zahlman

67 ms·

1651.
by zahlman 9mo ago
Ah, I understand now.
1652.
by zahlman 9mo ago
Original title: "Use of PyPI as a generic storage platform for binaries", but I felt that lacked context. Looks like simonw found the thread before I decided to post it, though ( https://discuss.python.org/t/us
1653.
Python forum thread about (mis)use of PyPI for non-Python binaries(discuss.python.org)
4 points by zahlman 9mo ago|1 comments
1654.
by zahlman 9mo ago
As a heads-up, the "?page=N" linking style is a bit wonky on discuss.python.org, as it's using Discourse which defaults to an infinite-scroll view using JavaScript. You can directly link posts by including a post ID (and also
1655.
by zahlman 9mo ago
I can still remember trying to deal with structured binary data in Perl, just because I didn't want to fiddle around with memory management in C. I'm not sure it was actually any less painful, and I ultimately abandoned that first
1656.
by zahlman 9mo ago
... You got the source code, and it was 115 kloc of BASIC, but several other individuals and organizations failed to "reverse-engineer" it?
1657.
by zahlman 9mo ago
Out of curiousity, for those who were around to see it: was writing on LinkedIn commonly like this, pre-chatGPT? I've been wondering what the main sources were for these idioms in the training data, and it comes across to me like the k
1658.
by zahlman 9mo ago
> Sure, we got our share of dilbert-style agile/waterfall/tdd jokes shoved in our face, but no one wrote a blog post about how their identity was usurped by the waterfall model . That's a difference in form, but not really
1659.
by zahlman 9mo ago
This is essentially just that. The idea is that "poisoned" input data will cause AIs that consume it to become more likely to produce bullshit.
1660.
by zahlman 9mo ago
> Given all of this, here is what I believe is the sequence of execution in Baptiste Mispelon's example: Yep, all correct. Great example for a blog post on my todo list, too. > (Python 3.13 does print a nice stack trace [that] po
1661.
by zahlman 9mo ago
> We have apps that monitor driving and we play a tone to indicate that a hard braking event was detected. Simply letting people know that they had a hard braking event is an effective mechanism for behavior change (other companies have
1662.
by zahlman 9mo ago
Oh, you mean on the badge? Yeah, I made the README from a template that assumes I'd already have the RTD set up, and well I don't. I'll fix that.
1663.
by zahlman 9mo ago
> What are you working on? Myself, mostly. Trying to wrestle with realizing how much time I've not been spending on my supposedly main project[1] and questioning whether it's really worth doing. > Any new ideas that you&#x
1664.
by zahlman 9mo ago
It seems hard to square that with the fact of the files being released, or indeed of the FBI being able to obtain files in the first place. You'd have to suppose that "the ruling class" expected/expects to be able to t
1665.
by zahlman 9mo ago
> First on the standard list of metasyntactic variables used in syntax examples (bar, baz, qux, quux, corge, grault, garply, waldo, fred, plugh, xyzzy, thud) I've seen foo, bar, baz, qu+x, plugh and xyxxy actually in use
1666.
by zahlman 9mo ago
At least it is getting mainstream media coverage, I suppose.
1667.
by zahlman 9mo ago
Ah, I somehow skipped over that exact code block on first read.
1668.
by zahlman 9mo ago
> Big Insight #2 is that atoi() behaves as a (bad) hash function on ordinary text. It consumes characters and updates a 16-bit integer. I could have sworn I remembered atoi() being defined to return 0 for invalid input (i.e. text not rep
1669.
by zahlman 9mo ago
> a broker that rewrites the curl requests and injects keys so the agent doesn't see them. This seems like the right way to do it, but you still have to worry about what information the agent wants to send out. Especially if it coul
1670.
by zahlman 9mo ago
I was expecting tutorial material for beginners, but actually it's useful to have these kinds of discussions about terminology to establish common ground.
1671.
by zahlman 9mo ago
> A 2025 simulation-based study published in the journal Frontiers in Sports and Active Living suggested that every 2 cm of extra fabric in a ski jumpsuit could increase drag by about 4 percent and increase lift by about 5 percent. On a
1672.
by zahlman 9mo ago
> With a single jump to the processor's reset entry point, I had somehow inspired someone to step back from academic competition in order to have more fun with learning. Seems like it wasn't just the processor that reset.
1673.
by zahlman 9mo ago
You could also do this sort of thing with XCompose, yes?
1674.
by zahlman 9mo ago
Might I ask exactly what the typo was?
1675.
by zahlman 9mo ago
> Doesn't the agent already have bash though? You don't have to give it bash, depending on your tools at least. > So it can blow itself up and... I think that's about it? And exfiltrate data via the Internet, fill up di
1676.
by zahlman 9mo ago
My understanding is that "the class restriction" isn't trying to implement any kind of security boundary — they just haven't managed to implement support yet.
1677.
by zahlman 9mo ago
> Do you think there are 22 competing package managers in python because the package/import system "just works"? There aren't; a large fraction of tools people mention in this context aren't actually package mana
1678.
by zahlman 9mo ago
For sandboxing, as described in the README.
1679.
by zahlman 9mo ago
Yes. That's why I compare it (a compiled Rust executable) to Monty (a compiled Rust executable). The point is that loading large compiled executables into memory takes long enough to raise an objection to the "startup times measur
1680.
by zahlman 9mo ago
I can't help but notice that said other person's profile claims "out of here"; and before this thread, had not commented since October 2024 — in that case also to get in an extended political argument with you specifi

More ›