darkamaul

10 ms·

91.
by darkamaul 1y ago
I’m not sure I fully understand what the specific risks are with _this_ system, compared to the more generic concerns around MCP. Could you clarify what new threats it introduces? Also, the fact that the toggle is hidden away in the setting
92.
by darkamaul 1y ago
While the current Paris administration has its detractors, its policies, removing surface parking, expanding bike lanes, and lowering speed limits, have done tremendous good for air quality (see the Airparif study for details in [0]). Paris
93.
by darkamaul 1y ago
I get the sentiment behind 'just use a password manager', but I don’t think victim-blaming should be the first reflex. Anyone can be targeted, and anyone can fail, even people who do 'everything right'. Password managers
94.
by darkamaul 1y ago
I don’t really get why ASML is putting money into Mistral AI. ASML is specialized in lithography machines. Mistral, on the other hand, is yet another LLM startup. What’s the actual synergy here? The closest angle I can imagine is that AI wo
95.
by darkamaul 1y ago
And I would think the next logical step here is to have a `uv lint` option here that runs ˋty` under the hood ? I would love to see a world where there is a single or a set of standard commands that would prepare your python project (format
96.
by darkamaul 1y ago
I don’t understand why adding a subcommand to uv is being considered bloat. uv is already a complex tool, but it has excellent documentation. Adding a straightforward, self-explanatory subcommand like this doesn’t seem out of place.
97.
Fstrings.wtf(fstrings.wtf)
433 points by darkamaul 1y ago|133 comments
98.
by darkamaul 1y ago
Warning, there is a change in coverage 7.7.0 that disables sysmon support for coverage if using branch coverage _and_ a version of Python before 3.14alpha6. [0]: https://coverage.readthedocs.io/en/7.8.0/changes.htm
99.
by darkamaul 1y ago
It’s slightly more complex that this. Both OpenSearch and Elasticsearch have workflows where they excel. My company did a fairly comprehensive benchmark of the two products [0] if you are interested in comparing performances. [0] https:&#x
100.
by darkamaul 1y ago
ANSI terminal codes have a concerning security history beyond this incident. At BlackHat USA 2023, a talk [0] had already warned about it. [0] https://i.blackhat.com/BH-US-23/Presentations/US-23-stok-wep...
101.
by darkamaul 2y ago
Recursions are super useful for dealing with certain data types, notably nested grammar parsing. Sure, it has gotcha, but that can be extremely readable. I don't think we should ban recursions altogether, but remember that there exist
102.
by darkamaul 2y ago
Supply chain attacks can exploit gaps between source code and distributed packages. Today, if PyPI were to be compromised, attackers could serve malicious packages even if the source code is clean. Attestations provide cryptographic proof l
103.
by darkamaul 2y ago
This page only shows if a package has been uploaded with attestations .The verified details (Changelog/Code/Issue tracker) are showing because they do use Trusted Publishing. However, they have not published a new version since th
104.
by darkamaul 2y ago
The fact that a security measure doesn't solve all or even most breaches doesn't mean it's not worth implementing. Supply chain attacks may be a smaller percentage of breaches, but they can have massive impact when they do oc
105.
by darkamaul 2y ago
Is anyone aware of similar funds or structures from different countries? Sovereign Tech Fund is German, but I did not find (albeit not looked too much) any in other European countries.
106.
by darkamaul 2y ago
Thanks a lot for your website - that was refreshing to see. While I like the idea of using ARC3 to grade sudoku, I much prefer the approach developed by Andrew C. Stuart in [0], where they rely on the human techniques* needed to solve the s
107.
by darkamaul 2y ago
And then, the French governement has released an official and mandatory Systeme de Design [0], to have an unique visual identity across all official websites. [0] https://www.systeme-de-design.gouv.fr/
108.
by darkamaul 3y ago
As a daily biker in Paris (and for years), I think it is hard to grasp the changes Paris has seen in the last years. You now even get to see some congestion on bike lanes (Bd Sebastopol for instance), because they are too many cyclist on an
109.
by darkamaul 3y ago
For those interested, DARPA has announced the list [0] of winners of their Small Business Track and awarded them each a 1 million USD grant. [0] https://www.darpa.mil/news-events/2024-03-11b
110.
by darkamaul 3y ago
Memory Tagging Extension (MTE) This allows to assign tag to each memory allocation. And subsequent accesses to the same memory area must be made with a pointer having a correct tag.
111.
by darkamaul 4y ago
https://archive.ph/jCczB
112.
by darkamaul 5y ago
> Modern NDK applications are supposed to use CMake and Android's own build system is based on Soong. Soong build files are easy to parse and you can create an Unified Dependency Graph from them. That's what I did in BGraph [0]