michaelt

42 ms·

751.
by michaelt 1y ago
It's also an almost-real situation (although I wasn't the library developer involved) You can Google "YAMLException: The incoming YAML document exceeds the limit" - an error introduced in response to CVE-2022-38752 - to
752.
by michaelt 1y ago
Imagine I make a library for loading a certain format of small, trusted configuration files. Some guy files a CVE against my library, saying it crashes if you feed it a large, untrusted file. I decide to put out a new version of the library
753.
by michaelt 1y ago
Are you sure? My info might be out-of-date, but a few years ago the MIPI support was in some propriety Broadcom firmware. So your choice was basically the ~3 sensors on official RPi camera boards (although people would sell you things like
754.
by michaelt 1y ago
> worst-case scenario [...] you'll start receiving ransomware threats with awkward photos/videos attached to them Honestly, I can kinda understand having outdoor cameras, if you're in a high crime area - but I just can&#
755.
by michaelt 1y ago
When Google sends people to a review website, 30% of users might have an adblocker, but 70% don't. And even those with adblockers might click an affiliate link if they found the review particularly helpful. When ChatGPT reads a revie
756.
by michaelt 1y ago
> Individuals who leave coal mining areas carry more EA-increasing alleles on average than those in the rest of Great Britain. To what extent can we tell this apart from the fact almost every university student leaves their hometown,
757.
by michaelt 1y ago
> sometimes I don't think freedom and free will is to be trusted to people. Not when they can be exploited. The thing is, you gotta square that with these guys getting sent into war zones to get shot at. If we think these young me
758.
by michaelt 1y ago
IDK what 'performative' means. But according to my calculations, if I donated $50,000 to a charity last year and $0 this year, I've still donated $50,000 to the charity. Whereas someone who donated $0 last year and $0 this ye
759.
by michaelt 1y ago
I hope critics will be equally critical of the companies that weren't donating to any DEI-related orgs in the first place.
760.
by michaelt 1y ago
> I guess at some point people started taking themselves way too seriously. Worrying about what others think, or something, I don't know. When I was a teenager, precisely one guy had videoed his teenage self waving around a broo
761.
by michaelt 1y ago
> Just hire devs and kick them out if they dont fit ur needs. Why go through these humiliating corpo processes? People actually find being fired a greater inconvenience and humiliation than a 60 minute whiteboard interview.
762.
by michaelt 1y ago
> When you’re placed in a high-stakes, time-pressured situation, like live coding, your brain reacts exactly like it would to any other threat. The amygdala gets activated. Cortisol levels spike. [...] You forget what you just typed a f
763.
by michaelt 1y ago
It increases security in certain circumstances. Mostly for Windows users at big corporations. For example, you want your users' laptop hard drives to be encrypted - but also you have users who regularly forget their passwords? With bit
764.
by michaelt 1y ago
> Why is this so hard for the film industry? The logic is pretty simple: * It has been widely demonstrated that, in the US, many consumers are willing to pay more than $100/month for cable TV, with ads. * Netflix costs $8/mon
765.
by michaelt 1y ago
Even if this did happen, there's a trivial workaround available: Just go into your BIOS and switch 'Secure Boot' off. Secure Boot is a fine thing if you're a huge corporation and want to harden laptops against untrustwor
766.
by michaelt 1y ago
> Everyone universally hates passkeys because they never work right. I’m considering a passkey deployment. What sort of issues did you encounter?
767.
by michaelt 1y ago
Some users clocks are a minute or two out, so sensible TOTP implementations will actually accept about 5 codes to account for clock error.
768.
by michaelt 1y ago
You can set a yubikey to require a pin entered on the host. It’s a shitty user experience though, as loads of websites turn into “username+password+yubikey+pin+key button press”
769.
by michaelt 1y ago
I'm curious - how does the standard make "to continue, google.com will share your name, e-mail address and profile picture" compatible with "a modern, privacy-preserving standard for federated identity on the web" ?
770.
by michaelt 1y ago
I suspect there is pressure in the opposite direction these days. If you see someone wearing a 6-carat diamond, you know it's either a $100,000 natural diamond, or a $4,000 lab-grown diamond. And you'll assume it's the latter
771.
by michaelt 1y ago
In principle, we can imagine jobs that contribute positively to the world. When a builder builds a house, or a doctor mends a broken arm, the community has one more home and one less broken arm - and the community is left richer even after
772.
by michaelt 1y ago
> The reason for Yahoo's failure was its loss of dominance in search to the Chrome Browser. I'm afraid your timeline might be a bit off there. Yahoo outsourced their search to Google in 2000 [1] while google didn't buy a
773.
by michaelt 1y ago
Well, it all depends if the politicians actually care if this works. You see, this bill was passed in 2023, under a Conservative government; then a Labour government was elected in 2024, before the bill came into force. A nice little time
774.
by michaelt 1y ago
It's surprisingly hard to get cryptocurrency without a KYC check in the UK - bitcoin ATMs and suchlike are banned. Far simpler, if you're a teen that wants to get around the block, to just have an older looking friend do the video
775.
by michaelt 1y ago
https://www.k-id.com/post/adapting-discord-for-the-uk-online... says that:- > Identity documents are deleted after a user’s age group is confirmed, and the video selfies used for facial age estimation never leaves
776.
by michaelt 1y ago
> I miss the days of forums, and wish something like them could thrive again instead of rather private, but importantly ephemeral chats. Open source projects have long had ephemeral chats, private to the people in the chat at that mome
777.
by michaelt 1y ago
No, but I can tell you that the moment you open the browser console, it stops scanning and marks the scan as failed. The vendor is https://www.k-id.com in Discord's case
778.
by michaelt 1y ago
> If people are so interested, they'd presumably read and cite null-result publications, The thing is, people mostly cite work they're building upon, and it's often difficult to build much on a null result. If I'm a
779.
by michaelt 1y ago
> 40 founding engineers Forty founding engineers? Seriously? They must have a very expansive definition of founder.
780.
by michaelt 1y ago
> This was solved a long time ago by marking such cookies as "HTTP only" That stops the attacker from exfiltrating your cookies with their evil JavaScript - but they can still have their script make http requests, and they’ll

More ›