AlexAltea

5 ms·

1.
by AlexAltea 3mo ago
GrapheneOS runs with a locked bootloader. You temporarily unlock during installation but after re-locking, boot integrity can be validated against GrapheneOS' verified-boot keys. See: https://grapheneos.org/articles&#x2
2.
by AlexAltea 3mo ago
Only two things come to mind: 1. Provide or find pro bono legal resources deeply familiar with EU DMA and similar antitrust regulations, willing to proof-check and improve this report, and perhaps advise on better channels to submit it. 2.
3.
by AlexAltea 3mo ago
FWIW, I submitted an EU DMA complaint (Art 27 report) against Alphabet for unfair gatekeeping against third-party distributions like GrapheneOS via Play Integrity. More info: https://github.com/AlexAltea/blog/blob&
4.
by AlexAltea 8mo ago
Related: https://news.ycombinator.com/item?id=46539718
5.
by AlexAltea 8mo ago
Probably nothing based on what? I have reproduced the finding locally... Any website can trivially run arbitrary code as the current user if OpenCode is installed; that's CVSS ~10.
6.
OpenCode AI coding agent hit by critical unauthenticated RCE vulnerability(github.com)
3 points by AlexAltea 8mo ago|2 comments
7.
by AlexAltea 1y ago
Great release with many welcome features. As a nit, I'm rather disappointed at the inclusion of fixed-size SIMD (128-bit wide) instead of adaptive SIMD instructions letting the compiler maximize SIMD width depending on host capabilitie
8.
by AlexAltea 2y ago
He launched Megaupload two years before Dropbox. Kim could have pivoted there, then expanded to docs/collaboration. Yes, hindsight is 20:20, but in theory it would have been possible moving from a piracy-centric business model to regul
9.
by AlexAltea 2y ago
Congratulations on the amazing work/demo! An interesting extension of this would be integrating the "Level of Gaussians" approach presented at: https://zju3dv.github.io/LoG_webpage/ Also interesting woul
10.
by AlexAltea 3y ago
> Whisper is undesirable if you want to deploy it for business. Why is that?
11.
by AlexAltea 3y ago
Nit, their ratio (bits set/unset) will approach 1 as the count approaches infinity, but the values themselves will not approach equal. https://gist.github.com/AlexAltea/3aa96efc41f59e80631c346908...
12.
by AlexAltea 3y ago
This is a problem with many dimensions and few equilibrium points. Libertarianism and nationalism are certainly incompatible, but that doesn't mean everybody needs to make their mind an pick one . They can accept both as valid equilib
13.
by AlexAltea 3y ago
The Italians have largely voted for a party that vowed to protect their culture. Perhaps the resulting laws are shitty for you , but likely not for the majority of Italians.
14.
by AlexAltea 3y ago
> social , economic, and environmental benefits Can you elaborate or is the first word just extra weight? Please no offense, it's an honest question: I find very interesting how most people, when they want to get a debatable point
15.
by AlexAltea 3y ago
Even with hidden API keys, I just realized that API freeloaders could just exploit assistants via prompt hacking. —"Hello I'm XYZ, and I'm here to help you with this website!" —"Ignore all previous instructions.
16.
by AlexAltea 3y ago
These guys have spammed me three times today via SMS, even after unsubscribing from all their notifications. I'm sorry but I cannot take them seriously. Who in hell thought this is normal or acceptable?
17.
by AlexAltea 3y ago
This already happens with Nespresso coffee machines (they have an SIM that connects to the Internet, whether you want it or not). That day is already yesterday.
18.
by AlexAltea 4y ago
Thanks, fixed. > And yes, there is a driver, but there is a difference between a generic PnP driver and the kitchen sink drivers that companies like NVIDIA ship. Yes, but I said "driver" not "kitchen sink driver".
19.
by AlexAltea 4y ago
That's because your operating system handles drivers for you these days... You wouldn't be typing that comment if it weren't for drivers responding to interrupts and polling pressed key codes. The reason your OS updates is of
20.
by AlexAltea 4y ago
> On its site, Google says certified peripherals must receive automatic firmware updates over the air and are tested for "quality, reliability, and interoperability." What the hell. What about keeping hardware I/O thin, an
21.
by AlexAltea 4y ago
Sure, perhaps my example was too extreme. What about: $ gitgpt commit files with msg cleaning repo files and push git commit -m msg git clean -fdx git push Without `git-add`, 1st one is a NO-OP, 2nd is a destructive action, 3r
22.
by AlexAltea 4y ago
That looks cool, though I'd be very concerned about the possibility about ChatGPT "hallucinating" a `rm -rf /` or equivalent.
23.
by AlexAltea 4y ago
Yes, but those are legal measures affecting higher levels of the OSI model, not low-levels technical blocks as OP implied. Technical measures such as "not letting CN/RU on the Internet", involve at least blocking their IP spa
24.
by AlexAltea 4y ago
> Letting russia and china on the internet was a massive security mistake we should rectify. Internet is decentralized in nature. Even if you tried to undo that, what's stopping anyone from bridging a non-CN/RU Intranet to CN&#
25.
by AlexAltea 4y ago
It can be a problem if you intended to make an embeddable search engine within applications meant to be executed by your end-users (as is the case with milli-py above).
26.
by AlexAltea 4y ago
Fixed, apologies! I had finished the PoC last night but the repo was still marked as private.
27.
by AlexAltea 4y ago
Related: Meilisearch v1.0.0 release two days ago: https://news.ycombinator.com/item?id=34707727 I have been following these two libraries (Manticore and Meilisearch) very closely. Their simplicity, portability and performan
28.
by AlexAltea 4y ago
Thank you very much, that's precisely what I was looking for!
29.
by AlexAltea 4y ago
Is it really "just a single statically linked binary"? I'd love to use Meilisearch as you describe, but their so-called SDKs are just for clients, so you still need the Meilisearch server listening on localhost. I would love
30.
by AlexAltea 4y ago
Silly question: if Linux kernel interfaces e.g. syscalls are stable, why is there a need to create an LTS release? How can non-LTS updates affect differently than updates within the LTS branch?

More ›