tatersolid

6 ms·

31.
by tatersolid 5mo ago
Because “Page-cache write into any readable file” is a memory safety bug? All of these recent Linux LPEs are memory safety issues.
32.
by tatersolid 5mo ago
Bitcoin has no dispute/chargeback mechanism in case of error or fraud. That inherent unsafety trumps just about all other safety concerns for a practical payment network.
33.
by tatersolid 6mo ago
Jira is justifiably derided, but Bamboo was truly Atlassian’s entry into the worst software of all time derby. Basically a random event generator masquerading as a CI/CD system. Not sure what the appeal is for Anthropic.
34.
Tired of waiting for your EV to charge up? Chinese company has a novel solution(npr.org)
1 points by tatersolid 6mo ago|0 comments
35.
by tatersolid 6mo ago
I’ve observed airlines will do this as well if they have maintenance or gate queues. They will sacrifice 1-2 flights (hours late or even cancelled) to keep many other flights near on-time. Fewer angry customers, better reported average “o
36.
by tatersolid 6mo ago
Concur. My kids and watched a “small” Falcon 9 launch from the mainland park nearest the pad at Cape Canaveral. The noise alone was astonishing; bring binoculars to see detail.
37.
by tatersolid 7mo ago
FIPS-140 allowed encryption using 3DES up until Jan 1 2024, and allowed certification of modules containing SHA-1 through the end of 2025. There is some transition-timeline nuance involved, but those examples are in general pretty horrible
38.
by tatersolid 7mo ago
The shortage of ATC staff dates back to the Clinton Administration. It’s just hard to attract people into a 5+ year training program for a very stressful job where you might get bounced near the end with no payout and no transferrable job s
39.
Feds Disrupt IoT Botnets Behind DDoS Attacks(krebsonsecurity.com)
3 points by tatersolid 7mo ago|0 comments
40.
by tatersolid 7mo ago
> Unlike in sports/stocks there are no rules / punishment for insider trading. Wouldn’t the good old-fashioned fraud laws present in basically every jurisdiction apply?
41.
SMTP on the Edge(dbushell.com)
1 points by tatersolid 7mo ago|0 comments
42.
by tatersolid 7mo ago
This article states higher per-capita horse deaths in 1900 New York City than automobile deaths in 2023. This stat does not account for the significant disease caused by all that manure mixing with water supplies. Its unclear if automobile
43.
by tatersolid 7mo ago
> Before the introduction of cars, “poor road engineering practices” wouldn’t result in those deaths. Death by adverse horse encounter was very common before the 1920s. Not sure how many of those deaths can be blamed on poor quality roa
44.
by tatersolid 7mo ago
Title has been modified by this submission. Actual title of article is Anonymous credentials: an illustrated primer .
45.
by tatersolid 8mo ago
This same scenario happened to me as well, and my “appeal” was instantly automatically denied.
46.
by tatersolid 8mo ago
[citation needed] Please stop with the hyperbole. Shit is bad enough; more fake news from any direction doesn’t help.
47.
Please Don't Feed the Scattered Lapsus ShinyHunters(krebsonsecurity.com)
2 points by tatersolid 8mo ago|0 comments
48.
by tatersolid 8mo ago
Perhaps it was actually an authorized drone? Here in the USA quad-copter drones are used to inspect powerlines and other infrastructure; I see them a few times per year in my area. I don’t see why they wouldn’t use drones to visually inspec
49.
MaliciousCorgi: AI Extensions send your code to China(koi.ai)
91 points by tatersolid 8mo ago|89 comments
50.
by tatersolid 9mo ago
Liquids are heavy. A large chunk of the retail cost in bottled drinks of all types is transport and distribution. The same is true of liquid detergents and soaps and anything else you buy that is mostly water - even fresh produce.
51.
by tatersolid 9mo ago
Where do you store high quality original images in case future edits or recompression with better codecs are needed? Generation loss is a thing. I view the high-quality originals as “source” and resized+optimized images as “compiled” binari
52.
Building Cryptographic Agility into Sigstore(blog.trailofbits.com)
2 points by tatersolid 9mo ago|0 comments
53.
by tatersolid 9mo ago
> you can just enable either scx_lavd or scx_bpfland from the kernel settings So Linux is still nowhere near an option for non technical users.
54.
by tatersolid 9mo ago
You’ve never had a concussion, gone under anesthesia, or gotten older? Memory based passwords are not durable; I personally forgot my Google account password after a surgery.
55.
by tatersolid 9mo ago
I grew up in a rural township 50 miles from a major city in the 1980s. We were never isolated and there were in fact a diverse set of peers my own age with interests and heritage all across the spectrum. Yes there were a few racists or reli
56.
by tatersolid 9mo ago
> I know other people like reading LLM output. I haven’t met any of these people; I’m sure some may exist but does anyone actually “like” rather than “tolerate” LLM writing? Anybody have a link to a decent study or survey on this area?
57.
by tatersolid 9mo ago
> What is the FIPS version of wireguard? IPsec or TLS-based overlays which use AES encryption and NIST-approved ECC curves or (gasp) RSA for key exchange and authentication. They generally suck in comparison with wireguard, which is a cl
58.
by tatersolid 9mo ago
> AWS designs and implements their foundational services holistically. I’d say they implement their services circularly . The outage-inducing circular dependency between Dynamo and Route53 is not a “holistic” design.
59.
by tatersolid 9mo ago
SendGrid and their competitors are already the very definition of “sender pays” for email. “Sender pays” is how they make money. This isn’t a problem of monetary incentives. The problem is that companies get their SendGrid credentials compr
60.
by tatersolid 9mo ago
It never was FIPS-approved and likely will never be. The wireguard protocol used by Tailscale uses ChaCha20 for encryption which is not FIPS approved.

More ›