theamk

11 ms·

181.
by theamk 5mo ago
Unless the service accepts Lua code from the internet (and that would be a completely insane thing), the CVE-2014-5461 will not apply. And while I have not reviewed every Lua CVE, I bet most (all?) of then require a specifically crafted cod
182.
by theamk 5mo ago
That sounds very harsh... looking at LinkedIn, the author in the Vietnam. In the US the probation is super-rare, I don't think I have ever head of this. If a person is hired, there is normally a whole procedure to fire them, and it wil
183.
by theamk 6mo ago
That sounds completely useless. Who needs a standard that is not actually standardizing anything? If you are willing to design a board with with 8p8c connector, identification resistor, and protection parts, then you might as well put RS-23
184.
by theamk 6mo ago
on Aliexpress, Julet M6 pigtail pair is $2.99, while USB-TTL breakout (with female USB-C connector) is $1.40 - even for nice CP2102 with unique serial number. If you have a portable device which needs serial connector, don't bother wit
185.
by theamk 6mo ago
and it seems Google wants to support people like you! That entire QR barcode thing is so that you can browse the web on your laptop/desktop, and _still_ rely on smart phone's attestation, no mobile browser needed.
186.
by theamk 6mo ago
This seems to be some sort of PHP upload/download tool, together with its own custom protocol and custom client. But why? If you have server access, use it directly. There are plenty of programs which can sync over SCP/SFTP/F
187.
by theamk 6mo ago
The number is "approximately 16 gigawatts" 23 atomic bombs per day does not really tell me much. Both boxer's punch and a 9mm bullet have about 450 J of energy, but the effects are very different. A better comparison would be
188.
by theamk 6mo ago
Do you install system-wide software at all? How do you configure it? That's my main reason to use "sudo" on the desktop. I suppose I could install every piece of software locally, either from source or via flatpak, but this i
189.
by theamk 6mo ago
Note that capabilities would not help for those bugs we are discussing today. Those exploits are in kernel, and the userspace is only calling the normal, allowed calls. Removing global open()/listen()/etc.. with capability-based v
190.
by theamk 6mo ago
So they use LLM to evaluate LLMs: with LLM writing the questions, another LLM writing the country-specific answers, and yet another LLM getting the country from an answer. The only manual steps seem to be "manually reviewed [questions]
191.
by theamk 6mo ago
> The issue is that you were /being followed/. The issue is someone paying attention to me specifically. Imagine instead of hiring guy to follow you, someone hires a guy to go through your trash. Or someone hires a guy to talk
192.
by theamk 6mo ago
3c509 network card - I used to have long time ago....
193.
by theamk 6mo ago
Note this uses DJGPP, which switches processor to 32 bit mode via DPMI. You won't get old-school experience of segmented memory, near pointers and 64KB limits everywhere.
194.
by theamk 6mo ago
Service accounts are great! I just wish instead of having a password which gets shared around via 1password, there were a clear permission list ("this is a service account.. "real" users X, Y, X can login as it") Seems l
195.
by theamk 6mo ago
The question is how to tell which code is unsafe. In some languages it is easier, in some languages it's much harder. For example in C and in C++, every line is potentially unsafe, so you have to verify the entire program very, very ca
196.
by theamk 6mo ago
> As soon as you change it from "Meta" to "some guy named Mark". There is a huge difference between those. If someone hires a PI to follow me, they are spending like $10000/week on that. Which means that their ex
197.
by theamk 6mo ago
This is a teaser for a real blog post : https://buttondown.com/blog/x400-vs-smtp-email the URL should probably be updated to it?
198.
by theamk 6mo ago
> Another way to think about it is that if a god-like infinitely capable being took control of all our online digital systems including I donno Teslas, factory automation, power grid, any form of connected robot in the world, nuclear we
199.
by theamk 6mo ago
reminds me of "reverse centaur"
200.
by theamk 6mo ago
You still have to review LLM results. But LLMs let you skip all the boring parts - setting up harness, writing some initial inputs, adding asserts for every output. And then _you_ get to do actually important stuff, like ensuring square has
201.
by theamk 6mo ago
No matter what OpenAI or Nvidia says, they cannot force the developers of some company to use AI. They simply lack power to do this directly (with a very few exceptions, like their subcontractors) What they can do, however, is they can run
202.
by theamk 6mo ago
That "etc" in "robots, factories, etc" is doing a lot of work here. Factories, even fully robotic ones, heavily rely on humans to set up and maintain them. Moreover, the safety culture means there are tons of "disab
203.
by theamk 6mo ago
> I never send my car to the annual car check, which has saved me an enormous amount of money. I only see a mechanic when there is something wrong with my car or for simple issues such as changing oil. Oh man, let's hope I am not ne
204.
by theamk 6mo ago
It's annoying that that entire article does not actually show the actual connector Here is a [2022] article with much better pictures: https://www.pcworld.com/article/693366/dell-defends-its-cont... Mechanica
205.
by theamk 6mo ago
2024 discussion https://news.ycombinator.com/item?id=39577599
206.
by theamk 6mo ago
A third-party security service got hacked, and then hackers used that to collect highly sensitive information from that service's user. To fix this, let's add another third-party security service and give it all the sensitive info
207.
by theamk 6mo ago
That's how life generally works. If your friend tells you, "I went to that new movie yesterday. It was very boring, I fell asleep midway." - then you either listen to his advice or don't. You don't ask your friend i
208.
by theamk 7mo ago
Not "ANY" kind of software, only the software that handles untrusted data in a non-trivial way. A lot of software, like local tools, does not.
209.
by theamk 7mo ago
> According to Anthropic, Mythos Preview successfully generates a working exploit for Firefox's JS shell in 72.4% of trials Why are AI people so dramatic? Ok, there is yet another JS sandbox escape - not the first one, not the last
210.
by theamk 7mo ago
You've read the post, right? Especially this part: > It is why I paid for your app... this is about closed-source, paid software - no PRs possible there.

More ›