mirashii

6 ms·

61.
by mirashii 4mo ago
https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-as...
62.
by mirashii 4mo ago
> CPUC exists. CAISO exists. The consumer experience is still bad. What this means is that there is not enough generation The existence of CPUC and CAISO says nothing of their efficacy. Jumping all the way past any question of their effi
63.
by mirashii 4mo ago
Importantly, in that rule: > Complaints about paywalls are off topic, so please don't post them.
64.
by mirashii 5mo ago
Not with those exact terms, but it is certainly being discussed. Wes McKinney said in a recent talk that with current coding agents there’s no longer an excuse for shipping suboptimal code that takes on tech debt. Writing tests has never be
65.
by mirashii 5mo ago
What language that is actually used 40 years after release isn't undergoing big, fundamental changes? Java? Nope, you're getting a fundamental change in Valhalla C++? Nope, new language edition every few years with fundamental c
66.
by mirashii 5mo ago
I'd have hoped in 2026 that anyone publishing this type of report would understand that DNSSEC isn't helping anything, and is generally considered to be actively harmful to enable. I'd suggest doing a bit more research and dr
67.
by mirashii 6mo ago
If you read the article and the linked documentation, you'll see that those things aren't in the list of what this change applies to. https://support.apple.com/en-us/126655
68.
by mirashii 6mo ago
Do you have any reference to the Rust community “not allowing” something? This seems more like a case of a relatively niche tool doing what it needed to do to work, but not (yet) some broader effort to upstream or integrate this into cargo
69.
by mirashii 6mo ago
How about the boy who called nonsense security vulnerabilities. This is the same author who posts with incredulity that the ability to change a config file with a shell command in it gives you the ability to run the shell command you posted
70.
by mirashii 6mo ago
I can buy the idea that if you can have the MDM infrastructure attest the code signing identity through the designated requirements, that you can probably come pretty close, but I'm still not quite sure you get there with root on macOS
71.
by mirashii 6mo ago
> If you can prove a public key is generated by the SEP of a machine running with all Apple's security systems enabled, then you can trivially extend that to confidential computing because the macOS security architecture allows apps
72.
by mirashii 6mo ago
MDMs on macOS are permissioned via AccessRights, and you can verify that their permission set is fairly minimal and does not allow what you've described here (bits 0, 4, 10). That said, their privacy posture at the cornerstone of their
73.
by mirashii 6mo ago
A note, as others have posted on this thread: I mention this as a concrete and trivial flaw in their whole strategy, but the issue is fundamental: there's no hardware enclave for third-party code available to do the type of attestation
74.
by mirashii 6mo ago
Looking at their paper at [1], there's a gaping hole: there's no actual way to verify the contents of the running binaries. The binary hash they include in their signatures is self-reported, and can be modified. That's simply
75.
by mirashii 6mo ago
That idea was not expressed in the article, only the fact that the ads were removed. This is worth covering, especially when coupled with the context for what ads Meta regularly does allow. One does not have to believe that they're obl
76.
by mirashii 7mo ago
https://mastodon.social/@blogdiva/116348872322024778
77.
by mirashii 7mo ago
Turns out the intent to do so was announced on April 2nd as well.
78.
by mirashii 7mo ago
They have, but they also just announced this week that for business and enterprise plans, they’re switching from quotas for codex to token use based pricing, and I would expect that to eventually propagate to all their plans for all the sam
79.
by mirashii 7mo ago
You're not looking at the albedo of the solar panels in isolation though, you're comparing it to asphalt and cars. Typical solar panels have an albedo of ~0.3. Asphalt around ~0.05.
80.
by mirashii 7mo ago
Using a release less than two months is hardly “so far behind”. The 1.24 series had considerable regressions that have taken a number of patch releases to fix, it stands to reason that the same would be true of newer releases. Given there&#
81.
by mirashii 7mo ago
It’s been merged into the systemd project, so one must assume that the systemd maintainers have some level of influence over it.
82.
by mirashii 7mo ago
> especially with the really short name limit of only 24 characters. And with no meaningful separator characters available! No dashes, underscores, or dots. Numbers and lowercase letters only. At least S3 and GCS allow dashes so you can
83.
by mirashii 7mo ago
What a ridiculous take. Many people loudly raised the question and objected to the practice from the beginning, but a handful of companies ignored the objections and ran faster than the legal system. If they were in the wrong, legally or mo
84.
by mirashii 8mo ago
It is a measure of the intended level of care that the users of your interface have to take. If there's no unsafe in the interface, then that implies that the library has only provided safe interfaces, even if it uses unsafe internally
85.
by mirashii 8mo ago
Generally speaking, there's prompt caching that can be enabled in the API with things like this: https://platform.claude.com/docs/en/build-with-claude/prompt... For a specific harness, they've all f
86.
by mirashii 8mo ago
The thing is that almost always isn't good enough. If it can't prove it, then a human has to be put back in the loop to verify and assert, and on sensitive timelines when you have regulatory requirements on time to acknowledge and
87.
by mirashii 8mo ago
cargo-audit is not quite at an equivalent level yet, it is lacking the specific features discussed in the post that identify the vulnerable parts of the API surface of a library. cargo-audit is like dependabot and others here in that it onl
88.
by mirashii 8mo ago
> Is there an equivalent to govulncheck for say NPM or Python? There never could be, these languages are simply too dynamic.
89.
by mirashii 8mo ago
> You got a source for that? Because the only communication I've seen from Discord implies no data is sent when these scans take place, its supposed to all take place locally FIRST is my understanding. > The only exception is if
90.
by mirashii 8mo ago
https://discord.com/privacy > We don’t sell your personal information. No evidence that they sell your data against their privacy policy has ever come to light, so I think you should probably back that claim with evidenc

More ›