Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ptx
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
18 ms
·
331.
▲
by
ptx
2y ago
I'm surprised that Ousterhout doesn't point out the huge problem introduced with the PrimeGenerator3 refactor: It stores state in static (!) fields, so it's completely unusable in the presence of threads, unless you add a glo
332.
▲
by
ptx
2y ago
My bank publishes a Play Store link to their app on their website. If I assume that Google would not maliciously hijack their app ID, I can assume that the app is authentic. Expecting my bank to listen to suggestions about publishing hashes
333.
▲
by
ptx
2y ago
UB says at one point: > Would that we had such a crystal ball And then it seems like he actually found his crystal ball, because in the very next question he refers to things that have not yet occurred in the conversation: > interp
334.
▲
by
ptx
2y ago
On the safety point, how would I ensure that e.g. the APK for my banking app is authentic and unmodified?
335.
▲
by
ptx
2y ago
What specifically is going on right now in AI that's not based on "hallucinogenic LLM prompts"?
336.
▲
by
ptx
2y ago
Newer devices apparently use secure boot and prevent modding the firmware, causing the developers of the Inkbox/Quill alternative distro to abandon the entire project: https://github.com/Quill-OS/quill
337.
▲
by
ptx
2y ago
Maybe as a concession to us older folks you could make the pagedown key instantly flip to the next page (without changing the position of the current page relative to the viewport)? Then the site could be used like a PDF slide deck in "
338.
▲
by
ptx
2y ago
What happens if you remove its access to the Internet entirely? Does it refuse to work? An offline VM seems like the only safe way to run modern proprietary software.
339.
▲
by
ptx
2y ago
In the collaboration section, the guide doesn't mention feature branches at all. Isn't that a very common way of working? Contrasting it to the "Everyone Uses Their Own Branch" approach described in the guide might be in
340.
▲
by
ptx
2y ago
So where is the data actually stored if it "never touches the disk"? Is it some UEFI or BIOS thing?
341.
▲
by
ptx
2y ago
The article is paywalled, except for the introduction, so I guess we'll never know what the author thinks is left to believe in.
342.
▲
by
ptx
2y ago
The example repo is a little confusing to me, since it seems to use client-side JS to demonstrate that it doesn't need client-side JS: "It bootstraps a service worker and [...] No client-side JavaScript!" But I guess the poin
343.
▲
by
ptx
2y ago
What about using distro packages? That would insulate you from upstream suddenly turning malicious. I'm not sure if Debian's packages are kept up to date with security patches, though. The latest changes to the wordpress package[0
344.
▲
by
ptx
2y ago
Maybe they expect the flash wear out after 2 years, since they're using it for swap.
345.
▲
by
ptx
2y ago
Well, did you check if the AI's claims were correct? Does PR 1234 actually exist? Did it actually modify the retry logic? Does the token refresh logic actually share patterns with the notification service? Was the notification service
346.
▲
by
ptx
2y ago
Microsoft didn't buy it from Spyglass, they licensed it and agreed to pay royalties per copy. Then they gave it away for free to avoid paying royalties [0] while illegally sabotaging Netscape's business at the same time. [0] http
347.
▲
by
ptx
2y ago
What I was trying to say, I guess, is that the additional serialization overhead can't be parallelized, which means that parallelization with multiprocessing doesn't help much in some cases where GIL-free threading would.
348.
▲
by
ptx
2y ago
Using multiprocessing adds some overhead for because of serialization, so it's slower than it would be to just hand off the Python objects directly to the workers (as you can with threads) because the process doing the parsing also has
349.
▲
JEP 483: Ahead-of-Time Class Loading and Linking
(openjdk.org)
148 points
by
ptx
2y ago
|
38 comments
350.
▲
by
ptx
2y ago
The license seems a bit iffy. The blog says it's "open source", but the license is a modified version of the SSPL, which is not recognized as an open source license in the customary sense of the term. They also don't say
351.
▲
by
ptx
2y ago
Maybe we need to introduce the term "value safety" to complement "type safety". If a language is merely type-safe, then it might be OK to silently replace a value with a different one of the same type, sure, fine. Who ca
352.
▲
by
ptx
2y ago
In response to the correction: The paper says that "we propose a Soundscape-to-Image Diffusion model, a generative Artificial Intelligence (AI) model supported by Large Language Models (LLMs)" so there's an LLM involved somew
353.
▲
by
ptx
2y ago
It certainly looks like some amount of image matching is going on. Can the model really hear the white/green sign to the left in the first example in figure 3? Can it hear the green sign to the right and red things to the left in the l
354.
▲
by
ptx
2y ago
This is not my area of expertise, but if I understand the article correctly, they created a model that matches pre-existing audio clips to pre-existing images. But instead of returning the matching image, the LLM generates a distorted fake
355.
▲
by
ptx
2y ago
Yeah, that had me confused for a bit. And you would never use "charset=wtf-8" (as in the title for this page) because the spec says: "Any WTF-8 data must be converted to a Unicode encoding at the system’s boundary before be
356.
▲
by
ptx
2y ago
> Gladwell gets a lot of flack, but he's told some interesting stories. Isn't the flack he's getting due to exactly that, that his stories would be interesting if true but often aren't?
357.
▲
by
ptx
2y ago
Are there any GUI clients based on those libraries? Wikipedia's list[0] doesn't include any. But it does include, I see now, exactly what I was asking for – apparently there's an actively developed fork of Azureus called Bigl
358.
▲
by
ptx
2y ago
Although it wasn't the cause of this particular vulnerability, this kind of application, which communicates with large numbers of potentially malicious nodes, seems like it would really benefit from memory safety, but all the current i
359.
▲
by
ptx
2y ago
Since the writer never wrote the remaining bytes to the pipe, but only to its own memory buffer, and that memory buffer is destroyed when writer exits, "disappearing bytes" seems accurate. The bytes buffered in the memory of the w
360.
▲
by
ptx
2y ago
> This is completely allowed under the apache open source license. Which part? Removing attribution is definitely not allowed – see section 4 c of the Apache license. Distributing under a different license might be allowed if the new l
More ›