Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
lyu07282
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
54 ms
·
961.
▲
by
lyu07282
3y ago
Interesting project, the only question i have is about this: > seek effortlessly without waiting for the transcoder Depending on the container and codec this was always an issue. How did you solve that problem? are you not using libav?
962.
▲
by
lyu07282
3y ago
> imagine if there was an EU mandate set up and some serious money was budgeted to it. We saw what that looks like already. "Gaia-X" it was a huge clusterfuck and burned to the ground before it even began.
963.
▲
by
lyu07282
3y ago
Very typical for Germany, they rather roll their own solutions than cooperating with other countries and pooling resources. But it's even worse than that, each state within Germany does their own bureaucracy differently as well, to var
964.
▲
Chisel: A fast TCP/UDP tunnel over HTTP
(github.com)
289 points
by
lyu07282
3y ago
|
59 comments
965.
▲
by
lyu07282
3y ago
While we are speculating, there was this case of university students trying to introduce malicious commits in the kernel in order to test open source to such attack vectors. Perhaps this was similar "research" by some students. h
966.
▲
by
lyu07282
3y ago
one question I still have is what exactly the performance issue was? I heard it might be related to enumeration of shared libraries, decoding of the scrambled strings[1], etc. anyone know for sure yet? one other point for investigation is i
967.
▲
by
lyu07282
3y ago
I think the really scary part is the particular modus operandi that this demonstrates, that is easily repeatable. A malicious actor builds up a reputation in the open source space and eventually takes ownership of the release process at whi
968.
▲
by
lyu07282
3y ago
It was only in rolling release/testing/unstable distributions, a pretty small subset of systems in the grand scheme of things, is why I said that. It was introduced in February 23 release of xz. This could've been years until
969.
▲
by
lyu07282
3y ago
God the amount of damage this would've caused, nightmarish, we are so unbelievably lucky. In a few months it would've been in every deb&rpm distribution. Thank God we found it early!
970.
▲
by
lyu07282
3y ago
in this case the backdoor was hidden in a nesting doll of compressed data manipulated with head/tail and tr, even replacing byte ranges inbetween. Would've been impossible to find if you were just looking at the test fixtures.
971.
▲
by
lyu07282
3y ago
> Usually there is a better way to do it in almost all cases where people feel the need to reach for "eval" unfortunately thats just standard in configure scripts, for example from python: ``` grep eval Python-3.12.2/confi
972.
▲
by
lyu07282
3y ago
I care infinitely more about the questions I asked than whatever the family had to say. Because questions about fingerprints and gunpowder residue are concerning the physical evidence that could prove suicide to a reasonable degree. I don&#
973.
▲
by
lyu07282
3y ago
It's not like we know or will ever know the details of and the extend of the investigation, the note was actually reported as a "white piece of paper that closely resembled a note,", what was on the note? Were his fingerprint
974.
▲
by
lyu07282
3y ago
Is that really true? INS/inertial navigation systems accumulate errors over time, GPS is still required for them, its not a replacement?
975.
▲
by
lyu07282
3y ago
No google maps is really gonna suck during the nuclear holocaust! /s
976.
▲
by
lyu07282
3y ago
I d2't k2w w2t y1u m2n, I u1e t3e a1l t1e t2e
977.
▲
by
lyu07282
3y ago
> The Justice Department has the right under the law to ask for structural changes to Apple’s business — including a breakup, said an agency official Sometimes neoliberalism feels like it's gaslighting us, like am I really supposed
978.
▲
by
lyu07282
3y ago
It probably makes it even worse, its the enterprise/data center cards for ML that are making huge profits and where the growth is, and those don't even have a video out.
979.
▲
by
lyu07282
3y ago
I was hoping they officially partnered with NVIDIA in that effort, perhaps eventually even replacing the proprietary one on Linux. But then I awoke from that dream, it's less exciting. Still cool though. Unfortunately Linux Desktop sti
980.
▲
by
lyu07282
3y ago
Absolutely, I think most people probably mean Gnome when talking about the Linux Desktop. Which really says a lot about "most people" and how little I give a shit about their opinions. The benefit however is that more people using
981.
▲
by
lyu07282
3y ago
I hope this will one day become as large and productive as the Blender Foundation
982.
▲
by
lyu07282
3y ago
It seems kind of obviously foolish, like sure you can wind-down safety standards for profits, but in the long run making flying wildly recognized as unsafe would surely be so detrimental to profits of the entire industry. Except that they p
983.
▲
by
lyu07282
3y ago
Rockstar should've just worked with modders instead of whoever produced the garbage re-masters. Like fans have more respect and love for GTA than anybody working at Rockstar. Fuck this company.
984.
▲
by
lyu07282
3y ago
> truth was found and the record corrected. That's exactly the result we want. I hope science can one day overcome people like you and actually address the systemic issues it is facing. Denial that there is anything really wrong, th
985.
▲
by
lyu07282
3y ago
No actually, official distribution repositories are preferable if they are properly maintained. Debian for example has provided such centralized repositories that can absolutely be trusted for decades. Otherwise you'd have to update ea
986.
▲
by
lyu07282
3y ago
The takeaway is to avoid using Snap. In case you needed another reason to.
987.
▲
by
lyu07282
3y ago
Why do you think it's a myth? It is true. Germany has one of the highest electricity prices in the world. It's well known because it's true.
988.
▲
by
lyu07282
3y ago
I love how circular neoliberals argue, lobbying and regulatory capture are a real problem with big pharma, to fix it the government really should put them under heightened scrutiny and regulation. These politicians are really corrupt, they
989.
▲
by
lyu07282
3y ago
It constantly hallucinates APIs for me, I really wonder why people's perceptions are so radically different. For me it's basically unusable for coding. Perhaps I'm getting a cheaper model because I live in a poorer country.
990.
▲
by
lyu07282
3y ago
seems like an annoying but necessary thing, so lets give the original a quick death and migrate to freenginx Infrastructure like that should not be run by for-profit corporations anyway, it will always end up like in this case sooner or lat
More ›