omcnoe

9 ms·

121.
by omcnoe 2y ago
It's not remote code execution, it's the same flavor of "out of bounds read through speculation" as previous vulnerabilities. It's terrifying because they have a working proof of concept from untrusted JS in Safari,
122.
by omcnoe 2y ago
Serious answer, don't use Safari. Use a browser that properly separates webpages into isolated processes so that this kind of cross-site read is not possible.
123.
by omcnoe 2y ago
Their SLAP demo provides a great example of how defence-in-depth can make/break the viability of an exploit. That terrifying Safari demo is possible because Safari fails to isolate new windows in individual processes when calling `wind
124.
by omcnoe 2y ago
Interesting blog post from the creators with more details about the model: https://oasis-model.github.io Interactive demo: https://oasis.decart.ai/
125.
by omcnoe 2y ago
CUDA has first mover advantage, and provides a simpler higher level compute API for library maintainers compared to Vulkan.
126.
by omcnoe 2y ago
I've never understood why they have such a fractured approach to software:hardware support. I remember reading and writing comments about this on hn nearly a decade ago now. It's a long time to keep making the same mistake. They h
127.
by omcnoe 2y ago
Supermicro stock is down 40% from the publishing of the report, hardly a damp squib.
128.
by omcnoe 2y ago
As a daily user of F# I'm not sold on this suggested alternative. It seems to be trying to make it as easy as possible to make the Result type behave like exception handling, but I think there are some key downsides to the approach. Fi
129.
by omcnoe 2y ago
There are two concerns here. First, that Spotify doesn't make clear when a track is produced by a Spotify "ghost artist". And second, Spotify is in an unfair position as both the controller of the marketplace/platform, a
130.
by omcnoe 2y ago
There are a lot of useful network monitoring tools that can analyze HTTP response codes out of the box. They can't do this for your custom application error format. You don't have to go crazy with it, but supporting at least 200&#
131.
by omcnoe 2y ago
Biggest disappointment with Apple Intelligence is that it doesn't seem to be able to do anything with the apps I actually use. Can't say "find this email" because I am using the gmail app instead of Apple's inbuilt
132.
by omcnoe 2y ago
Yeah there were old dedicated sound cards with support for spatial audio, and they were killed. But CPU's also just got really really fast in the meantime. You don't need dedicated hardware for spatial audio processing, it's
133.
by omcnoe 2y ago
They did a good job in the sense that they provide the minimum neccessary baseline to run a graphical Windows environment without additional hardware. The attitude that it's a good job because it satisfied most of their current custome
134.
by omcnoe 2y ago
I don't really like it? Adding a human readable timezone string in addition to the existing numerical offset is just creating opportunities for inconsistencies between the numerical and string values. Now there is extra special syntax
135.
by omcnoe 2y ago
The tone is part of the message. In this article he describes the kind of strawman engineers he is disagreeing with as egotistical fools who believe “stupid” things. Elsewhere he’s writing oaths for programmers that say you should only buil
136.
by omcnoe 2y ago
I think the problem I have with Bob is that he doesn’t say "try it this way". He says “you must do it this way, and if you don’t do it this way you are a disgrace to the profession”. Its obnoxious.
137.
by omcnoe 2y ago
I disagree with the idea that “The start-up phase is not different” and that engineers should follow the same set of good engineering principles regardless of company age. It’s just not true. Anyone who has worked in industry has experience
138.
by omcnoe 2y ago
It's probably time to stop recommending Clean Code: https://qntm.org/clean I don’t want to be a hater but a lot of “Uncle Bob’s” advice just doesn’t seem very good, this article included. Robert has had a long and succ
139.
by omcnoe 2y ago
If I remember correctly GitHub CI is pretty much a straight port of Microsoft’s existing Azure DevOps CI, done pretty soon after the acquisition. The rest of Azure DevOps UX is kinda insane so it’s no surprise the CI is a bit of a pain too.