anonymous-panda

7 ms·

1.
by anonymous-panda 2y ago
I find the panic over potential threat of quantum quite amusing when the machine is still extremely theoretical - all existing machines are slower than classical and it’s not even clear they can scale to the required number of qubits. There
2.
by anonymous-panda 2y ago
Should be able to do it by having the scanner take multiple samples. As long as you don’t need a valid login and the performance issue is still observable, you should be about to scan for it with minimal cost
3.
by anonymous-panda 2y ago
You don’t need vouching for anyone. mDL is going to be a mechanism to have a government authority vouch your identity. Of course a state actor like this can forge the identity, but that forgery at least will give a starting point for the in
4.
by anonymous-panda 2y ago
It’s worse than that. Build.rs is in no way sandboxed which means you can inject all sorts of badness into downstream dependencies not to mention do things like steal crypto keys from developers. It’s really a sore spot for the Rust communi
5.
by anonymous-panda 2y ago
That’s not an effective idea for the same reason that lines of code is not a good measure of productivity. It’s an easy measure to automate but it’s purely performative as it doesn’t score the qualitative value of any of the maintenance wor
6.
by anonymous-panda 2y ago
Don’t know all the details and rust isn’t immune to a build attack, but stuff like that tends to stand out a lot more I think in a build.rs than it would in some m4 automake soup.
7.
by anonymous-panda 2y ago
Could javac do the analysis and record it in the bytecode for HotSpot to optimize? Or is this kind of hybrid teamwork not done?
8.
by anonymous-panda 2y ago
Security and utility are in opposing balances often. The safest possible computer is one buried far underground without any cables in a faraday cage. Not very useful. > We’re not inserting the security community into that loop and slowin
9.
by anonymous-panda 2y ago
My hunch is that if you added the buffered reader and kept the original xxd in the pipe you’d see similar timings. The amount of input data is just laughably small here to result in a huge timing discrepancy. I wonder if there’s an added el
10.
by anonymous-panda 2y ago
I’m not following how that would result in a 10x discrepancy. The amount of data we’re talking about here is laughably small (it’s like 32 bytes or something)
11.
by anonymous-panda 2y ago
I would recommend the python sh module instead of writing bash for more complex code. Python’s devenv and tooling is way more mature and safer.
12.
by anonymous-panda 2y ago
That doesn’t make sense unless you have only 1 or 2 physical CPUs with contention. In a modern CPU the latter should be faster and I’m left unsatisfied by the correctness of the explanation. Am I just being thick or is there a more plausibl
13.
by anonymous-panda 3y ago
I know you’re joking, but it wouldn’t really be that hard in terms of a lookup for played positions which is what OP asked for - you could have Bitboards for the relevant info so finding a state would be a refined search starting with the b
14.
by anonymous-panda 3y ago
What does performance look like?
15.
by anonymous-panda 3y ago
No that’s not the divide. Bayesian requires you to have an estimate of the prior and a reasonable way to update that estimate by validating against ground truth. Here there’s no ground truth and no principled way that the prior is being pic
16.
by anonymous-panda 3y ago
No, Tetlock et all have found very large crowds to outperform smaller groups of experts. This however is an article about small groups of non experts competing against each other. It’s not even blending the predictions across teams. It’s a
17.
by anonymous-panda 3y ago
Or you’ve just learned how to optimize your score on the game you’re playing but the game isn’t actually about predicting the future.
18.
by anonymous-panda 3y ago
This makes no sense. If I have 1000 predictions and vary my estimates from 0-10%, that’s only 100 samples assuming you round to the nearest whole percent. And there’s no correlation between any of those samples. For example, I could say the
19.
by anonymous-panda 3y ago
But if you can pick what you’re predicting on and pick the percentage you assign to an event, I fail to see how that gives you a calibration.
20.
by anonymous-panda 3y ago
I disagree with that characterization because the contrast by OP was that S3 is “just a KV store implying” it doesn’t meet the criteria for being considered a filesystem. For example, you could implement POSIX directory semantics on top of
21.
by anonymous-panda 3y ago
Would it be impossible to marry the two somehow? It’s hard for me to believe that the brain only uses a single technique for everything and likely has many different tools in its toolbox with a selector on top to know how to leverage each a
22.
by anonymous-panda 3y ago
This is a technical website discussing the nuances of filesystems. Common vernacular is how you choose to define it but even the Wikipedia definition says that directories and hierarchy are just one property of some filesystems. That they b
23.
by anonymous-panda 3y ago
Depends how you’re iterating. If your iterating by hierarchy level, then you could easily see this being several orders of magnitude more requests.
24.
by anonymous-panda 3y ago
Directories make up a hierarchical filesystem, but it’s not a necessary condition. A filesystem at its core is just a way of organizing files. If you’re storing and organizing files in s3 then it’s a filesystem for you. Saying it’s “fundame
25.
by anonymous-panda 3y ago
I think it’s far more mundane a reason. You can list 10k objects per request and getting the next 10k requires the result of the previous request, so it’s all serial. That means to list 1M files, you’re looking at 100 back to back requests.
26.
by anonymous-panda 3y ago
Sure, but an expensive operation sitting as a time bomb within some TLS configs is more easily exploitable than having to find some service specific exploit.
27.
by anonymous-panda 3y ago
You’re misunderstanding the DOS attack I think. This is a DOS on the server itself and can prevent all other clients from connecting or the server from doing any useful work as its time is spent computing keys instead of anything useful. It
28.
by anonymous-panda 3y ago
Yes, but it’s not just a single metric. Another is how easy it is for them to hire productive members of the team and how much that costs them - middling Python developers churning out fine”ish” code are cheaper than Rust developers doing t
29.
by anonymous-panda 3y ago
> but it turns out in today's world, the abstraction of a reliable connection is TCP + a network administrator + a guy with wire snips + solder (metaphorically). I think you’ve misunderstood the abstraction. In fact, TCP is not leak
30.
by anonymous-panda 3y ago
Packaging and stability reasons. Same for why it’s a 1.7gb install - probably where they landed after having tons of support issues on some random Python version they didn’t test or some issue with a dependency that had that issue. Freezing

More ›