nurple

18 ms·

211.
by nurple 3y ago
Agreed. I spent a small epoch of my career trying to make js have "classes" in the heady days of OOP. It took a bit to realize that idiomatic js didn't need them. Besides being sold so hard on OOP as a concept, failing to und
212.
by nurple 3y ago
All they had to do was add and validate a nonce value in the state, or at the very least, to triage, sanitize the subdomain value. The latter would literally be a 10 minute fix.
213.
by nurple 3y ago
All they had to do was sanitize the subdomain var to only allow values valid in host part of a URL. But also, one of the state parameter's primary uses is exactly to prevent XSRF attacks like this by using a random nonce value so that
214.
by nurple 3y ago
The headline seems pretty unfair to Microsoft here, seemingly to capitalize on the press of their recent auth disaster. The first thought that came to my mind on reading the headline was "oh great, another MS breach". These are in
215.
by nurple 3y ago
Love NixOS. Flakes are awesome and I've started playing with flake-parts+devenv. It's been far easier and faster to set up isolated environments(nothing installed globally) than docker compose, that and it's substantially mor
216.
by nurple 3y ago
Argo has a number of deployment and usage models, some which I think were not a part of the original design. I think in the early days Argo was more intended to be interacted with via the UI, they put quite a bit of work into ACLs between t
217.
by nurple 3y ago
"Types let me make changes to code I haven't taken the time to understand" is hardly the proof you seem to think it it's. Removing a field in a data structure is such a big problem, even in typed systems, that the most u
218.
by nurple 3y ago
The social pressure to love static typing notwithstanding (think less of me if you will), the reason I got turned off by it eventually are the ivory towers that invariably get built up around them. I've spent a decade each building sof
219.
by nurple 3y ago
Sure, give the LLM a discovery function. If you're trying to figure out what tools to give the LLM based on user input, you're probably squandering the main power of the pattern.
220.
Non-Euclidean Therapy for AI Trauma [video](youtube.com)
3 points by nurple 3y ago|1 comments
221.
by nurple 3y ago
PATIENT ALICE: An Artificial Intelligence suffering from hallucinations of a lost puppet show. These hallucinations need to be erased. GENERATIVE MODEL TYPE: Diffusion-based. PRESCRIBED TREATMENT: A Latent Space Editing method that involves
222.
by nurple 3y ago
See, the problem is that you have it backwards. OSS's significant "problem" is those attempting to levarage it for funding. If you want funding, don't do open source; you'll make all the precious money that those wh
223.
by nurple 3y ago
The FAA, similarly, has effectively killed air transport save for the wealthy or the airlines. I look out my window everyday and it pains me greatly to see the skies empty. It’s hardly a hobby even these days to fly unless it’s in furtheran
224.
by nurple 3y ago
I love how sites are now taking the mobile strategy of checking first and then showing a sugary popup explaining that they’re about to pop the native prompt for perms, and why. It brings me joy to click affirmative on those so I can permabl
225.
by nurple 3y ago
ZMQ of course! In all seriousness, I’ve always found the author’s odd rant on the contemporary wireless communication system quite interesting. In my mind, the issues with the current system are not so much technical as they are regulatory.
226.
by nurple 3y ago
Not only that, but they now have an "SMS Pumping Risk" API endpoint(1) that costs 3.5c per request(2). I guess the demand is there... but feels pretty exploitative at this point. 1. https://www.twilio.com/docs&#
227.
by nurple 3y ago
Found this at a Saver's a few years back (amazing place to find odd books)! Great book to own even if only to see the history of serious flight sim dev from the early days.
228.
by nurple 3y ago
Can't recommend VTOL VR enough. Started out with one semi-futuristic jet-pod VTOL aircraft, but has since added a camancheesque helo and an F15-like strike fighter. It does have _some_ pomp in the startup, but really just enough to get
229.
by nurple 3y ago
The only way ansible could be somewhat like nix is if you reinstalled the same exact version of the target OS each time before you run your playbook. The problem is that ansible, puppet, salt, chef, et al, are simply tools to mutate the gia
230.
by nurple 3y ago
In 23.05 (the latest release) `buildFHSEnv` was added, which creates an FHS environment inside of a bubblewrap sandbox. https://nixos.org/manual/nixpkgs/stable/#sec-fhs-environment... ETA Code (note control o
231.
by nurple 3y ago
Presenting it with an alter-ego is a common method of "jailbreaking" GPT. I think one of the early jailbreaks was named Dan. ETA: https://gist.github.com/coolaj86/6f4f7b30129b0251f61fa7baaa8...
232.
by nurple 3y ago
Yeah, true. They've made some pretty impressive perceptual voice codecs that take very little data, and using that as the carrier for transmitting data would eat into that quite a bit more. Though, I find steganographic methods quite f
233.
by nurple 3y ago
Interestingly they don't even need to ban the tech, just throw out enough FUD about people attempting to take back control of their personal data using the tech and you can set some nice precedent (in the mind of the judge and people)
234.
by nurple 3y ago
There was a phone called the AN0M that came on the market a couple years ago that purportedly had similar features, turns out it was an FBI honeypot op to sell it to people that were seeking "privacy" with the hope that criminals
235.
by nurple 3y ago
The risk is that the baseband could be implementing similar features that this userland adds to the "distro" running on the modem (call, data, and SMS recording), and these features could be driven by signals from the cell network
236.
by nurple 3y ago
I wonder if it'd be possible, at this level, to create an E2EE voice connection between two devices. I'm not familiar with the stack or the voice data stream through the hardware. If code in the blob is responsible for encoding ma
237.
by nurple 3y ago
Show me the man and I'll show you the crime. - chief of Stalin's secret police
238.
by nurple 3y ago
It's pretty interesting to see the added features this replacement userland provides when considering the tenacity of the TLAs in slurping up the data of citizens and non-citizens alike. It's capabilities like these that freak me
239.
by nurple 3y ago
I really like that UX! Even Google dropped the ball there, I accidentally deleted our production gke cluster a handful of years back, through the bloodshot eyes of a forced all-nighter, because their deletion UX was two button clicks (may b
240.
by nurple 3y ago
It’s a dream compared to UE. I tried on and off over a couple years to power through building some toy VR apps in UE and was never really able to make much progress past their prefab maps. It’s just so freaking complex that, IME, the fun of

More ›