er4hn

9 ms·

61.
by er4hn 2y ago
It's reasonable to say that LLMs are not completely useless. There is also a very valid case to make that LLMs are not good at generating production ready code. I have found asking LLMs to make me Nix flakes to be a very nice way to ma
62.
by er4hn 2y ago
dose them with psilocybin and do studies to see what it does for their hostility towards other living creatures.
63.
Gmail Labels Don't Search Well(er4hn.info)
4 points by er4hn 2y ago|1 comments
64.
by er4hn 2y ago
Availability is similarly poorly defined for CVSS scoring, i.e. what gets used to decide how bad a CVE is.
65.
by er4hn 2y ago
Okay that all makes a lot of sense thank you.
66.
by er4hn 2y ago
Oh, this is interesting. Can you elaborate (or link to some post) about what sort of issues you run into? I find the concept of CRDTs to be very interesting, but if you still need a centralized server I question the value of them over OTs.
67.
by er4hn 2y ago
On an unrelated note, I'm getting local-first case studies everytime I leave a wifi space since my cell phone is still suffering from the Verizon outage (Los Angeles area). My conclusion has been I can read stuff like calendar invites
68.
by er4hn 2y ago
> Architecturally, Y-Sweet acts as a bus: clients connect to the Y-Sweet server rather than directly to each other. Whenever a client connects or makes changes, it syncs its local document with the Y-Sweet server. Y-Sweet merges the clie
69.
by er4hn 2y ago
This is an attack called "credential stuffing" and the OWASP page for it has multiple examples of it being used in the real world: https://owasp.org/www-community/attacks/Credential_stuffing .
70.
by er4hn 2y ago
The big issue with bootstrappable builds is how to get started and have good examples. This is an ambitious goal, like landing on the moon, and takes a lot to get there. My understanding of this has been you need to (a) Be able to have a co
71.
by er4hn 2y ago
Judging by the comments this article seems true in the abstract: "You are only as strong as your weakest link" can be formalized better as "You are only strong if there is no path over your assets for an attacker to carry out
72.
by er4hn 2y ago
Thanks for the feedback. The top left corner of the page has a little sun icon that changes to a light background. I haven't gotten around to figuring out how to change pictures based on the background for good contrast.
73.
by er4hn 2y ago
Which funny enough, I learned about biscuits from a prior article Thomas wrote: https://fly.io/blog/api-tokens-a-tedious-survey/
74.
by er4hn 2y ago
One very fun and practical application for Datalog is Biscuits, which are a type of arbitrarily scoped authorization token: https://biscuitsec.org/ . I tried them out for a pet project over here: https://er4hn.inf
75.
by er4hn 2y ago
Probably closer to 10 - 15k usd. It's https://www.ochsundjunior.swiss/watches/annual-calendar/ which starts at CHF 8’800 / 10.3k USD. It's not completely custom, i.e. ochs und junior is using their
76.
by er4hn 2y ago
But we're already there. The Gaza and Ukraine conflicts have been full of misinformation, especially showing pictures of attacks that either: - were from that conflict, but not the particular attack that is being used to fuel upset rea
77.
by er4hn 2y ago
Where can you get a better built and cheaper bassinet?
78.
by er4hn 2y ago
The first 3 months after my daughter was born I slept next to her while she was in this. If she was hungry or needed a change she'd let me know. This helped her sleep and helped the rest of us get some rest as well.
79.
by er4hn 2y ago
One interesting thing is that if you look at what companies that want to prepare for Store Now Decrypt Later are doing (see links at bottom) they're pretty much all using the non-production ready OQS. If you believe in hybrid encryptio
80.
by er4hn 2y ago
There was a recent post on here ( https://news.ycombinator.com/item?id=41239520 ) where someone noted that people at Google tend not to use their own products. When it was posted on X a Google Director said that they use Goog
81.
by er4hn 2y ago
I've had baiju that's more herbal before as well. generally good baiju should smell floral. The big problem with Baiju is that most people, at least in the US, are trying the equivalent of Smirnoff / cooking grade stuff becau
82.
by er4hn 2y ago
Likely syrup. A lot of Chinese coffee shops offer flavored syrups in coffee, sometimes with creative stuff like bits of dried orange or freshly pulped apricot, so this fits in pretty well with existing offerings. Good Baiju tends to have a
83.
FIPS Post Quantum Crypto standards approved(csrc.nist.gov)
26 points by er4hn 2y ago|2 comments
84.
by er4hn 2y ago
This is disingenuous. Twitter is located in Civic Center, which is a different neighborhood. From the ferry building at the Embarcadero to Twitter HQ is about 1.8 miles away, or 3 BART stops. Given the density of SF and how quickly spaces c
85.
by er4hn 2y ago
Middle Earth: Shadow of War is a good example. It is a single player game with some minor and optional online elements, and used to have a pay to win store that needed internet access. It requires an online connection the first time you sta
86.
by er4hn 2y ago
One thing I wasn't able to grok from the article is orchestration of VMs. Are they using AWS to manage the VM lifecycles, restart them, etc? Last time I looked into this for on-prem the solutions seemed very enterprise, pay the big bux
87.
by er4hn 2y ago
One can safely assume they will find a way to follow the law rather than mumble about technically this is working as intended.
88.
by er4hn 2y ago
I agree on it being self satisfying. I wrote a short story on my blog once that I seriously doubt anyone ever read. It was a cyberpunk story, but the themes were really very much about how I felt about having my startup crash and burn early
89.
by er4hn 2y ago
If you do this in the cloud, it's DevOps. If you have a faulty automatic BIOS upgrade for on-prem products, it's the EU cyber resilience act.
90.
by er4hn 2y ago
It's a members only _offer_. As in, it may not always apply ;)

More ›