nicce

14 ms·

331.
by nicce 5mo ago
Usually it is about the trust. A lot of code is reviewed, but is the reviewer good enough to spot all the issues? Do you trust the reviewer? Usually the trust comes from the ability to see the code by yourself or for the high trust for the
332.
by nicce 5mo ago
For this particular bug, for that to apply, you need some sort of oracle which tells that you are actually in the same child process that skips re-randomization before you can reduce the entropy. Based on this post, I cannot see that there
333.
by nicce 5mo ago
> Not really? Looks like we have a controlled-length overflow on a fork-based server, a situation where ASLR is known to not be very useful. It does not work like that - it has certain pre-condition requirements. You also need a reliable
334.
by nicce 5mo ago
> History shows that "meh, ASLR mitigates this" is a vastly bolder claim anyway, so I don't feel much need to defend my position here. Obviously you need to defend, that is quite generalization there. You need to prove how
335.
by nicce 5mo ago
Comment was more like pick your poison. Eventually it gets reviewed if they are serious. Old version had no future for serious production on anytime soon. This might get there.
336.
by nicce 5mo ago
Odd take. Bun was not option for me because or Zig. There was no security. Issue tracker has 3000 issues about segfaults. Now I might actually reconsider.
337.
by nicce 5mo ago
Code is cheap. Only the quality and maintenance is interesting. Those will be seen later on.
338.
by nicce 5mo ago
> ASLR is a defense-in-depth technique intended to make exploitation more difficult. In almost all cases it is only a matter of time and skill to also include an ASLR bypass. Both requirements continue being lowered by LLM agents every f
339.
by nicce 5mo ago
I am just going to justify in the future that because of LLMs, there is no reason to use JavaScript, Java, Python etc anymore because of the available workforce. Only then when the technology itself is fit for the job.
340.
by nicce 5mo ago
Maybe this is the best marketing trick for Claude Code ever. Maybe there was pressure from Anthropic to do this and prove the value. Even partial success is enough to prove the value, justify the value and usage, and AI dependency even furt
341.
by nicce 5mo ago
Meanwhile GitHub tab in Firefox/Chrome eats 6GB RAM alone.
342.
by nicce 5mo ago
> Then when Claude is down for an hour, they get visibly angry and don't remember how to do anything pre-Claude :) The drug is scary when everyone is depending on it. I wonder what is future like.
343.
by nicce 5mo ago
They just got a big VC funding. There is still no mention about the business model. I really wonder what it will be.
344.
by nicce 5mo ago
> I'm kind of baffled why everybody is suddenly hating on github? I use it just fine. For past two weeks I haven't been really able to browse repositories; some parts will not get downloaded. Issues not appearing after creating
345.
by nicce 5mo ago
> If a robber sees Bob buy a bunch of expensive electronics at WalMart, and then buys a crowbar and robs him, is WalMart somehow responsible for the robbery Yes, if Walmart somehow knew robber’s intentions, but sold anyway. That is the p
346.
by nicce 5mo ago
Would have like to see analysis against curl repo where the commit level is one day after the Mythos training data cutoff. And disable access to the internet.
347.
by nicce 5mo ago
Hmm, what that means or how can you even measure it? At least for all my recent problems, GPT 5.5 has performed better.
348.
by nicce 5mo ago
> If a billboard company accepted an ad that included a threat on the president’s life or recruitment info for a known terror organization, are they complicit in the crime? Water is a basic utility so I don’t think that’s a fair comparis
349.
by nicce 5mo ago
Or water companies for selling water for them. Where is the line?
350.
by nicce 5mo ago
Most people don’t understand how QR code works. So right now it may just send a SMS or prepare for it. But some day, it will do the remote attestation under the hood and the end user does not see the difference. I would bet a lot for this p
351.
by nicce 5mo ago
The thing is that it is something which takes so long time. E.g. why Taiwan is still so important?
352.
by nicce 5mo ago
I don't even use Sonnet anymore. Current feels worse than Claude 3.5 couple years ago. They have quantized that much? Switched to GPT 5.5, let's see how long it will stay good.
353.
by nicce 5mo ago
I fear that easier it gets to run models locally, more expensive all the hardware gets. So at the same time it gets further and further. You should have bought the hardware yesterday.
354.
by nicce 5mo ago
That misses the point of the original commenter. He is saying that local model only powers things where privacy is not so relevant and that creates the illusion.
355.
by nicce 5mo ago
The new book from lady who worked in Meta summarises it.
356.
by nicce 5mo ago
Well Electron includes Chromium. Maybe that pulls the 4GB model as well… not sure if it is Chrome only.
357.
by nicce 5mo ago
I am scared to even open Chrome these days. The only app that randomly chunks 70% of CPU availability with one tab.
358.
by nicce 5mo ago
How is trust model different with lambdas?
359.
by nicce 5mo ago
Wasn’t the main hassle in calibrarion and Bambu was good in that and is major reason for popularity? So ”once you have a reliable printer” is kinda big thing.
360.
by nicce 5mo ago
Here: https://github.com/oven-sh/bun/issues?q=is%3Aissue%20%22Segm... Around 2500 issues with segmentation fault.

More ›