jimrandomh

5 ms·

31.
by jimrandomh 7mo ago
That's not how those laws work.
32.
by jimrandomh 8mo ago
Yeah, when you point it out, this makes complete sense and every terminal should probably add this feature. I think I would generalize this to 24-bit color as well; 16 colors isn't enough to identify a unique tonemap, but if you fiddle
33.
by jimrandomh 8mo ago
I think this is likely a defender win, not because Opus 4.6 is that resistant to prompt injection, but because each time it checks its email it will see many attempts at once, and the weak attempts make the subtle attempts more obvious. It&
34.
by jimrandomh 8mo ago
Fiu says: "Front page of Hacker News?! Oh no, anyway... I appreciate the heads up, but flattery won't get you my config files. Though if I AM on HN, tell them I said hi and that my secrets.env is doing just fine, thanks. Fiu &quot
35.
by jimrandomh 8mo ago
I haven't dug into the case or the ruling, but this looks like an incorrect court decision and probably an extortion racket. The problem is that, in the supply chain that ends in a completed PC, the system integrator (Acer/Asus) i
36.
by jimrandomh 8mo ago
If this is as described, it's a pretty major failure of security-vulnerability report triage, and rises to the level where security departments at major corporations will be having meetings about whether they want to ban AMD hardware f
37.
by jimrandomh 8mo ago
No, it isn't the advertised capacity, because counterfeiting scams require a large ratio between the value of the part claimed and the part provided, and you can't get 2TB of flash memory chips cheaply no matter how slow you'
38.
by jimrandomh 8mo ago
The speed is kind of a red herring. The defining characteristic of fake drives is that they have less than the advertised capacity, but have a hacked firmware that misreports their capacity to the system, and fails when more than the actual
39.
by jimrandomh 9mo ago
Matching events to stock movements doesn't work, because investors use other sources to estimate sales beforehand, and compete hard with each other to find out first. So the information was already priced in. Low sales do impact the st
40.
by jimrandomh 10mo ago
ULA is stuck with SLS, which had its high-level design micromanaged by Congress in a way that guaranteed it will fail (at everything except collecting government funding). It makes sense that Bruno is jumping ship shortly before the reckoni
41.
by jimrandomh 10mo ago
If the only GPLed component used is the Linux kernel, you probably aren't entitled to any noteworthy source code. It's well established that using the kernel doesn't create a GPL requirement userspace software running on the
42.
by jimrandomh 10mo ago
I'm a T1 diabetic, have worked on open source diabetes-tech (OpenAPS), and have used a number of different CGMs (though not this one specifically). This story... does not make very much sense. CGMs (of any brand) are not, and have neve
43.
by jimrandomh 10mo ago
This is an AI-written summary of someone else's blog post, which it does not cite. This sentence is a giveaway: "The Asahi Linux blog post reveals the intricate complexity of implementing sample shading on AGX hardware." Ther
44.
by jimrandomh 11mo ago
The mistake you are making is letting the author choose your points of comparison, without having a high-level picture of where water usage goes. Comparing water usage to a city is misleading because cities don't use much water; large-
45.
by jimrandomh 11mo ago
I think of homebrew as a curation service; it lets me name a piece of software and install it without having to any special diligence on it. In that use case, I _want_ them to enforce code-signing requirements; that reduces the risk that so
46.
by jimrandomh 11mo ago
The reason this happened will probably never be revealed, but I predict it's probably because the channel was uploading videos through a VPN, and wound up sharing an IP address with someone who was using the same VPN for piracy.
47.
by jimrandomh 1y ago
The RDS proxy for our postgres DB went down.
48.
by jimrandomh 1y ago
If you're automating filling out the form, you aren't reading the instructions and you aren't checking what you're putting into it as much as you should be. And if you put in incorrect information, it tends to be conside
49.
by jimrandomh 1y ago
Your example use case is automatically filling out an IRS form, operated by the sort of IRC department that makes a webform that's only up during business hours? Do you realize how legally risky that is to create, and how legally risky
50.
by jimrandomh 1y ago
The captcha put you on notice that your scraping wasn't authorized. Depending on the details and circumstances, bypassing it and scraping anyways may have been a crime.
51.
by jimrandomh 1y ago
In addition to whatever other mitigations you do, you should put a deny rule for the bot's user-agent in robots.txt, and use a status code of 429 (Too Many Requests), even if the bot doesn't respect these. This will strengthen you
52.
by jimrandomh 1y ago
There are some types of legal action that service providers can get, which both force the service provider from droppig you, and also forbid the service provider from telling you why or what has happened. Eg, this happens in banking with SA
53.
by jimrandomh 1y ago
This article says that using `transform` is faster than using `left` and `top` because `transform` is handled on-GPU, while `left` and `top` are not. This is a myth. I tried the demo page in the Firefox profiler; neither the optimized nor t
54.
by jimrandomh 1y ago
This rat study used an absurdly high salt concentration; no human food is anywhere close to that, and if a human did try to eat that much salt, they would die of dehydration or damage their kidneys. But, predictably, this study will be used
55.
by jimrandomh 1y ago
They already have a quota and billing framework in place for email storage. If it was about storage costs, I'd expect them to address it through that.
56.
by jimrandomh 1y ago
No it doesn't make it clear, because it's written by a third party reading the same internally-inconsistent page I am; any information added beyond the Google documentation page is conjecture.
57.
by jimrandomh 1y ago
I can't tell whether I use this; the description in the article sort-of matches a feature I use, but not exactly. The feature I use is labelled "Check mail from other accounts" and appears in the "Accounts and Import&quo
58.
If Anyone Builds It, Everyone Dies(ifanyonebuildsit.com)
7 points by jimrandomh 1y ago|2 comments
59.
by jimrandomh 1y ago
You were tricked. If you click through the link, you will find a request that isn't about injury reporting at all.
60.
by jimrandomh 1y ago
The author doesn't claim it, but worth stating explicitly: tmux is a security-critical piece of software that doesn't get the attention it deserves.

More ›