xucheng

13 ms·

31.
Computer rendered kitchen and CEO are used to make Nvidia GTC 2021 keynote(blogs.nvidia.com)
2 points by xucheng 5y ago|0 comments
32.
by xucheng 5y ago
And if you then apply DLSS, you may even get the original image.
33.
CSAM Scanning and the Fourth Amendment(lawfareblog.com)
4 points by xucheng 5y ago|0 comments
34.
by xucheng 5y ago
To make things worse, NCMEC is not even a government agency but a non-profit lobby group. So there may lack normal government oversight to them.
35.
by xucheng 5y ago
While it is good that Apple seeks formal security analysis over its proposed system, there are some fundamental security assumptions baked in the system: - It assumes that the server would not tamper its dataset (i,e., the list of CSAM). So
36.
by xucheng 5y ago
This is a rather sinister interpretation. I think what Jobs means is that privacy is about asking for consent repeatedly. Whenever there is a new way to use user’s data, a permission should be requested.
37.
Steve Jobs on Privacy (2010) [video](youtube.com)
31 points by xucheng 5y ago|8 comments
38.
by xucheng 5y ago
For anyone is interested, Tom Scott has a great video about YouTube copyright system: https://youtu.be/1Jwo5qc78QU .
39.
by xucheng 5y ago
Performance aside, I am wondering what is the current state-of-the-art cryptography analysis over BLAKE3?
40.
by xucheng 5y ago
> The alert system works by using your device’s accelerometer to detect the initial, nondestructive P-wave. Your phone then sends a city-level location, which does not include zip code or street address, to Google’s earthquake detection
41.
Android’s earthquake warning system proved effective in the Philippines(9to5google.com)
1 points by xucheng 5y ago|1 comments
42.
Juror Criticizes DOJ for Charging Scientist with Hiding Ties to China(theintercept.com)
2 points by xucheng 5y ago|0 comments
43.
by xucheng 5y ago
https://youtu.be/HUMGc8hEkpc
44.
by xucheng 5y ago
At the core, DO NOT TRACK prevents Apps having access to the Advertising Identifier. So different Apps cannot aggregate their analytics data about the users. This vulnerability enables different Apps to communicate a super cookie for cross-
45.
by xucheng 5y ago
Given M1 is in iPad Pro now, I think there could will be Apps seriously exploiting this to circumvent Do No Track in iOS 14.5.
46.
by xucheng 5y ago
If I remembered correctly, this incident was actually widely reported in China when it broke out. It was cause by many iOS developers in China chose to download a counterfeit version of Xcode because the network connection from China to any
47.
by xucheng 5y ago
In order for this happens, we really need an unified earthquake early warning network in entire west coast connecting from BC, Canada all the way to Mexico. It seems that all the existing systems are only regional so far. At the same time,
48.
by xucheng 5y ago
You can just store the database in text format (e.g. csv) in the git and turn it to SQLite db when building the website.
49.
by xucheng 5y ago
You don't need OS to build a very precise clock for the purpose of exploiting timing attack. That's why SharedArrayBuffer[1] is disabled in all browsers. Moreover, not every side channel attack relies on timing attack. For interes
50.
by xucheng 5y ago
Alternatively, I think the research could be done in an isolated experiment environment among consented participants. For example, they could ask maintainers to review some set of patches outside the context of Linux kernel. They would then
51.
by xucheng 5y ago
In your example, `HEAD` is the server address, which is interpreted as a local file. `$(touch hello) git@github.com:torvalds/linux.git` is the command to be run in the remote (locally in this case). It will not connect to the server in
52.
by xucheng 5y ago
IMNAL. In addition to possibly cause the research paper retracted due to the ethical violation, I think there are potentially civil or even criminal liability here. The US law on hacking is known to be quite vague (see Aaron Swartz’s case f
53.
by xucheng 5y ago
IEEE S&P is actually one of the top conferences in the field of computer security. It does mention some guidance on ethical consideration. > If a paper raises significant ethical and/or legal concerns, it might be rejected based
54.
by xucheng 5y ago
I think I understand why this happens. See https://news.ycombinator.com/item?id=26885103
55.
by xucheng 5y ago
I think I understand why this is happening. This is not an issue that argument parsing in git goes wrong. But instead, the `--upload-pack=` instructs git to run certain command in the remote server. In my above example (`system "git&qu
56.
by xucheng 5y ago
I don't believe this is the case. [1] pry(main)> system "echo", "$(whoami)" $(whoami) => true [2] pry(main)> system "git", "ls-remote", "--upload-pack=$(whoami)&qu
57.
by xucheng 5y ago
This seems to be an issue of git. It's very surprising that a git command would invoke its arguments in shell.
58.
by xucheng 6y ago
A simple test shows that this bug is in Rust std library. https://play.rust-lang.org/?version=stable&mode=debug&editio... Report the issue in https://github.com/rust-lang/rust/issues/8
59.
by xucheng 6y ago
The reason I mentioned GitHub Enterprise instead of GitHub website is because the former one is not a service. It is a software distributed to the end user. Based on your comments, it seems that the existing releases of the GitHub Enterpris
60.
by xucheng 6y ago
If rails is now considered as GPL because this dependency, does this mean that GitHub Enterprise is now GPL?

More ›