junon

12 ms·

301.
by junon 11mo ago
It's not a silver bullet in that it can open up other vectors of much more probable attack. If I have a FOSS project where there are other contributors with write access but not publish access (very common) OIDC now allows them to publ
302.
by junon 11mo ago
Shai Hulud isn't about accidentally committing secrets, nobody is suggesting that's what's happening. Not sure which comment thread you're reading.
303.
by junon 11mo ago
Docker is also not a silver bullet. Again, what you're claiming to be easy is often times exceedingly difficult or frictional, especially on established teams. I don't disagree that comparmentalization is important but security
304.
by junon 11mo ago
Good luck selling that to thousands of managers. That's my point. It's easy to list things that should be done. It's harder to get them greenlit.
305.
by junon 11mo ago
This has nothing to do with package sizes. Cargo was just hit with a phishing campaign not too long ago, and does still use tokens for auth. NPM just has a wider surface area.
306.
by junon 11mo ago
That's the goal, but it's not feasible in e.g. professional settings. Much easier said than done, unfortunately.
307.
by junon 11mo ago
OIDC is not a silver bullet either and has its own set of vectors to consider too. If it works for your org model then great, but it doesn't solve every common scenario.
308.
by junon 11mo ago
Getting a triangle on the screen is the hello world of 3D applications. Many such guides for your backend of choice. From there it becomes learning how the shaders work, internalizing projection matrices (if you're doing 3D) which take
309.
by junon 11mo ago
Every other windows version is terrible. Therefore, I bet windows 12 will be pretty decent, as far as windows goes.
310.
by junon 11mo ago
Why does AI studio need access to my drive in order to run someone else's prompt? It's not a prompt for authentication with my Google account. I'm already signed in. It's prompting for what appears to be full read&#x
311.
by junon 11mo ago
Not from my recollection. Not like this. BitBucket on the other hand had a several day outage at one point. That one I do recall.
312.
by junon 11mo ago
Been on GitHub for a long time. It feels like they're more often. It used to be yearly if at all that GitHub was noticably impacted. Now it's monthly, and recently, seemingly weekly.
313.
by junon 11mo ago
I thought this was a joke at first. It actually needs drive access to run someone else's prompt. Wild.
314.
by junon 11mo ago
I learned about her from HN so that tracks! As she should be.
315.
by junon 11mo ago
I love the idea of this but the mention of Hedy Lamarr could be confused as parody too when she was in fact an incredibly intelligent engineer and physicist. Anyway it reminds me of the deep fake of Kim K and Nicki Minaj explaining subnetti
316.
by junon 11mo ago
I can't even open Adobe Acrobat anymore. There's AI shit in almost every corner and toolbar of the app. This shit makes me want to stop interacting with tech altogether and live on a farm. I don't know how much more of this I
317.
by junon 11mo ago
Yes, the intent is very clear. EDIT: It seems based on other comments you are genuinely unaware of how it sounds, which is totally fine - I feel someone should let you know it sounds like "peg me" or "smegma", which uh
318.
by junon 11mo ago
I've never noticed this until now and now I can't unsee it.
319.
by junon 11mo ago
Ah interesting! Thanks for the clarification. Great article :)
320.
by junon 11mo ago
It might also be an explicit guard against Studio Ghibli specifically after the "make me Ghibli" trend a while back, which upset Studio Ghibli (understandably so).
321.
by junon 11mo ago
How meta. This comment is clearly written by AI.
322.
by junon 11mo ago
This is really cool. I see the demo uses it for CRT stuff but my first thought is this could be used as a tool for accessibility hallway testing to simulate color blindness, haloing (not sure the correct term), and various other visual impa
323.
by junon 11mo ago
.... Which is why he used cloudflare. Caching isn't magic.
324.
by junon 11mo ago
Does it matter? Can't think of a single substance that's safe for driving a car.
325.
by junon 11mo ago
Just fact checked this. TIL, for some reason I thought plants came before fungi.
326.
by junon 11mo ago
Time is hard, time synchronization is arguably harder.
327.
by junon 11mo ago
Sam is wrong here, AGI has never had a clear definition, this there's no "we have" or "we haven't". I'd say most agree we're still a ways off.
328.
by junon 11mo ago
You are being purposefully obtuse here. HIBP is a very, very well established site with a long history of operating in good faith.
329.
by junon 11mo ago
It doesn't matter, don't use passwords that have been compromised. Period.
330.
by junon 11mo ago
https://haveibeenpwned.com/Passwords

More ›