Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
weinzierl
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
61.
▲
by
weinzierl
2mo ago
You are shifting goalposts. Your claims were that "not getting insulted is a protected right in Germany that you generally lawfully defendable under the "Notwehr" laws." and that "you may hit someone who keeps in
62.
▲
by
weinzierl
2mo ago
Well, for arbitrary processes there is CRIU, but it has its own issues.
63.
▲
by
weinzierl
2mo ago
Yes, find an example that proofs that "not getting insulted is a protected right in Germany that you generally lawfully defendable under the "Notwehr" laws." , as you claim. Neither of your sources supports "you m
64.
▲
by
weinzierl
2mo ago
The knife vs gun is literally the example from legal education to teach that §32 StGB requires the mildest means available in the concrete situation.
65.
▲
by
weinzierl
2mo ago
§32 StGB requires "Erforderlichkeit" (necessity) AND "Gebotenheit" (appropriateness). The knife vs gun example is from legal education to teach that §32 StGB requires the mildest means available in the concrete situa
66.
▲
by
weinzierl
2mo ago
Only when threatened and self-defense has to be proportionate. If someone attacks you with a knife you would not be allowed to defend yourself with a firearm if you had one. This is very different from the law in Texas, where, from what I u
67.
▲
by
weinzierl
2mo ago
That is something that should be obvious to any developer who worked with a real QA-team or person. They just have a different mindset. The problem with contemporary software development is not only that often the majority of QA work is shi
68.
▲
by
weinzierl
2mo ago
Pascal TeX to the best of my knowledge never did it but the web2c version does. The description is a bit confusing because it can both dump only the warmed up interpreter image or the whole process, I think. "With the program undump,
69.
▲
by
weinzierl
2mo ago
Some early systems, like TeX and I believe some Lisps, took this to the extreme. Instead of patching, they loaded their config once and then dumped the configured process image to a file, which was used in subsequent invocations.
70.
▲
by
weinzierl
2mo ago
"But the reality is that almost no one actually cares about performance because compute is cheaper than expertise and labor, at least in the short haul." Doesn't have to stay that way, with hardware prices soaring and devel
71.
▲
by
weinzierl
2mo ago
I think the idea to use the environment is misguided in general. The environment was only ever good for things like GOMAXPROCS where you want a single point of truth for all processes on a machine but in a containerized world even that poin
72.
▲
by
weinzierl
2mo ago
Small is relative. I'm looking for models that I can with run around 100 MiB mark (RAM just for the weights) to demo what you can do with this little memory. I know of SmolLM 2 which in Q4 is borderline regarding the size and rather da
73.
▲
by
weinzierl
2mo ago
Because your AI is trying to be helpful and as we all know the way to hell is paved with good intentions. The canonical example is probably the agent that runs out of diskspace and starts deleting stuff outside its workspace which is obviou
74.
▲
by
weinzierl
2mo ago
The attack surface Linux offers is gigantic but your agent doesn't need most of it. We can live with an agent not being able to run a 20 year old Oracle version. That is why kernel shims like gVisor are interesting.
75.
▲
by
weinzierl
2mo ago
The radiation exposure caused by the flight is a known. Fraunhofer institute once had the calculator they made for Lufthansa (if I remember correctly) publicly available. You could enter flight numbers and it would aggregate your exposure.
76.
▲
by
weinzierl
2mo ago
What is even more worrying is that most do not even consider a VM necessary as sandbox solution. The hierarchy goes something like this: 0. guardrails 1. containers (=namespaces + cgroups) 2. userspace kernel shims like gVisor 3. virtual ma
77.
▲
Rust: The never type has been merged into nightly
(github.com)
3 points
by
weinzierl
2mo ago
|
0 comments
78.
▲
by
weinzierl
2mo ago
The language composition is interesting. The source is half Shell, a quarter Python, almost a fifth Typescript. Among the rest is 2.3% Rust and 1.3% Swift. If you wonder what the Rust is for: It is the Ratatui TUI.
79.
▲
by
weinzierl
2mo ago
The page has a nice little easter egg if you click "Dr. K" in the footer.
80.
▲
by
weinzierl
2mo ago
What are the best resources to learn how to build LLMs from scratch for 17 year olds? I have my opinion on this but I'd like to hear the HN opinion, I will just say one thing: If you are starting with little knowledge, like a 17 year o
81.
▲
Keycloak Unauthenticated Account Takeover
(ccb.belgium.be)
4 points
by
weinzierl
2mo ago
|
0 comments
82.
▲
by
weinzierl
2mo ago
At the risk of stating the obvious: It is funny because the game was awkwardly titled: "Sid Meier's Pirates!" and this phrase was all over the place.
83.
▲
by
weinzierl
2mo ago
Haha, same for me for the language. I grew up in southern Germany, far from the sea, and all the nautical language is just gibberish to me, no matter if in English or German. In the 90s, we had a pretty popular HipHop band from Hamburg (clo
84.
▲
by
weinzierl
2mo ago
If you want that you can always use vetted package repositories like Nexus. Many companies do.
85.
▲
by
weinzierl
2mo ago
Sandboxing just build.rs would only be be a minor inconvenience for the attacker, nothing more. The attacker can always as easily compromise the binary you build and as soon as you run it (e.g. in a test) you are owned. It would be a big p
86.
▲
by
weinzierl
2mo ago
Mozilla, Google and a couple of others are publishing their audits through cargo vet. There are also additional audits done by individuals you can use through cargo crev. Overall the number of audited crates is in the thousands and you will
87.
▲
by
weinzierl
2mo ago
Rich official standard library vs "import tons of libraries" are not the only two options. Java's standard library had arguably also been poor for a very long time and "import tons of libraries" just had not bee
88.
▲
by
weinzierl
2mo ago
Mitigation for what? Compromising the code that is then most likely run in a test instead of compromising a build script is just a very slight inconvenience for the attacker. I'm not particularly fond of arbitrary build scripts either,
89.
▲
by
weinzierl
2mo ago
Compromising the code that is then most likely run in a test instead of compromising a build script is just a very slight inconvenience for the attacker. I share the dislike for arbitrary build scripts but restricting them will not help the
90.
▲
The Expurgation of Maniac Mansion for the Nintendo Entertainment System
(crockford.com)
4 points
by
weinzierl
2mo ago
|
0 comments
More ›