gsnedders

7 ms·

31.
by gsnedders 6mo ago
A few devices do support USB 5Gbps over Lightning!
32.
by gsnedders 6mo ago
Also just unit tests in the source files, which again aren’t included in the binary via compile-time flags!
33.
by gsnedders 6mo ago
CryptoKit isn't relevant to `goto fail`, which was the origin of this thread, given CryptoKit merely implements primitives and not TLS. If you really are doubting what gets used for TLS, open up Console.app, start streaming, run `nscur
34.
by gsnedders 6mo ago
See e.g. https://developer.apple.com/documentation/network/creating-a... where the logging output makes it clear BoringSSL is what is used. Or comments such as: https://github.com/apple-oss-distrib
35.
by gsnedders 6mo ago
https://docs.tinygrad.org/tinygpu/ are their docs, and https://github.com/tinygrad/tinygrad/tree/4d36366717aa9f1735... is the actual (user space) driver. My read of everything is that th
36.
by gsnedders 7mo ago
To some extent, that’s just the nature of the incentive structure — you pay money for exploits with no penalty for false reports? Just rely on monkeys typing reports till one happens to be correct.
37.
by gsnedders 7mo ago
The other thing is to remember is that when it comes to complex targets, attacks still are found by using a different fuzzer and/or targeting a different entry point. It stands to reason that the same will apply for LLMs.
38.
by gsnedders 7mo ago
Last I knew Opera still had a decent amount of engineering staff in Poland, and still had some in Sweden, both in the EU, plus still has some amount of staff in Norway, not in the EU but definitely in Europe. That’s not to say their privacy
39.
by gsnedders 7mo ago
A lot of countries don’t stamp passports — if you can guarantee the entry is immediately recorded in your central database, and you can reliably look up the latest entry for a given passport, a stamp doesn’t really gain much.
40.
by gsnedders 7mo ago
ICE’s scope isn’t who is coming into the country — that’s CBP’s scope. ICE’s scope is supposed to be those committing immigration offences who have already entered the country (either because the CBP failed to catch them, or because they
41.
by gsnedders 7mo ago
Yeah, this. In my experience, it’s the relatively basic questions that have the highest value — both because they’re what you run into programming most often, and because they’re less likely to overwhelm candidates in a high-stress setting.
42.
by gsnedders 7mo ago
It’s common enough for groups to not consider the spec done until there is a decent bit of implementation experience (both because actual implementers tend to find interesting bugs in specs, and because many things are hard to measure witho
43.
by gsnedders 7mo ago
What counts as “our cost”? How long it takes to find the MaxSAT?
44.
by gsnedders 7mo ago
Beyond the economic arguments, there’s a lot in JS that actually makes it a lot easier: almost all of the operators can only return a subset of the types and cannot be overridden (e.g., the binary + operator in JS can only return a string o
45.
by gsnedders 7mo ago
From when I was working on optimizing one or two things with Cython years ago, it wasn’t per-se the branch cost that hurt: it was impeding the compiler from various loop optimisations, potentially being the impediment from going all the way
46.
by gsnedders 8mo ago
If you send a flag ever, then absence of a flag is also fingerprinting surface. If you imagine a world where you have a header, Accepts-Adult-Content, which takes a boolean value: you essentially have three possibilities: ?0, ?1, and absent
47.
by gsnedders 8mo ago
One thing that I’ve often seen is models, when very much told to just write a plan, still including sizeable amounts of code in the plan . Maybe it’s needing to step back and even ask for design doc before a plan, but even then…
48.
by gsnedders 8mo ago
While not wholesale replacing it, there already is Swift in dyld: https://github.com/search?q=repo%3Aapple-oss-distributions%2...
49.
by gsnedders 10mo ago
Also, as someone on the periphery of Selenium (mostly via WebDriver), some of the challenge is that Selenium has a huge amount of test code already written for it — and making radical API changes would break every test already written for i
50.
by gsnedders 10mo ago
> Performance isn't all that matters, especially once you have an established codebase and ecosystem. And this is no small part of why Java and JS have frequently been pushing VM performance forward — there’s enough code people very
51.
by gsnedders 10mo ago
Is there any plan about how to deal with indirect prompt injection attacks that could trivially be lurking in malicious web pages, given the agent can navigate to an arbitrary URL?
52.
by gsnedders 10mo ago
Is there anything at a protocol level that prevents using a modern font rendering stack for it?
53.
by gsnedders 10mo ago
Not just WM/DE, but also the toolkit too.
54.
by gsnedders 10mo ago
I mean, you can create alternate APIs that would work for the pop-up use case: you could have a command to create a new window positioned relative to the current window’s coordinate space. That limited capability still has a risk of denial
55.
by gsnedders 10mo ago
You are, of course, correct. But the fact that they made a new release with it undeprecated shows they _do_ care about their users (direct and indirect), and at least from my point of view (both from the Python ecosystem and the browser eco
56.
by gsnedders 10mo ago
This is exactly the sort of breaking change that I really struggle to see the value of — maintaining the deprecated method seems incredibly unlikely to be a notable maintenance burden when it is literally just: @deprecated("Use r
57.
by gsnedders 11mo ago
Note the spec does recommend providing a user option: https://drafts.csswg.org/css-color-hdr-1/#a11y
58.
by gsnedders 11mo ago
The second link isn't applicable to Apple's WebKit ports — it's entirely built via Xcode. https://github.com/WebKit/WebKit/blob/39386f4547897c89c510d0... defines USE_JPEGXL only for macOS <
59.
by gsnedders 11mo ago
Arguably this is a problem in when the patch is unapplied. Presumably in the coverage case it’s being called by a trace function, which inevitably runs during test execution — and while we want the trace function to be called during the tes
60.
by gsnedders 11mo ago
I’ve been in so many Ubers in the UK with check engine lights and the similar — but at least some of the difference is Uber UK has much higher requirements for cars, which I expect is probably partly because of competition from private hire

More ›