theamk

9 ms·

121.
by theamk 3mo ago
2nd paragraph of blogpost: > A hash of all files is checked against known hashes on sum.golang.org to prevent tags from being replaced, and it uses a proxy to prevent repos from being left-pad’d. there is no need for 3rd party hosts to s
122.
by theamk 3mo ago
Super naive tweet, there is not even a picture of the drive inside, not an output from smartctl or something. Seagate makes multiple lines of of HDD drives - which one is inside? Is it the same line of drives that's in Seagate-branded
123.
by theamk 3mo ago
LoRa is 3-4 kilobytes/second, slower than a dial-up modem. And there are duty cycle limits too. This is ideal for text messages and occasional telemetry. But 'full-on SSH session'? or even worse, 'Git history, issue trac
124.
by theamk 3mo ago
> There are not that many novel things to do, I am currently work on embedded / low-level / devtools and there are tons of novel things to do. Perhaps the "programming" skills are not needed as much, but demand for &q
125.
by theamk 3mo ago
Nah, TFA states it very well: > The jobs disappearing are the ones where the work product is code written to spec. The jobs growing are the ones where the work product is judgment about what code should exist. AI is happy to follow instr
126.
by theamk 4mo ago
hug of death. Archive: https://archive.is/jaw2F
127.
by theamk 4mo ago
Not really, bluetooth/wifi detectors are absolutely a thing, and emissions from camera in glasses are easily detectable by the right equipment. This equipment is not very common today, but if the smart glasses become popular, then univ
128.
by theamk 4mo ago
I was nodding along until that part: > Turkstra said he’ll still use the AI detection tool going forward. That's crazy! AI detection tools are notably unreliable, and even if they had only 1% false positive rate (I am sure it's
129.
by theamk 4mo ago
Interacting with durable data storage is actually pretty common. Perl is modern (-ish? Definitely modern compared to MUMPS) and had "tie" for database access forever [0] Python's dbm interface also looks like a regular dict [
130.
by theamk 4mo ago
https://archive.is/lP1i5
131.
by theamk 4mo ago
- Linux-only app - "Target audience: Advanced users" - GUI only, no CLI something does not add up there
132.
by theamk 4mo ago
I had some "reverse classroom" classes back in college, and it was the best kind of class for me. Read the papers on your own time before class, and spend class discussing and in tests. It did, however, absolutely require everyone
133.
by theamk 4mo ago
The key word is "web", and all associated ecosystem - the place where local devices are transient, and everything is in the cloud. I personally have multiple regular PCs, sync the files around, do encrypted backups, and so on. I s
134.
by theamk 4mo ago
Yes, I am familiar with multiple solution that want to replace the web. They can solve all sorts of interesting problems, except one: how to get adoption. I have nothing against people exploring alternative networking systems, but let'
135.
by theamk 4mo ago
Is author new at the whole web thing? Yes, people trust remote web servers. Yes, if you link multiple apps to an identity server (be it atproto, google, or self-hosted OpenID server), and your identity server is compromised, attacker will b
136.
by theamk 4mo ago
Perhaps read the text? Literally the first paragraph: > They show students how to use tools known as humanizers and autotypers, which make it easier than ever to cheat. and later: > Autotypers slowly drip words and sentences into docu
137.
by theamk 4mo ago
Not true at all.. I know people who work strict 9-5 and are clearly A. And I was unlucky to have a coworker who worked extra long hours just to write huge amount of code which did not solve the task required and kept breaking prod too.
138.
by theamk 4mo ago
Makes sense, this question has nothing to do with programming languages. I don't have any special permissions on SO, but if I had, I'd close it too.
139.
by theamk 4mo ago
They key is multiple, competing companies. As long as they don't collude, if one company misbehaves, others will catch it.
140.
by theamk 4mo ago
DANE is entirely dependent on DNSSEC, and DNSSEC is, by design, under the government control, with all the bureaucratic mess and mistakes this implies. This would be pretty terrible if anyone actually cared about DNSSEC, but luckily for us,
141.
by theamk 4mo ago
This just leaves every single public Wifi network - which used to mess with traffic a lot
142.
by theamk 4mo ago
Maybe, but then can only do it once. Then they get caught, and their CA is distrusted. See Diginotar [0] for example. And things only gotten better since - we now have CT logs, and browsers require them, so any mis-issuance can be detected
143.
by theamk 4mo ago
I trust governments much less that a conglomerate of competing corporations. With all the problems with Web PKI, at least the bad actors are getting distrusted, and this provides a very strong enforcement on the rest. And Certificate Transp
144.
by theamk 4mo ago
If there is video and a text post, I think the text post is almost always better (except for the few rare cases where the text description is inadequate, like woodworking etc ...). The long videos where author just spends time talking are a
145.
by theamk 4mo ago
Makes sense, they are US company. I am surprised it took them that long.
146.
by theamk 4mo ago
I think a lot of older drivers (both filesystem and device) should move to userspace. There are no requirements for high performance for something like EFS, and fuse/libusb interfaces are significantly more stable that kernel internal
147.
by theamk 4mo ago
That's "integrated information Φ"? Did you know you can raise it using dramatically easier way: just run a matrix multiplication with reed-solomon decoder, as in the one used by CD and DVD players [0]. A matrix multiply seems
148.
by theamk 4mo ago
did author even look at the article, or was it just AI output without validation? The screenshots have broken X axis, and the hyperlinks are not highlighted.
149.
by theamk 4mo ago
This sounds good, but this requires that there is a way to store non-dangerous secrets. Security can't just say, "stop storing secrets in plaintext" if removing them will bring developers to halt. Sadly many security teams ar
150.
by theamk 4mo ago
Always nice to see more browsers! Interesting principles however... > No automated test suite — verify by running the browser. > No code comments beyond one header line per file

More ›