tomku

13 ms·

91.
by tomku 9y ago
You're exactly correct about the kind of analysis that was done. The code was analyzed, and the game was played frame-by-frame in an emulator to demonstrate perfect play. I believe some members of the speedrunning community also ran
92.
by tomku 9y ago
I took the course several years ago and finished it. It's focused on the basic concepts of compiler implementation with the example language (COOL) being pretty traditionally object-oriented. It's absolutely not a how-to course
93.
by tomku 9y ago
Mac .app bundles are folders, you can have both frameworks and .dylibs inside. Quod Libet, for example, has a whole bin/lib/libexec hierarchy inside its .app with shared Gtk libs, Python, etc.
94.
by tomku 9y ago
It's worth pointing out that without id's engine licensing business that depended on other companies NOT following the Carmack school of thought, it would've been harder to justify writing a new engine for every game.
95.
by tomku 9y ago
I'm sure you meant well, but the way you phrased your post made it sound more dismissive about something you didn't care about than helpful. I think that's a far more likely explanation for the downvotes than "HN becomi
96.
by tomku 9y ago
I don't mind subscriptions, but a key difference between O'Reilly's subscription model and Adobe/Jetbrains is that my Jetbrains and Adobe subscriptions (both of which I'm happy with!) get me access to the exact same
97.
by tomku 9y ago
Strongly recommend buying PragProg books directly from them rather than through Amazon. They update their books much more often than other publishers and (as you experienced) Amazon really drags their feet on pushing out those updates, eve
98.
by tomku 9y ago
I used to buy a lot of O'Reilly ebooks, always DRM-free directly from them. I thought they had a great business model and they published quite a few excellent books. They've slowly lost me as a customer over the past few years a
99.
by tomku 9y ago
That's a pattern that I've seen a lot in Javascript, where it's usually called a "mixin" and used as pseudo-inheritance. I'm not sure why you would do it in Python.
100.
by tomku 9y ago
I think you have the causality backwards. If someone's storing passwords in a text file on their desktop, they will probably copy/paste those passwords if the functionality is available. However, they're probably storing th
101.
by tomku 9y ago
Blocking pasting in a password confirmation input accomplishes nothing because you're already blocked from copying the contents of the first password input anyways. All it does is inconvenience people who use password managers.
102.
by tomku 9y ago
Pasting the password from an authoritative source like a password manager also eliminates that mistake, and works safely whether there's a password confirmation field or not. Even better if your password manager can generate a new pas
103.
by tomku 9y ago
Definitely something wrong with the installer's language selection, got a Japanese installer when my primary MacOS language is English. Fortunately the installed app seems to respect the language setting.
104.
by tomku 9y ago
Update, Intel has now confirmed that there's an issue: https://security-center.intel.com/advisory.aspx?intelid=INTE... They claim that it doesn't affect consumer CPUs, but that leaves a ton vulnerable. It's
105.
by tomku 9y ago
Yeah, I blew that prediction pretty badly. Congrats to SemiAccurate on the huge scoop!
106.
by tomku 9y ago
I'm glad that credible sources are now available. It's unfortunate that it took so long to confirm, but congrats to SemiAccurate on a massive scoop. Edit: On the previously-mentioned scale, this sounds like a solid 8 or 9 out of
107.
by tomku 9y ago
My prediction: At the end of June, Intel announces a fix for a minor non-RCE bug in the LAN code of Intel ME. SemiAccurate proudly and inaccurately announces that it confirms their previous reporting and adds it to the list of things to me
108.
by tomku 9y ago
...and if the article's claims aren't true, there wouldn't be any sources to confirm the claims at all. The evidence we've been presented with so far (no sources) is consistent with both possibilities. When you make a
109.
by tomku 9y ago
That is not a source that confirms SemiAccurate's claims, it's a nearly decade-old paper (~2008-2009) describing an attack against a completely different security feature. The "System Management Mode" described and atta
110.
by tomku 9y ago
That's harder in practice than you make it sound. Firmware updates for Intel ME are handled through OEMs, it's not a file that Intel publishes that an interested person can go to their website and download. The article claims th
111.
by tomku 9y ago
No, that's not how sources work. You don't get to use your assumption that the article is accurate to assert that it will eventually be proven accurate by other sources. That's circular reasoning.
112.
by tomku 9y ago
Believe it in proportion to the supporting evidence presented. At the moment, that's nothing except an appeal to the widespread belief that an Intel ME security flaw is inevitable.
113.
by tomku 9y ago
SemiAccurate isn't a security research firm, it's a tech news blog. There's basically no chance that they've discovered anything. If there's an exploit, they would've had to have heard about it from either a
114.
by tomku 9y ago
If Charlie was a security researcher and SemiAccurate was a well-regarded security firm, I would not expect details or cross-references or mentions on security lists. Charlie is not a security researcher, he's a journalist, and SemiAc
115.
by tomku 9y ago
Is there a better source for this than SemiAccurate? The article doesn't really have much beyond self-aggrandizement and "we can't tell you any details, but you're screwed". For something that could be anything fr
116.
by tomku 9y ago
There is no service that was shut down, the telecom company in question is now charging for traffic going to Wikimedia Foundation domains where before they did not. Edit to clarify: "Wikipedia Zero" is an initiative by the WMF to
117.
by tomku 10y ago
Totally agree, and I think that's what's going on with Angular. Bumping the major version for a set of modules also communicates that you really should be using 4.x of all these modules together rather than mixing and matching wi
118.
by tomku 10y ago
You've got it backwards. If you make a breaking change, semver requires you to bump the version number. There is absolutely nothing in the semver spec requiring you to make a breaking change when you bump the version number. The spec
119.
by tomku 10y ago
https://bartoszmilewski.com/2014/10/28/category-theory-for-p...
120.
by tomku 10y ago
And? Intel's $1,600 6950X loses to their own $170 i3-7350K in single-threaded benchmarks. When you pay extra for a CPU with more cores, you almost always get less single-threaded compute because of power/heat/design constra

More ›