worewood

4 ms·

1.
by worewood 9mo ago
There was a recent vulnerability, where researchers were able to extract information from an encrypted chat session from an LLM, by analyzing packet size/timings of the underlying SSL connection. A classic side-channel attack. Seems po
2.
by worewood 10mo ago
A badly programmed Kalman filter perhaps
3.
by worewood 11mo ago
They could've blocked just the comments, allowing at least read-only access to the site, instead of blocking it off entirely
4.
by worewood 11mo ago
If you run emulated Windows 98 in the browser with e.g. v86, it is faster to open the start menu on the emulated Windows 98 than on the real Windows 11 running it. Windows user experience really went downhill after 7.
5.
by worewood 11mo ago
The entire text reads like multiple AI-produced excerpts glued together
6.
by worewood 1y ago
In that case you issue a recall, which is the correct way of dealing with potentially fatal manufacturing defects.
7.
by worewood 1y ago
I think users wouldn't be so resistant to security updates of they were just that and not bundled with feature removal, unwanted new features, and other things. Or if they were properly done. Example: Intel and the plundervolt vulnerab
8.
by worewood 1y ago
Maybe just re-tuning the timing, if he's using high performance sticks. Because parts are hard to get by where I live, I usually stick 10+ years with a PC. With usage I found that I have to relax the timings a bit after some years.
9.
by worewood 1y ago
Encrypted Client Hello and DNS over HTTPS.
10.
by worewood 1y ago
My experience with academia is that most of this hard work is done by undergrads, and conception and management by professors; developers aren't hired to do this. So besides "going back to school", there's no way in for
11.
by worewood 1y ago
Except that driving at a speed significantly different from the surrounding traffic increases the risk of a crash.
12.
by worewood 1y ago
There is a tension, but it's between paying enough to developers to actually produce decent code or pay a 3rd-party to firewall the application.
13.
by worewood 1y ago
environmental "awareness" doesn't mean dog poo; environment-friendly will only be prioritized when it's cheaper to do so. That's why government subsidies and taxing are REQUIRED. The western world should have subsid
14.
by worewood 1y ago
That's why environmental "awareness" doesn't mean dog poo; environment-friendly will only be prioritized when it's cheaper to do so. That's why government subsidies and taxing are REQUIRED for the switch to mor
15.
by worewood 1y ago
I agree. That documentation really needs some love. But if you see the discussions on github issues about quadlet features a common theme is maintainers dismissing requests because "that shouldn't be done in production" or &q
16.
by worewood 1y ago
Running a very similar setup here, also have issues with networking. Pasta worked, but has bugs and replied UDP packets on the wrong ports. The pasta version from debian packages is too old. Also, I tried making the networking work but now
17.
by worewood 1y ago
Case in point: .NET's garbage collector which is a single 54k loc C++ file.
18.
by worewood 1y ago
I think an alternative to local root certs would be to use a public cert + dnsmasq on your LAN to resolve the requests to a local address.
19.
by worewood 1y ago
The "a guy texting while driving is gonna rear end someone, sue him and actually win" type.
20.
by worewood 2y ago
Seamonkey needs more love. The best one for me, does not try to be "modern" - keeps the interface unchanged and only updates real functionality.
21.
by worewood 2y ago
Only 5th and 6th to be believed. Every time a manufacturer says vague descriptions like "security" or "performance" fixes, be wary - they probably removing perfectly working functionality for "reasons". If it w
22.
by worewood 2y ago
It sounds bad, but the alternative is policy makers making decisions out of their arses, so maybe this really is a tool that can improve public management. Problem is that the owner of the AI service has power over the model and thus can in
23.
by worewood 2y ago
Besides what others said, realistically, the effort to support N versions is not O(n). I think it's something like O(log n), because code will largely be shared between versions - you're not doing a rewrite every release.
24.
by worewood 2y ago
Looks similar to what was Boeing and McDonnell Douglas. They even said McDonnell bought Boeing with Boeing's money. Looks like CA bought Broadcom with Broadcom's money
25.
by worewood 2y ago
It probably has a heuristic for it
26.
by worewood 2y ago
It's because this is standard practice since the early days - there's nothing newsworthy in this at all.
27.
by worewood 2y ago
Good. Shows that engineering is on the driver seat, not marketing.
28.
by worewood 2y ago
My 1070 is currently running with tape covering half of the PCIe pins so it works on x8 instead of x16. One day it stopped working. During troubleshooting it would work only on a 10 year old PC I had lying around. The difference? Despite be
29.
by worewood 2y ago
Probably the third-party solution offers functionality not available from Microsoft, for example integrating with other management software they may have, enabling automated blue-green scheme for applying updates, so they can accurately mea
30.
by worewood 2y ago
At least in my experience, when I've heard that the "mainframe is going to die", it's specifically referencing the IBM ecosystem - COBOL and friends. To me it looks like the author is grasping for straws when saying &quo

More ›