on the same day because it was "a matter of principle" (his words) -- not because there was insufficient time to.
58.
by cjbprime 2y ago
The US FAA has required 1500 flight hours to receive an ATP (airline pilot) certificate since 2010: https://www.ecfr.gov/current/title-14/chapter-I/subchapter-D... South Korea requires 250 hours as a country
59.
by cjbprime 2y ago
You should probably apologize for the suggestion that I am making up numbers. The US FAA has required 1500 flight hours to receive an ATP (airline pilot) certificate since 2010: https://www.ecfr.gov/current/title-14&#x2
60.
by cjbprime 2y ago
It is relevant that the US requires ~6x more flight hours for airline hiring than South Korea, and the accident happened in South Korea, no?

More ›