tom_

7 ms·

121.
by tom_ 4mo ago
> A victim only has to run ffmpeg -i rtsp://attacker/stream, the most ordinary command imaginable What about "ls"?
122.
by tom_ 4mo ago
Many kinds of double negative are acceptable in many English dialects, and are interpreted as emphasis. The negatives add, rather than multiply. (Though I admit I myself don't speak such a dialect, hence the equivocation.)
123.
by tom_ 4mo ago
That could be true, but I don't think I'd bet on it myself.
124.
by tom_ 4mo ago
This question is answered by the post? There is reportedly actually no way of stopping it happen. Perhaps the poster had a brain fart while typing it. Maybe they speak a different dialect of English from you.
125.
by tom_ 4mo ago
He's got subscribers. Maybe the attitude is one he's found plays well with them. I find it quite refreshing in some ways. Lots of people, when they start complaining about this or that aspect of this AI stuff, are wont to add in a
126.
by tom_ 4mo ago
It can affect shell subprocess startup time as well, which, depending on your setup and the tools you use, might be worth optimising for. I don't remember when I did it, but it looks like I must have gone through this at some point (ma
127.
by tom_ 4mo ago
Depends on the system. Each thing did its own thing at the time. 8-bit Acorn systems did work kind of roughly as you describe. Handwaving a bit: there was no shell, but there was an OS call roughly corresponding to system(3), and add-on ROM
128.
by tom_ 4mo ago
I just really hate talking to the computer in human language.
129.
by tom_ 4mo ago
AI multiplied by Linux overcommit. What times we live in! (My own view: 10.8 GB is nothing these days. Your sprintf buffers are probably larger than that. (And if they aren't: they should be. That, or you should start using snprintf...
130.
by tom_ 4mo ago
Very true. Now that we have AI, Bitcoin is irrelevant.
131.
by tom_ 4mo ago
This original author is mentioned in the second sentence of the linked article, and then again in the third sentence, along with a link to the original story.
132.
by tom_ 4mo ago
I've generally been given additional decent-performance storage every year or two when working in video games, fairly reliably the case since 2000, seemingly regardless of company size. Somehow each new project would always require yet
133.
by tom_ 4mo ago
I don't recall being promised a black box. Are we certain llms didn't write this article and just came up with one of those It's Not Whatever-random-thing pithy zinger kind of things that they're prone to?
134.
by tom_ 4mo ago
Standard CRT TV refresh rate in the UK. Pretty much all home computers here produced 50 Hz output, the goal being that they could be connected to a TV, until the PC started to eat that sector in the early 1990s. Games consoles supported 50
135.
by tom_ 4mo ago
"Quietly". Also, the first paragraph. If this wasn't actually 100% LLM generated, one has almost certainly been used to imbue it with the flavour.
136.
by tom_ 4mo ago
We are exhorted not to comment on the voting in general: https://news.ycombinator.com/newsguidelines.html - of course, if you're urged not to comment on the voting, would commenting on commenting on the voting be any b
137.
by tom_ 4mo ago
I'm not disagreeing about the slop, which is a monumental waste of everybody's time, for exactly the reasons discussed - which is why I quite specifically did not quibble about that aspect. I thought it would be clear that I was o
138.
by tom_ 4mo ago
Moaning about downvotes and Things These Days is tedious and your post would be improved by the absence of it.
139.
by tom_ 4mo ago
I'm also pretty certain it did, and actually that VC++5 (that I'd used as a student) didn't. I'm less confident about go to definition and stuff, but I think that was all part and parcel of the same thing, so VC++6 had i
140.
by tom_ 4mo ago
Can't remember when I first heard it, but I searched my email and got a pile of results from 2012 and 2009. It's possible there's earlier in there somewhere but 2009 was a busy year so I got bored of clicking the "more r
141.
by tom_ 4mo ago
I left my Mac Studio running at 100% CPU on all cores for 14 hours, and the case ended up noticeably warm to the touch. It is possible!
142.
by tom_ 5mo ago
See also, perhaps: https://news.ycombinator.com/item?id=48273597
143.
by tom_ 5mo ago
Tough crowd, but I for one hate this stuff too and thank you for the heads up. "Engraved invitation to chaos", fucking hell. I think I just lost 3 IQ points. Who's the target audience here? Everything I needed to know about p
144.
by tom_ 5mo ago
> The affected releases include iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Where does this quote come from? I can't see it in https://support.apple.com/en-us/1
145.
by tom_ 5mo ago
Because it's const void *pa, you don't need the cast. A void * pointer will convert to any other kind of pointer. Now you only need to mention the type once. (I forget the const-related rules, but since the consts match in this ca
146.
by tom_ 5mo ago
Is that even the fix though? The problem sizeof*groups expression has already been removed by that point. This fixes something but it's not obviously related to the vulnerability description. git log -S suggests 4cd93df95e697942adf0ff0
147.
by tom_ 5mo ago
What if there is no long game? Just people at Google optimising for their current KPIs.
148.
by tom_ 5mo ago
Ahh, that's a good point, and I actually hadn't thought of that angle! I was thinking of it purely from the point of view of the attackers using LLMs to generate interesting new exploits, with a side helping of letting myself get
149.
by tom_ 5mo ago
Apologies to all - I am British. The phrase "non-zero" does cover every case other than zero, but the intent is that it covers some cases more than others. What I'm trying to say is: yes. My intent was just to push back on th
150.
by tom_ 5mo ago
It's more likely that it isn't coincidental at all: software development-oriented LLMs became a lot better towards the end of 2025, and so there's a non-zero chance that people are using them to find new security exploits. (P

More ›