fulafel

13 ms·

271.
by fulafel 8mo ago
> It refers to your many days software is available for, with zero implying it is not yet out so you couldn't have installed a new version and that's what makes it a risky bug Zero-day vulnerability or zero-day exploit refer to
272.
by fulafel 8mo ago
Depends on how you do the accounting. Are you counting inference costs or are you amortizing next gen model dev costs. "Inference is profitable" is oft repeated and rarely challenged. Most subscription users are low intensity user
273.
by fulafel 8mo ago
Wikipedia: A zero-day (also known as a 0-day) is a vulnerability or security hole in a computer system unknown to its developers or anyone capable of mitigating it This seems logical since by etymology of zeroday it should apply to the rele
274.
by fulafel 8mo ago
Isn't this a wrongly editorialized title - "Reported by Shaheen Fazim on 2026-02-11" so more like 7-day.
275.
by fulafel 8mo ago
Between IRC and Discord/Slack we had XMPP which almost made it, but then Google etc killed support for it.
276.
by fulafel 8mo ago
Oh and of course SuperCollider.
277.
by fulafel 8mo ago
There's a lot of soft-realtime (=audio/video, gaming etc) apps using interpreted languages. Besides Python and Lua, also Erlang.
278.
by fulafel 8mo ago
Python mainly uses reference counting for garbage collction, and the reference cycle breaking full-program gc can be manually controlled. For RC, each "kick in" of the GC is usually small amount of work, triggered by the reference
279.
by fulafel 8mo ago
This seems to conflate different things. Interpreted is not a problem from the predictable behaviour point of view. You may get less absolute performance. Though with Python you can do the heavy lifting in numpy etc which are in native code
280.
by fulafel 8mo ago
Has anyone benchmarked humans on this task? Without visual feedback.
281.
by fulafel 8mo ago
The article is about TLS. The arguments against those libs don't apply if using them just for the low level crypto algorithms. (Also of course rustls can use other crypto providers besides those)
282.
by fulafel 8mo ago
Glaciers wouldn't get inifinitely thick anyway since they're of finite age, but also they flow out to sea. It happens at a very slow, one might even say glacially slow, pace. (and the poles are very dry, rarely snows)
283.
by fulafel 8mo ago
In their blog post linked in the sibling comment it says the raw number is 970k and they enable 900k (table at the end).
284.
by fulafel 8mo ago
From safety point of view that's actually good enough for "perfect is the enemy of good" to apply here. Cryptographic primitives are much much safer in C (and assembly) than protocol handling, certificates etc. They are basic
285.
by fulafel 8mo ago
The docs start off with server components. Are those still in vogue after the recent security disaster? ref. https://threatprotect.qualys.com/2025/12/04/react-server-com...
286.
by fulafel 8mo ago
Designing to tolerate the defects is well trodden territory. You just expect some rate of defects and have a way of disabling failing blocks.
287.
by fulafel 8mo ago
A lot of this seems to deal with unreliable electricity infrastructure and effects thereof. Is it just normal in the US and people in warmer places don't mind so much, or does it somehow correlate with snow?
288.
by fulafel 8mo ago
Suicidality seems rather overdramatic. It'd take a lot of halvings of the population to reach species viability threshold.
289.
by fulafel 8mo ago
Especially a 4 year old LTS. But I guess the point was that you will run into some users that do when you ship to the general audience. You run into the same problem on other platforms too of course (eg Android)
290.
by fulafel 8mo ago
So a bit like SeaMicro in the 00's but with more software?
291.
by fulafel 9mo ago
... over 8 years. Order of magnitude difference if it extrapolates to lifetime.
292.
by fulafel 9mo ago
Race conditions, effects of memory safety and other integrity bugs, behaviours of distributed systems, etc.
293.
by fulafel 9mo ago
Programs written in traditional PLs are also often probabilistic. It seems that the same mechanisms could be used to address this in both types (formal methods).
294.
by fulafel 9mo ago
Saving the planet and the Trump alliance ( https://www.theverge.com/ai-artificial-intelligence/867947/o... ) don't seem to relaly jive.
295.
by fulafel 9mo ago
There's been a constant stream of v8 VM sandbox escape discoveries since its dawn of course. Considering those have mostly existed for a long time before publication it's very porous most of the time. And Python VM had/has i
296.
by fulafel 9mo ago
If my computer asks your computer what dns server to use, and you respond with the address of a nefarious one, it's not necessarily a mitm.
297.
by fulafel 9mo ago
Is it safe?
298.
by fulafel 9mo ago
The set of possibly blocking operations for interactively using bash is big. Executable pages of the bash executable are far from the only thing that could be missing. If the machine is swap trashing, all i/o goes to the same congested
299.
by fulafel 9mo ago
Bitlocker can rely on the SSD encryption, so careful there too.
300.
by fulafel 9mo ago
Ethernet is following suit to 2.5G which is otherwise a nonsensical step for ethernet speeds, I think this is further evidence that everything just follows wifi now.

More ›