danudey

13 ms·

121.
by danudey 5mo ago
Sorry we're out of ammunition but I created "get more shotgun ammo" as part of the "supplies and buffs" epic and put it in the next sprint at one story point. This might result in DOOM-212 "Shoot Demons" g
122.
by danudey 5mo ago
Presumably it has to do with: 1. All the checks it has to do to see if there are relations between tickets, states, triggers, actions, reports, etc. 2. Accessing separate subsets of data for each ticket from different locations and bringing
123.
by danudey 5mo ago
> I've always hated Gmail. I still do. But I switched jobs last year, and the new place uses Outlook instead. I struggle to find a word that adequately describes my disdain for Outlook; hate doesn't even begin to cover it. It s
124.
by danudey 5mo ago
In a world where we're getting one local privilege escalation vulnerability a week, I think that VM isolation can still be a significant benefit.
125.
by danudey 5mo ago
I would still maintain that the solution would be to have LLMs doing 'research' (by querying news for recent events) to ensure they're checking multiple sources, and to be explicit about which sources there were, whether thos
126.
by danudey 5mo ago
> On scientific topics, not a single source you listed is in any way accurate at all. My rebuttal to that is twofold: First, the discussion is about about news, not science (nor about general LLM behaviour). Second, and probably more rel
127.
by danudey 5mo ago
Simplest path to the most generally reliable results: * Trust consensus across publicly-funded news outlets from outside of the US the most * Then consensus across private news agencies from outside of the US (across countries) * Then indiv
128.
by danudey 5mo ago
One company I worked at is highly reliant on Google Cloud, but at one point we moved some services to Azure. Azure noticed, and immediately hit us with a discount offer in the hopes of getting more of our business. Google noticed, and immed
129.
by danudey 5mo ago
Are you opposed to people knowing that AI-generated content is AI-generated? Or are you just imagining that this is the first step towards 'someone' controlling your every move online somehow? You know what would be a good counter
130.
by danudey 5mo ago
I haven't heard anything about this from the mainstream media. What bothers me is the amount of misinformation being published on social media that people are taking as truth, but now with photorealistic photos and videos. It used to b
131.
by danudey 5mo ago
User uses a credit card, either a legitimate one or a stolen one, to buy access to a site. They download all the content that their purchase gives them access to. Then they (or the card's legitimate owner) initiate a chargeback. They &
132.
by danudey 5mo ago
Note that, under my reading of these rules, Baldur's Gate 3 would not be allowed on Kickstarter. Nor would Mass Effect, since it has "sex acts or implied sex acts" (depending on what they mean by "implied").
133.
by danudey 5mo ago
Adult industry is digital content that can be "purchased" and then scraped before the chargeback goes through. Now the user has all the content that the site/model/whoever offers and didn't pay anything for it; they
134.
by danudey 5mo ago
You don't even really need that; you just need to wait until the user runs `sudo` and then you also run `sudo` after they authenticate. Now you're root, boom. It doesn't get you the password, but once you're root you can
135.
by danudey 5mo ago
I mean, this is basically why you press Ctrl-Alt-Del to log in on Windows NT and Win2k - because it's a keystroke that malware couldn't trap, so they can't put up a fake login screen because the OS will override it anyway.
136.
by danudey 5mo ago
We do this with some of our published images. RedHat complains because our images aren't 'based on UBI', which would add dozens or hundreds of CVEs.
137.
by danudey 5mo ago
FWIW, the base images they're talking about do not contain an entire OS. In fact, they're lacking a colossal amount of the most basic stuff that qualifies as 'an entire OS'. In many cases, your base images are 'a pr
138.
by danudey 5mo ago
Google promised their Nexus phones would get new versions of Android for X years then, after selling a bunch of them, just changed their mind. I'm having a hard time googling it since every result that comes up is about Google cancelli
139.
by danudey 5mo ago
Correction: if the manufacturer chooses to provide updates, and they don't have to, they must continue to make those updates available for five years after end of sales. In other words, manufacturers aren't required to publish u
140.
by danudey 5mo ago
A laptop built entirely around AI, which is definitely a stable business that will be around in its current form indefinitely and whose cost definitely won't go up once Google needs to start making a profit on it.
141.
by danudey 5mo ago
Went through acquiring game studios. Closed them before they released a single game. A big part of Stadia failing was it didn't get traction, and a big part of that reason was Google's history of just giving up on products out of
142.
by danudey 5mo ago
How is it getting that pricing data? By reading the giant, three-inch-high price labels that are right next to the fruit? Call me crazy but I don't think that "discovering how much oranges cost" is a big enough pain point for
143.
by danudey 5mo ago
Someone on HN a few months ago said that they gave up and decided to try Copilot in Outlook, which Outlook kept nagging him to do. He tried the example prompt that the nag screen gave him, whatever it was, and Copilot said 'sorry, I do
144.
by danudey 5mo ago
It's important to keep in mind that very, very few projects are as rigorously tested as curl, so while it's interesting to hear this feedback I think curl would be a torture test for any security scanning. I'd be more interes
145.
by danudey 5mo ago
The reason cited for this whole fiasco is that some of the Ministry of Defense's genocide work could be performed by servers in the EU, which could expose Microsoft to legal or regulatory issues. It's not that Microsoft was agains
146.
by danudey 5mo ago
Allowed 'unethical' usage of Azure services by the Ministry of Defense (...to occur on servers in the European Union, where Microsoft could get in trouble for it)
147.
by danudey 5mo ago
Not sure what specifically they're referring to, but Android (and iOS) add a lot of sandboxing to ensure that each application can only access its own files, can't access hardware willy-nilly (bluetooth, scanning wifi, etc), can o
148.
by danudey 5mo ago
The patch was posted to the kernel mailing list; someone saw the e-mail, read the patch, figured it out, and published an exploit very soon after.
149.
by danudey 5mo ago
Just FYI, you can also mitigate it with `echo 1 > ...`; you don't need to drop everything, dropping `1` clears the page cache and that's enough. Tested locally on Ubuntu 26.04: 1. Ran the exploit and got root 2. Configured the
150.
by danudey 5mo ago
It seems as though this issue occurred to him, then he used their tool ("Xint Code") to analyze the codebase for instances of it.

More ›