chc4

5 ms·

1.
by chc4 2mo ago
Huh? You can expose tool functions to Gemini's live API, and it will call them as part of thinking about responses. I've used this to expose e.g. current GPS location for a smartwatch voice assistant.
2.
by chc4 3mo ago
it just me that thinks its kinda weird that they conflate speed in tokens/second and latency, when i think of latency as time to first token? like it generates an entire paragraph of tokens faster but wouldnt it still be slower if your
3.
by chc4 7mo ago
I don't think you know anything about how these industries work and should probably read some of the published books about them, like "This Is How They Tell Me The World Ends", instead of speculating in a way that will mislea
4.
by chc4 7mo ago
Browser exploits are almost always two steps: you exploit a renderer bug in order to get arbitrary code execution inside a sandboxed process, and then you use a second sandbox escape exploit in order to gain arbitrary code execution in the
5.
by chc4 7mo ago
It's really funny reading the thought processes, where most of the time the agent doesn't actually remember trivial things about the cards they or their opponent are playing (thinking they have different mana costs, have different
6.
by chc4 7mo ago
Yeah, this is basically Sovereign Citizen-tier argumentation: through some magic of definitions and historical readings and arguing about commas, I prove that actually everyone is incorrect. That's not how programming languages work! I
7.
by chc4 7mo ago
Or better yet, the built-in Version Tracker, which is designed for porting markup to newer versions of binaries with several different heuristic tools for correlating functions that are the same due to e.g. the same data or function xrefs,
8.
by chc4 8mo ago
OpenSSL is used by approximately everything under the sun. Some of those users will be vendors that use default compiler flags without stack cookies. A lot of IoT devices for example still don't have stack cookies for any of their so
9.
by chc4 8mo ago
2026 and we still have bugs from copying unbounded user input into fixed size stack buffers in security critical code. Oh well, maybe we'll fix it in the next 30 years instead.
10.
by chc4 8mo ago
I saw a Mastodon tweet a while ago, which went something like: Do tech companies understand consent?: - [ ] Yes - [ ] Ask me again in a few days
11.
by chc4 8mo ago
RPISEC's Modern Binary Exploitation is somewhat famous for doing exactly that!
12.
by chc4 8mo ago
brb taking out a 10:1 bet on a new project which will print money and then rm -rf'ing all the code so i get a payout
13.
by chc4 8mo ago
SSRF is not just a DoS.
14.
by chc4 8mo ago
I think it would be very cute to train a model exclusively in pre-information age documents, and then try to teach it what a computer is and get it to write some programs. That said, this doesn't look like it's nearly there yet, w
15.
by chc4 9mo ago
Amazon Fire Tablet, one of the only things I've ever returned.
16.
by chc4 10mo ago
Signal is an end-to-end encrypted messaging app. People continue to breathlessly mentioning the lack of database encryption as a problem, but that never made it a real security issue: its job is not, and has never been, dissuading an attack
17.
by chc4 10mo ago
No one is using an Alpha, Motorola 680x0, PA-RISC, or SuperH computer because that's the only thing they can afford. Rust supports 32bit x86.
18.
by chc4 10mo ago
They're vulnerable to "High-S" malleable signatures, while ed25519 isn't. No one is claiming they're backdoored (well, some people somewhere probably are), but they do have failure modes that ed25519 doesn't wh
19.
by chc4 10mo ago
UMass Lowell has a 1MW research reactor as well.
20.
by chc4 11mo ago
CodeQL compiles to the Souffle datalog engine and I use it for static analysis. I've also used ascent for a few random side projects in Rust which is very convenient.
21.
by chc4 11mo ago
The human brain is just really bad at evaluating risk, especially over long periods of time. A lot of people are wanted overseas for years or even decades without anything happening, which makes it hard to maintain the mindset of being at r
22.
by chc4 11mo ago
...And this is how I learn that the line "Steele Dakota's sandhill crane" from mewithoutYou's Nine Stories is talking about a bird species and not a literal mechanical crane. Apparently they have the largest sculpture of
23.
by chc4 11mo ago
https://ferrocene.dev/en/ is a Rust toolchain which has achieved some certifications for mission critical applications similar to Ada/SPARK.
24.
by chc4 11mo ago
They run the game servers in Docker. Doing multi-tenant is a weaker security boundary and makes it easier to steal places from other users, which Roblox takes pretty seriously when places represent all the time invested by game studios and
25.
by chc4 11mo ago
The summoning worked!
26.
by chc4 11mo ago
Wasn't it revealed that the research supporting amyloid-beta plaque as the cause of Alzheimer's was fraudulent? https://www.science.org/content/article/potential-fabricatio... https://www.scie
27.
by chc4 1y ago
"sufficiently advanced magic core" is a fairly funny term when a lot of other RISCV behavior basically assumes any real processor will have a macro op fusing frontend for specific series of instructions, and even provides recommen
28.
by chc4 1y ago
> Exactly-Once Event Processing This sounds...impossible? If you have some step in your workflow, either you 1) record it as completed when you start, but then you can crash halfway through and when you restore the workflow it now isn&#x
29.
by chc4 1y ago
They studied math, so it was probably for a quantitative finance job where I've seen (quite a few!) other people talk about similar interviews. Stuff like computing standard deviation confidence intervals or deciding which of two strat
30.
by chc4 1y ago
If you have a secure and attested boot chain, then anti-cheats can also start depending on things like DMA protection[1] to be enabled or other CPU features to protect against rogue hardware doing DMA attacks. At the professional level tour

More ›