pona-a

9 ms·

121.
by pona-a 9mo ago
The promise of the original definition of vibe coding was you treating code as disposable, no more valuable than LLVM build cache. You aren't supposed to make corrections, review it, or whatever.
122.
by pona-a 10mo ago
Auto corrected employer?
123.
by pona-a 10mo ago
Because many admins are horrible and disable TOTP for "security". My uni does it and I've had use the only alternative option, cell call, and rigged Tasker to automatically answered and play the needed tone so I don't ne
124.
by pona-a 10mo ago
See my sibling comment. (TL;DR: they banned most cryptocurrency projects with 2 months advance notice)
125.
by pona-a 10mo ago
I think Sourcehut is the more portable of Git forges. Everything is stored in standard formats, its workflow isn't anything bespoke but just a good automation for git send-email, and I believe the source code should be all published. I
126.
by pona-a 10mo ago
I think srchut is one solution. Its email workflow does successfully deter less experienced/curious people, for better or worse, and it still has some project discovery bit not social signals like stars.
127.
by pona-a 10mo ago
There are some Bitcoin puzzles or old wallets that give some plausible deniability.
128.
by pona-a 10mo ago
> Generative AI for source code learns from developers - who mostly publish their source with licenses that allow this. I always believed GPL allowed LLM training, but only if the counterparty fulfills its conditions: attribution (even i
129.
by pona-a 10mo ago
A passkey is always one per site. Emails tend to be naturally reused, unless the visitor uses a paid aliasing service (plus trick is trivial to canonize, having a dozen mailboxes on a self-hosted email still associates them with each other,
130.
by pona-a 10mo ago
How do passkeys make users identifiable beyond being a random token? I recall FIDO shared hardware key serial numbers with websites, but at least on Firefox, it prompts you to deny it.
131.
by pona-a 10mo ago
Is there? The government apparatus that's meant to investigate these crimes is the same one elected by the mob. If you find yourself a member of any group a campaign can mobilize the mob against, that entire investigatory apparatus can
132.
by pona-a 10mo ago
> in-house _modified_ _mainstream_ encryption algorithm Why would a company without cryptographic expertise modifying an existing algorithm without any particular goal in mind just to be different, produce something more secure than the
133.
by pona-a 10mo ago
> You're very naive if you believe there is no way for the ISP to view your traffic just because you're over an https connection. You seem to be under an impression an ISP's "Intercept Access Point" is somehow di
134.
by pona-a 10mo ago
Do you understand what transit encryption is? The point of TLS is the ISP can't inspect the traffic. They can of course refuse to carry all encrypted traffic, but 1) stenography exists, so have fun writing DPI filters to detect suspici
135.
by pona-a 10mo ago
Do you know what is the SOTA rule-based MT? I used to be deep into symbolics but couldn't find much in the way of contemporary rule based NLP.
136.
by pona-a 10mo ago
Nothing about this needed to be a browser. It exists because getting the web dependent on Google products wasn't enough — ads, single sign-on, video hosting, AMP, search. They want to supplant it entirely, transforming the user experie
137.
by pona-a 11mo ago
How much of it is cryptography? The only notable cryptographic locks are just the TPM-backed Widevine and the infamous Play Integrity, both rarely required due to how many older devices that would lock out. There's no crypto, as far as
138.
by pona-a 11mo ago
Bash has a built-in RANDOM. while true; do kill -9 $RANDOM sleep 5 done Or to kill running running PIDs each time while true; do rnd=$(ps -e -o pid= | shuf -n 1) kill -9 $rnd sleep 5 done
139.
by pona-a 11mo ago
OTR still has static identities, with DH used to ratchet the ephemeral keys. The comparison would be more like Signal ditching Safety Numbers and Registration Lock for hourly SMS verification of new independent keys with no successor signin
140.
by pona-a 11mo ago
The point of cryptographic identity is, unless the primitives were fundamentally flawed, there be no way to recover it without the key material. Otherwise it's just another means of access control, like say a passkey or an ssh key, whi
141.
by pona-a 11mo ago
It was a more general remark about decentralized identity. I can't say if the average social media user wants or needs this kind of control over their identity, but I'd much rather have say my DNS tied to a cryptographic credentia
142.
by pona-a 11mo ago
So just keep a passphrase encrypted backup offsite? Just because the tech doesn't do this contingency planning for you doesn't mean it's impossible.
143.
by pona-a 11mo ago
I'm on Migadu. They are quite cheap, offer a student discount, support multiple domains, offer a very neat snappy UI, and have an extremely responsive support.
144.
Russia deploys "age verification" via government-run messenger(twitter.com)
2 points by pona-a 11mo ago|0 comments
145.
Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users(arxiv.org)
5 points by pona-a 11mo ago|0 comments
146.
by pona-a 11mo ago
You've prompted it to play simulated democracy. Overwhelmingly the kind of person role-playing as a state on the internet will be a civically-minded liberal. So the language model trained to mimic webtext recalled this pattern. If you&
147.
by pona-a 11mo ago
How is it different to box64? I couldn't really find much online comparing these two except a brench by box64 themselves.
148.
by pona-a 11mo ago
Only two of these were actual malicious commits. Two others were malware inserted into the repositories (if Twitter could be thought of as a meta-repo), which is bad but not on the same scale.
149.
by pona-a 11mo ago
Our national transit agency is apparently a customer. The departure tables are borked, showing incorrect data, the route map stopped updating, the website and route planner are down, and the API returns garbage. Despite everything, the mana
150.
by pona-a 11mo ago
> Calling it a rhetorical exercise is… well sure. It was a rhetorical exercise - I mirrored your exact wording to make that clear. > Disingenuousness is a high bar for the argument you formulated... I misunderstood your objection. I t

More ›