darkamaul

6 ms·

1. 31.▲
   by darkamaul 11mo ago

   I'm having trouble following the suspicion here. The founder lived in Belgrade for decades before moving to the US, so opening an office there seems like a straightforward decision: you build where you have roots, local knowledge, and
2. 32.▲
   by darkamaul 11mo ago

   One of the use case of décompilation is bug hunting / vulnerability research. And that’s still one of the use cases where AI isn’t that good because you must be precise. I’m not saying that won’t change but I still see a bright future
3. 33.▲
   by darkamaul 11mo ago

   The "use cooldown" [0] blog post looks particularly relevant today. I'd argue automated dependency updates pose a greater risk than one-day exploits, though I don't have data to back that up. That's harder to undo a
4. 34.▲
   by darkamaul 11mo ago

   I was curious about how old the original bug report was, and it appears to be 21 years old [0]! [0] https://bugzilla.mozilla.org/show_bug.cgi?id=259356
5. 35.▲
   by darkamaul 11mo ago

   This is a meaningful step! For years, XDG Base Directory compliance has been spotty across major applications. Firefox's adoption matters because it's widely used and its implementation may encourage others to follow suit. The Arc
6. 36.▲
   by darkamaul 11mo ago

   PHP's evolution since PHP 5 has been substantial, and I think this is a real problem. As someone who learned the language years ago, the pace of change (generics, attributes, match expressions, typed properties) makes modern codebases
7. 37.▲
   by darkamaul 11mo ago

   I think most of the comments here miss that contributions is not equal to code. Contributions to the documentation, translations, or helping managing the community are also extremely valuable and do not require the same technical skills.
8. 38.▲
   by darkamaul 11mo ago

   I think the reason here is to prevent deletion that cause upstream disruptions. See the reasoning in the PEP 763 (not adopted ) https://peps.python.org/pep-0763/
9. 39.▲
   by darkamaul 11mo ago

   I never realized how much complexity goes into a passport, the cryptography, authentication layers, and others are mind blowing. It’s impressive that something so small carries so many trust anchors. I’m wondering how they will manage to up
10. 40.▲
    by darkamaul 11mo ago

    Better (or simply more) ARM processors, no matter who makes them, are a win. They tend to be far more power-efficient, and with performance-per-watt improving each generation, pushing for wider ARM adoption is a practical step toward loweri
11. 41.▲
    by darkamaul 11mo ago

    I think better developer tools tend to compound over time, they raise expectations and push the whole ecosystem forward. IMO, uv is quickly becoming one of the best reasons to start a new project in Python. It’s fast, and brings a level of
12. 42.▲
    by darkamaul 11mo ago

    I’ve always been amazed by Rosetta, such an incredible piece of engineering. But I wonder if we’ll ever see its source code opened up. It feels like keeping it alive could really help long-term x64 support on Apple Silicon, even if Apple de
13. 43.▲
    by darkamaul 1y ago

    I’d assume that erasing the shutdown log is also a security measure from Apple, attackers could use it to better understand crash conditions or device behavior. That said, if we take Apple’s stance on privacy seriously, users should also ha
14. 44.▲
    by darkamaul 1y ago

    Sarkozy was convicted for "association de malfaiteurs" (criminal conspiracy) related to allowing associates to meet with Libyan officials to discuss covert campaign financing for his 2007 election. Remarkably, while convicted of c
15. 45.▲
    by darkamaul 1y ago

    I know this is just a playful joke, but I wanted to gently flag something important. Even in humor, we should never casually discuss sharing API keys or credentials. You never know when or if someone might misinterpret a message like this.
16. 46.▲
    by darkamaul 1y ago

    For other people impacted, what helped me this morning was to use the `ghcr`, albeit this is not a one-to-one replacement. Ex: `docker pull ghcr.io/linuxcontainers/debian-slim:latest`
17. 47.▲
    by darkamaul 1y ago

    Loosely related, but they also announced an increase in their bug bounty program during Ivan Krstić's Keynote at Hexacon. [0] [0] https://security.apple.com/blog/apple-security-bounty-evolve...
18. 48.▲
    by darkamaul 1y ago

    I still have some nostalgia for Windows Phone. I genuinely liked the platform - even bought an Omnia 7 back in the day, and later a Lumia 1020 (that camera was so good). I still think the tile based UI was underrated. Live Tiles felt like a
19. 49.▲
    by darkamaul 1y ago

    I believe this will be more detailed in the author following talk at HexaCon [0]. They used this bug in Pwn2Own Berlin 2025, earning a 40,000 bounty in the process [1]. [0] https://www.hexacon.fr/conference/speakers&#x2
20. 50.▲
    by darkamaul 1y ago

    You can't directly but there is a plugin for this: https://mkdocstrings.github.io/ Example here: https://quarkslab.github.io/quokka/reference/python/executab...
21. 51.▲
    by darkamaul 1y ago

    I don’t see why you wouldn’t book a flight using an AI assistant. No one’s saying it should do it completely unsupervised (maybe that’ll come much later), but having something that can research the best routes based on my criteria and show
22. 52.▲
    by darkamaul 1y ago

    pdoc is my go-to documentation tool for small Python projects. However, when they start to grow, MkDocs and the Material for MkDocs theme make the most sense — they’re easy to install and deploy, and they offer a ton of features for writing
23. 53.▲
    by darkamaul 1y ago

    I’ve been running Immich for about two years on Oracle’s free tier (200 GB disk / ARM VM), and it works great. Since I don’t fully trust Oracle for long-term storage, I’ve configured a daily backup to Backblaze. My only minor complaint
24. 54.▲
    by darkamaul 1y ago

    Serious question: why are people siding with Imgur here, instead of blaming the company that chose to ignore the laws of the country it operates in? Imgur's business model is ad sales and tracking users - that inherently requires colle
25. 55.▲
    by darkamaul 1y ago

    Same story, but directly with the reporter: One Token to rule them all – Obtaining Global Admin in every Entra ID tenant (13 days ago - 51 comment): https://news.ycombinator.com/item?id=45282497
26. 56.▲
    by darkamaul 1y ago

    I’m really impressed by the quality of this post, as others have mentioned. It’s very well written, and the clarity of the drawings adds a lot to the overall explanation. It perfectly illustrates the old saying: a picture is worth a thousan
27. 57.▲
    by darkamaul 1y ago

    I think the _copy-and-patch_ approach [0] is probably the best compromise here. You get many of the guarantees of compiled code (strong correctness, reduced mismatch between interpreter vs JIT semantics, etc.), while still being very close
28. 58.▲
    Project Rain:L1TF(bughunters.google.com)

    3 points by darkamaul 1y ago|0 comments
29. 59.▲
    by darkamaul 1y ago

    While US airlines are lobbying to roll back passenger protections and add fees, the EU is moving the opposite way - now pushing rules to standardize free carry-on and checked baggage sizes across all airlines[0] [0] https://www.b
30. 60.▲
    by darkamaul 1y ago

    Just read the blog post but I’m not clear on what's actually being launched here. As an org, why would I 'subscribe' today, what do I concretely get (coverage, pricing, SLAs, etc.) vs. just signing up for a future interest li