tux3

15 ms·

271.
by tux3 1y ago
Web Environment Integrity was so heavily criticized at the time that it made Google itself backtrack. The same Google that forged ahead with Manifest V3. There is no realistic way the German government could get websites to implement an eve
272.
by tux3 1y ago
That site has a list of shadow libraries, whether they are still operating, and where to find them.
273.
by tux3 1y ago
It is important to note that authors are not compensated when you buy access to an academic article in a journal. In fact, since the authors both do the work of creating the content and peer-reviewing submissions, they must also pay the jou
274.
by tux3 1y ago
>Like, trivially, it's an ASIC, so I can use it to simulate a von Neumann[*] machine No, that doesn't follow at all. An ASIC doesn't mean a general purpose CPU or FPGA. A chip that only knows how to do, say, video decoding
275.
by tux3 1y ago
That's actually a design parameter! The particles circulate in the ring in a series of bunches, and they're spaced apart so that bunches collide at 40MHz So the particles aren't colliding continously, they're injected an
276.
by tux3 1y ago
If you replace "security by obscurity" with "Kerckhoffs's principle", yes, absolutely! The problem with using regular everyday obscurity is that it usually has a small state space and makes for terrible security, bu
277.
by tux3 1y ago
This is a nice replication of the WinXP UI in JS (it is not a virtual machine running in your browser). https://docs.win32.run/ https://github.com/ducbao414/win32.run
278.
by tux3 1y ago
It's been a little while, but I believe at the time you'd get a CTAP/CBOR MakeCredentialRequest, the browser would ask you to confirm that you allow MS to see the make and model of your security key, and it would send the res
279.
by tux3 1y ago
Daala had some really good ideas, I only understand the coding tools at the level of a curious codec enthusiast, far from an expert, but it was really fascinating to follow its progress Actually, are Xiph people still involved in AVM? It se
280.
by tux3 1y ago
If all you want is to make a bot that can use passkeys automatically, add a transistor between your Yubikey's touch button and GND. When you turn the transistor on, the capacitive sensor is activated. Now the Yubikey is just an API you
281.
by tux3 1y ago
Microsoft Entra ID goes out of its way to enforce attestation for FIDO 2 keys. The protocol normally allows you to omit the attestation, but they worked around an extra call after a successful registration flow that sends you to an error pa
282.
by tux3 1y ago
The person on the phone will walk grandma through installing remote desktop, make gradma login to the account, show a fake Windows update picture fullscreen, and do whatever they like. It's not reasonable to remove all agency from user
283.
by tux3 1y ago
People here are missing the point of the solution described in the blog post. This isn't about reinventing tmux poorly. They're trying to keep their workflow without having a muxer in the middle that needs to understand and tran
284.
by tux3 1y ago
The GPU is initialized earlier, so that the screen turns on. The GPU driver can access main memory through the bus. If you let arbitrary code run before you start checking, you don't have a secure boot chain.
285.
by tux3 1y ago
Go in the BIOS and switch it off? Certainly. Just one problem: Modern consumer BIOS interfaces are graphical and your GPU is off.
286.
by tux3 1y ago
Huh? That's crazy, I've never been blocked on Firefox, which is much smaller. And packed with privacy addons.
287.
by tux3 1y ago
The obligatory related XKCD: https://xkcd.com/1172/
288.
by tux3 1y ago
Pull requests took their name from the git request-pull script (which actually predates Github by a couple years): https://github.com/git/git/commit/ab421d2c7886341c246544bc8d... It is called a pull request b
289.
by tux3 1y ago
Here it is extracted for you: https://play.rust-lang.org/?version=stable&mode=release&edit... https://github.com/rust-lang/rust/issues/107975#issuecomment...
290.
by tux3 1y ago
There is a widespread practice of LLMs training on another larger LLM's output. Including the competitor's.
291.
by tux3 1y ago
If you read the Github issue, this one was weaponized fairly straightforwardly by taking the difference between the two pointers. The difference is zero, but the compiler thinks it is non-zero because it thinks they are unequal. From there
292.
by tux3 1y ago
Well, this is what you might call sub-optimal news. It will not be easy to correct future misaligned AIs if just training them on the output of a previous LLM is enough to transfer its old set of preferences over through random-looking side
293.
by tux3 1y ago
Yes, boost is one of those that gave me the biggest trouble as well. I feel like we really need better toolchains in the first place. None of this intrinsically needs to be made complex, it's all a lack of proper support in the standar
294.
by tux3 1y ago
I think everything that you would want to do with an ET_STAT file is possible today, but it is a little off the beaten path, and the toolchain command line options today aren't as simple as for dynamic libraries (e.g. figuring out ho
295.
by tux3 1y ago
If you mean updating some dependency without recompiling the final binary, that's not possible with static linking. However the ELF format does support complex symbol resolution, even for static objects. You can have weak and optional
296.
by tux3 1y ago
This works, but scripting with the ar tool is annoying because it doesn't handle all the edge cases of the .a format. For instance if two libraries have a source file foo.c with the same name, you can end up with two foo.o, and when yo
297.
by tux3 1y ago
I actually wrote a tool a to fix exactly this asymmetry between dynamic libraries (a single object file) and static libraries (actually a bag of loose objects) I never really advertised it, but what it does is take all the objects inside yo
298.
by tux3 1y ago
Fun fact: With the advent of folios, struct page is starting to undergo some major changes, with the eventual goal of shrinking it into a single 64bit number. But not to worry, the unreadable mess of C unions is not going away. struct folio
299.
by tux3 1y ago
The study design does try to mitigate blinding issues and expectancy effects, but with half of the participants reporting past use of hallucinogens, this is not going to be very effective blinding. A majority of your low dose 1st group like
300.
by tux3 1y ago
If you're counting all instruction executing in parallel with the maximum on-paper IPC on all CPUs, accelerators, and GPUs, the number your get has no clear relation to RAM latency. It really is comparing apples and oranges. This scena

More ›