freeqaz

24 ms·

331.
by freeqaz 4y ago
Wow after 22 years! That's incredible. Thanks for sharing. I know that metal fatigue is the primary limiter of aircraft lifespan. How many years does an aircraft typically live for today?
332.
by freeqaz 4y ago
I love this museum and I'm truly shocked to hear this news! I tried to go during the pandemic but I didn't realize that it would be gone forever... I still have a shirt in my closet! Is there anything that we can do to help keep i
333.
by freeqaz 4y ago
I wonder if you could do this yourself with a heat exchange (like from McMaster-Carr). I've read before that if you run the loops "backwards", such that the two loops of the heat exchanger are flowing in opposite directions,
334.
by freeqaz 4y ago
I spend a lot of time fantasizing about what building a city "from scratch" would look like. It's a painful problem to actually make it happen because cities are all about network effects (you live there because people you k
335.
by freeqaz 4y ago
What is a microbust?
336.
by freeqaz 4y ago
PineCone is the database that Buff uses under the hood.
337.
by freeqaz 4y ago
This looks like it's just throwing your Search query directly into ChatGPT and sending you back the result. (Source code[0]) This is less intelligent than what Bing is doing with (presumably) scraping the pages and then generating embe
338.
by freeqaz 4y ago
See my comment below with some more context. People are already starting to chain together and extend Chatbots[0] to perform "side effects" automatically (make a search query, check the weather, query a database, etc). I agree tha
339.
by freeqaz 4y ago
That's true, but imagine if you can use a Chat bot to generate SQL Queries (like this[0]). Now imagine that you can get it to generate a SQL Injection payload or connect to another database because of an unforeseen edge case that the d
340.
by freeqaz 4y ago
We've actually been using Buff as a chat bot on our Discord server to iteratively explore vulnerability data (CVEs) using AI. For example: > @Buff What is Log4Shell? >> Log4Shell is a vulnerability named by LunaSec. It affects
341.
by freeqaz 4y ago
It's very interesting that AppSec may now begin to include "prompt injection" attacks as something of relevance. Specifically with libraries like LangChain[0] that allow for you to perform complex actions ("What's t
342.
by freeqaz 4y ago
I'm excited for Linen[0] to potentially replace Discord for our use case because unfortunately it doesn't feel like there is another tool that we could use besides Discord or Slack. (We were on Slack for a long time but we just co
343.
by freeqaz 4y ago
Teams for Linux, when I inspect it with htop, is actually running a process called "Skype" in the background. I think that explains some of the crappiness of the UX! (It has required some serious hacking to make it even functional
344.
by freeqaz 4y ago
Looks like this has been hugged to death by HN. Does anybody have a mirror of the site they could share?
345.
by freeqaz 4y ago
Do you have any examples that come to mind for this? I'd love to understand what other models exist and what Redis extensions exist to compare embeddings.
346.
by freeqaz 4y ago
Holy crap! > "The gorge is known primarily for a cave that was the only inland site in Australia with evidence of continuous human occupation for over 46,000 years, including through the last Ice Age. The cave was permanently destro
347.
by freeqaz 4y ago
I'd describe Twitter as closer to a news site in the modern era. There are a lot of journalists and other important public figures sharing information there, and that's especially true for important live news events like earthquak
348.
by freeqaz 4y ago
LunaTrace: https://lunatrace.lunasec.io/ Premise: Open Source[0] alternative to GitHub Dependabot and `npm audit` that focuses on helping you prioritize where to patch first (since only 0.1% of CVEs are used in cyber attack
349.
by freeqaz 4y ago
Have you considered using a license like Business Source License (BSL) that would eventually become a true OSI license, like Apache, after a few years? I think it's valuable for old source available code to not bitrot away when the val
350.
by freeqaz 4y ago
We've been working on an example vulnerable app to showcase vulnerable dependencies in web apps. (Think a CVE in an NPM package.) I've been wanting that so that I can test out different security scanning and patching tools, but al
351.
by freeqaz 4y ago
Nit: 1kb pages vs 4kb pages, so 75% smaller (25% of the size).
352.
by freeqaz 4y ago
Might be worth asking users to "login with GitHub" to get past the rate limits (the anonymous rate limits are lowwww like 10 per hour). Logging with GitHub is still lowish but like 1k per hour or so. (IIRC)
353.
by freeqaz 4y ago
That link 404s. Got a backup?
354.
by freeqaz 4y ago
Please elaborate! (I'm not a Mortal Kombat expert)
355.
by freeqaz 4y ago
I apologize for accidentally creating a meme here. (I got angry when I saw the recent "ProxyNotShell" vulnerability in the media...) It is an interesting exercise in the power of language though. The name "Log4Shell" was
356.
by freeqaz 4y ago
Absolutely, but if I had to rank Open Source projects by "enjoyment level to work on", I would rank a 10+ year old Java project primarily used by enterprise companies quite low on my list! Compare that to something like Bun.js[0]
357.
by freeqaz 4y ago
(Note: I'm the person that coined the term "Log4Shell") You may be surprised when I tell you what the Apache Software foundation's yearly budget is. You'd think for software that is used by practically every Fortune
358.
by freeqaz 4y ago
Sweet, thanks dang :)
359.
by freeqaz 4y ago
https://wiki.archlinux.org/title/Archinstall It's called archinstall and it's a helper script (it looks like)
360.
by freeqaz 4y ago
Here is a link to the WikiChip article mentioned by the XDA article. It's a bit more technical and has some pretty nice graphs showing information about the different densities of SRAM at each different node/fab size. https:&#x2F

More ›