geofft

72 ms·

721.
by geofft 5y ago
I believe the confusing bit is that it's not an NPM thing, it's a create-react-app thing. create-react-app is a helper tool for, as the name says, creating React applications and doing a bunch of things out of the box. Occasiona
722.
by geofft 5y ago
And in a perfect analogy to cryptocurrencies, newer, better technologies like hybrid engines (not to mention purely electric vehicles) support shutting off the engine completely at a traffic light and not burning energy idling an engine, an
723.
by geofft 5y ago
The link you provide as context contradicts 1, if I'm reading it right? It says that Fauci does not want to fund this research. (Maybe I'm misunderstanding the posited conspiracy and the idea is that if the NIH doesn't fund
724.
by geofft 5y ago
Ah, I see the confusion. By "individual researcher" I do not mean "independent researcher" - I mean the researcher, considering their motivations as an individual person. They can be part of a group of researchers, and t
725.
by geofft 5y ago
The commercial displays are also awfully expensive. https://frame.work/blog/in-defense-of-dumb-tvs was posted here recently ( https://news.ycombinator.com/item?id=26273169 ) and concluded that Sceptre, a
726.
by geofft 5y ago
If the noble of heart can get good work done in academia despite the pressures on them, why can they not get good work done in industry despite the pressures on them?
727.
by geofft 5y ago
Huh, I thought I was pretty clear that I meant an individual researcher employed by industry to do their research (" for CS in general - and especially for AI - you'll be just fine in industry.... Go where the incentives are bette
728.
by geofft 5y ago
Sure, but as an individual researcher, the integrity of your scientific work is not compromised by the unethical goals of your employer or the unethical ways in which it raises funding. That's what I'm claiming. It's rather d
729.
by geofft 5y ago
There's another solution: give up on academia. The model of academia works well when some part of society is willing to fund researchers spending time on open-ended basic research, even if it produces no results. Saying "Don'
730.
by geofft 5y ago
True. I guess I meant they could say "We default to not allowing extensions unless a human thinks the extension is a good idea," which will produce a similar outcome to the status quo - non-human review that has a high reject rate
731.
by geofft 5y ago
Most of the work that the Chrome folks have been doing on web extensions recently has specifically been to make finer-grained APIs to do the sorts of things extensions do without giving them full access to edit pages etc. For instance, see
732.
by geofft 5y ago
What would they say about it? The most obvious things Google can do are to either limit the power of extensions and deprecate abusable APIs or to be much more stringent about human review of extensions, both of which they're doing and
733.
by geofft 5y ago
I think there's merit in objecting to "that will never happen" checks in some cases (though, to be clear, I'm not saying the people objecting to your code are thinking about the same thing I am). Specifically, if you hav
734.
by geofft 5y ago
Yes. Who else besides the community of scientists is supposed to interpret the evidence and decide whether the earth really goes around the sun? The Pope?
735.
by geofft 5y ago
The content of the article is specifically using the alleged unfair dismissal of Loeb's ideas to argue the broader point that the scientific community unfairly dismisses unconventional ideas in general. I agree with you that the counte
736.
by geofft 5y ago
> Social acceptance is not validity. Social rejection is not invalidity. Yes it is, otherwise the whole scientific method falls flat on its face. If you cannot expect that a person will identify valid and invalid ideas, what's the
737.
by geofft 5y ago
In that sentence, "these records" means "information about how GitHub's servers are behaving," not, say, "user data." It is technically true that such a tool could be used on any sort of data, in the same
738.
by geofft 5y ago
An ad hominem attack is when you criticize the person making the argument instead of criticizing the argument. The comment above is criticizing the argument: the argument is "My ideas are being unfairly dismissed by the scientific co
739.
by geofft 5y ago
Even under the charitable interpretation, he "cares about IRC" in a way very different from how any of the projects that use Freenode care about IRC. Ask Gentoo or Ubuntu or Wikipedia what they want out of an IRC network, and they
740.
by geofft 5y ago
IRC is an unusual service in that legitimate use is very low-traffic and easy to handle (Freenode has under 100K users, and human users type at most one message per second or so), but it's also attractive for botnets and spam. Runnin
741.
by geofft 5y ago
I read that when it was posted, but I don't follow - what part of that evidence indicates that Libera.chat is untrustworthy or unworthy of support?
742.
by geofft 5y ago
That statement is also simply not true - no accounting of the "FOSS community" is complete without Debian and its influence - in particular the Debian Free Software Guidelines, which became the Open Source Definition, but also Deb
743.
by geofft 5y ago
First off, you're wrong about Urbit - Urbit explicitly does not have the address space to give each human their own planet, believing that it's a political ideal that not all humans deserve the same rights. (It might be true that
744.
by geofft 5y ago
The Phrack "vudo" writeup from 2001 was about getting arbitrary code execution given a one-byte out-of-bounds heap write that replaced something with a NUL byte and immediately set it back. http://phrack.org/issues
745.
by geofft 5y ago
The solution I outline is exactly how countless real-world systems, from cloud computing to web browsers to eBPF, safely run user-provided arbitrary code.
746.
by geofft 5y ago
I believe most public cloud providers pin different user VMs to separate physical cores, which defends a lot against these attacks because you aren't sharing a branch predictor or an L1 cache with other people. And qemu comes with othe
747.
by geofft 5y ago
Let's say you're building Python. You write a rule to build Python, which is something like "Get a tarball from python.org/... with hash abcd1234; depend on glibc and zlib and OpenSSL; ./configure && make in
748.
by geofft 5y ago
> Turing completeness means there's nigh infinite ways to convolute malware that will evade all scanners. No, it does not. Turing-completeness simply means that for certain properties which could be true or false about some softwa
749.
by geofft 5y ago
Ignore the overly-excited university press release office and read the paper, A Secure and Formally Verified Linux KVM Hypervisor : http://nieh.net/pubs/ieeesp2021_kvm.pdf > Commodity hypervisors are widely deploy
750.
by geofft 5y ago
Still not following how this is different from Mastodon. Some users run their own instance (= planet), which cannot be "banned" by ordinary Mastodon means; you can only refuse to peer with it. Some users have accounts on someone e

More ›