thayne

25 ms·

691.
by thayne 1y ago
Firefox and Safari also use the list. At least by default, I think you can turn it off in firefox. And on the whole, I think it is valuable to have _a_ list of known-unsafe sites. And note that Safe Browsing is a blocklist, not an allowlis
692.
by thayne 1y ago
Well, using the public suffix list _also_ isolates cookies and treats the subdomains as different sites, which may or may not be desirable. For example, if users are supposed to log in on the base account in order to access content on the s
693.
by thayne 1y ago
Looking through some of the links in this post, I there are actually two separate issues here: 1. Immich hosts user content on their domain. And should thus be on the public suffic list. 2. When users host an open source self hosted project
694.
by thayne 1y ago
> It involved an LLM reading a reddit comment or github comment and immediately executing. right, so you shouldn't give the LLM access to execute arbitrary commands without review.
695.
by thayne 1y ago
> more susceptible to jailbreak-type attacks that most people have come to expect to be handled by post training the keyword here is "more". The big models might not be quite as susceptible to them, but they are still susceptib
696.
by thayne 1y ago
I don't think the malicious compliance is "justified", but I do think it was predictable. What did the lawmakers think would happen?
697.
by thayne 1y ago
That just means the fork would also need to be AGPL licensed, and the owner of the fork wouldn't be able to also sell a proprietary version with additional "enterprise" features. And IMO that would be a good thing. I think it
698.
by thayne 1y ago
I'd say it's higher, because it makes a lot of sense that if you pay your employees more they are more likely to stay around, put in more effort, not steal merchandise, etc. Not to mention it probably increases the pool of prospec
699.
by thayne 1y ago
AFAIK, most of windows and OSX (and iOS) are in memory unsafe languages as well (c, c++, and objective c)
700.
by thayne 1y ago
Doesn't CHERI use additional bits to store the capabilities rather than masking existing bits in the pointer? But that can be problematic for any code that assumes that the size of pointers is the same as size_t/usize. I don'
701.
by thayne 1y ago
There are hints at in their documentation. For example ACM certs for cloudfront and KMS keys for route53 DNSSEC have to be in the us-east1 region.
702.
by thayne 1y ago
The article itself says the object was probably a weather balloon, not space debris, and the title of the article is now "United MAX Hit by Falling Object at 36,000 Feet". Maybe the title here should be updated?
703.
by thayne 1y ago
I guess they just have a big enough budget that losing millions of dollars of plane to a bird isn't a big deal?
704.
by thayne 1y ago
Journalists are generally pretty bad at covering any technical topic, unless the journalist has some specific training in that topic, which is rare.
705.
by thayne 1y ago
I have very little faith in the government to fix that problem. And even if the government did institute something like universal basic income, if all jobs were replaced, that would almost certainly mean a lower standard of living for the m
706.
by thayne 1y ago
> For instance, DHH and his fancy blog, are not 100% related or relatable to RubyCentral ousting long-term developers. It's related because it led to Sidekiq dropping their funding, which increased shopify's power over ruby cen
707.
by thayne 1y ago
At least it isn't a criminal offense to publish instructions on how to do it. And you can resell it or lend it out to a friend.
708.
by thayne 1y ago
> Amazon's Kindle Android app was really buggy and crashed a bunch This is one of my biggest problems with DRM. It restricts what software you can consume the media on. I bought a collection of books from Kobo without realizing it w
709.
by thayne 1y ago
The stormlight archive isn't a representative example because: - Brandon Sanderson's books are actually relatively inexpensive, despite their popularity - Brandon sanderson ebooks are available without DRM. Interestingly, this is
710.
by thayne 1y ago
Reverse engineer? Probably. As long as there aren't patents involved. And that is what the librephone project aims to do, from what I understand. But the binary blobs are protected by copyright, so you need a license to use them.
711.
by thayne 1y ago
In the first case, it often is optimized out. But the optimizer isn't perfect, and can't detect every case where it is unreachable. If you have the second case, I would much rather have a panic than undefined behavior. As mentione
712.
by thayne 1y ago
But then you need the write lock for all the databases (assuming your transaction involves writes).
713.
by thayne 1y ago
But does it matter if that control flow is unreachable? If the check never fails, it is logically equivalent to not having the check. If the code isn't "correct" and the panic is reached, then the equivalent c code would have
714.
by thayne 1y ago
There is a lot of misinformation in here. For one thing the verification doesn't just make a single http request, it makes several from many different nodes. There is a risk that your hosting provider MitMs the verification, but you ne
715.
by thayne 1y ago
Even in the US, it won't always work. If you moved in the past few years, the address on your ID will be wrong.
716.
by thayne 1y ago
The first paragraph of OP said > The automaker pushed out a telematics update for the Uconnect infotainment system that evidently wasn't ready
717.
by thayne 1y ago
Why does an OtA update even have the ability to brick the entire vehicle? The infotainment system should be completely isolated from the driving system.
718.
by thayne 1y ago
Kind of. But Apple makes it so hard to develop an engine for EU devices, that no browser makers are currently willing to do it.
719.
by thayne 1y ago
And what if I don't have anything lying around?
720.
by thayne 1y ago
I wish articles like this would include recommendations on how to choose hardware to run your self-hosted services on.

More ›