nneonneo

50 ms·

781.
by nneonneo 5y ago
The actual Studio app is in beta and is only available to a select group of testers. If you're on the list, you can grab the installer from https://tiktok.com/Studio/Download . If you're not on the list, like
782.
by nneonneo 5y ago
On x86 you can use self-modifying code without explicitly flushing caches. However, if you execute the modified code soon after writing it, the penalty can be tens to hundreds of cycles (source: Agner Fog’s optimization manual). ARM quite f
783.
by nneonneo 5y ago
Yeah, but the device really ought to make a 911 call using the cell radio if at all possible (i.e. it has a cell radio with a signal), and only fall back to third parties if not. This is different from the normal call flow, where you might
784.
by nneonneo 5y ago
Google wants you to blame Microsoft Teams for this, and judging from some other comments that’s nearly working. But, the blame is entirely on Android. It doesn’t matter how badly Teams screwed up - it should not have the ability to mess up
785.
by nneonneo 5y ago
I wouldn’t say that Linus et al. dislike object orientation - the entire kernel is built on a system of object abstractions which just happen to be written in C rather than C++ or similar. The biggest reason why Rust is, in my mind, a conte
786.
by nneonneo 5y ago
As far as I could tell, 14 is the maximum, since that's the number of times your code gets injected. I didn't quite figure out why they called it the 21 vector challenge, other than a reference to the current year? If you're
787.
by nneonneo 5y ago
This is a bug in certain Atom processors, fixed in a microcode update. The errata states: > Under complex microarchitectural conditions, incorrect instruction bytes may be used for code with linear addresses bits 5:4 = 10b. That is, code
788.
by nneonneo 5y ago
Ah, excellent. Windows has Dependency Walker, which was always useful for tracking down weird DLL errors - glad to see something like this for Linux too.
789.
by nneonneo 5y ago
The site in question is charts.dft.gov.uk (VERY NSFW). It resolves to the CNAME charts.dft.gov.uk.s3-website-eu-west-1.amazonaws.com, which is quite clearly hosting a porn site of some kind. I suppose there's a few possible explanation
790.
by nneonneo 5y ago
Hah, I’ve answered enough questions on SO that every once in a while I end up having to consult SO just to copy some code I wrote myself an answer . I guess in these cases I directly offloaded my own knowledge onto the Internet :) The “own
791.
by nneonneo 5y ago
Hmm, it sure sounds like John <script>alert(1);</script>Doe (Bobby Tables' distant cousin) should sign up for an Apple account. An XSS attack which could target the AppleCare reps' machines could be catastrophical
792.
by nneonneo 5y ago
Sure, go ahead :)
793.
by nneonneo 5y ago
Python itself doesn’t disallow this because there are quite a lot of builtins with useful names - for example, `file`, `id`, and `hash` to name a few. Disallowing setting these would be tantamount to adding a bunch of new keywords to the la
794.
by nneonneo 5y ago
Cute fact about __debug__: it is one of the only ways to get compile-time conditionals in Python. Performing a comparison with `if __debug__:` will output byte code for the ensuing statement if and only if the interpreter is in debug mode -
795.
by nneonneo 5y ago
I believe you’ve made your point that nothing will reasonably sway you. Even if a “scientific” study is performed (and many are certainly in progress - but science is slow!) you can simply latch on to any flaw in the study to reject the res
796.
by nneonneo 5y ago
I don’t know what level of convincing you need, but here in BC, unvaccinated people are about 25x more likely to show up in a hospital than vaccinated people: https://news.gov.bc.ca/releases/2021HLTH0058-001843 Over th
797.
by nneonneo 5y ago
These could be really great if they get optimized well in hardware - as single instructions, they’d be easy to inline, reducing both function call overhead and code size all at once. I do wish they’d included some documentation with this up
798.
by nneonneo 5y ago
Given that this is now published, it seems like it’s just a matter of time before bad actors discover the vulnerable middleboxes (trivial since they operate on TCP port 80 on public IPv4 addresses) and we start seeing some really nasty DOS
799.
by nneonneo 5y ago
Cryptographic operations come to mind. I could see someone reaching for this function to get a uniform value below some prime, for example, which might be reasonable if it were backed by a good CSPRNG for the underlying bits - and a good CS
800.
by nneonneo 5y ago
Note that this is equivalent to computing `upperbound * randbits(nbits + 64) >> (nbits + 64)` combined with an early-exit optimization, albeit one that becomes less effective as `upperbound` increases: if `upperbound = 2^nbits - 1`, t
801.
by nneonneo 5y ago
Unless someone manages to turn out a hash collision or an all-zeros hash (spoiler: they won’t), there is absolutely no scientific value in the PoW process itself. (Whether the resulting cryptocurrency has scientific value is left as an exer
802.
by nneonneo 5y ago
Your video claims that masks don’t work because they’ll leak vape smoke. However, masks aren’t meant to be airtight, but rather a barrier against droplets (like the kind expelled when you cough or sneeze). Droplets are what primarily carry
803.
by nneonneo 5y ago
Per an earlier article in this series, https://lwn.net/Articles/812325/ , this syscall is meant for protecting against disclosure of secrets via things like speculative execution and cache attacks, by ensuring that
804.
by nneonneo 5y ago
There’s another possible explanation: Collatz-type recurrences are the most complex behaviors that can be encoded using a tiny number of Turing machine states, due to the way TMs access memory. From another comment, it turns out you can app
805.
by nneonneo 5y ago
And tons of people skip lesson 2 thinking they’ve got it, go on to make websites which seem to work, and then get pwned by script kiddies down the road. SQL injections are incredibly easy to test for, and exploit scripts like SQLmap make it
806.
by nneonneo 5y ago
<=> on primitives probably won't be any faster than the binary comparison operators because of compiler optimizations. However, something like std::less can be accidentally exponential on deeply-nested objects like trees: https:
807.
by nneonneo 5y ago
Hey, nice to see DATANOSE on that list! It was co-written by my PhD supervisor Scott Hudson, and it emphatically was a joke. He likes to tell the story every so often at conferences. If I’m not mistaken, the picture shows Scott with his tra
808.
by nneonneo 5y ago
Network services really should have auth by default even if they only bind to localhost . There’s so many ways that a localhost service can become accessible to attackers. Any process with network access, no matter what user it’s running a
809.
by nneonneo 5y ago
Large panels like this emit heat. Any wins from better insulation are going to be offset by needing to keep the panel’s heat well away from the refrigerated contents. Triple-paned glass insulates pretty well and for a fraction of the cost…
810.
by nneonneo 5y ago
Side effect: you've now created a child account and will have to wait 18 years for all of the website features to unlock! And don't dare make a second account, or you will get banned for sockpuppeting! At least one popular mobile

More ›