davidsong

7 ms·

1.
by davidsong 4mo ago
Thanks. I'm downloading all these now and will do a proper pass and compare outputs for correctness once complete :)
2.
by davidsong 4mo ago
The proper way to work with Claude or Codex is, IMO, to load up the context with a discussion about what you're doing and why. You go back and forth, pushing back on its opinions and shaping the context until the tokens are ready to fl
3.
by davidsong 4mo ago
I didn't actually read any code. I generated spec documents using Claude, then later on used Codex to generate from the spec docs. Are the specs tainted? If someone else independently develops from my spec, is that also tainted? What i
4.
by davidsong 4mo ago
Yeah the main things are DoS attacks and path traversal issues. I intentionally guarded against these with resource limits and checks, but I can't guarantee that it's safe. I mean, basically anyone who carefully reads it knows mor
5.
by davidsong 4mo ago
Thanks! I guess you could save the state to a file on SIGINT, flush what's been written and pick it back up again if the state file exists when you restart, and use the CRCs of the files to abort if things have changed. I don't fa
6.
by davidsong 4mo ago
I compressed thousands of files, went through libarchive's and Sembiance's test data at least for the decompressor side. I recompressed the files, and round-tripped them against 7zip, unrar, every later version of winrar. It faile
7.
by davidsong 4mo ago
I generally don't anyway. Since the WTFPL came out I've been licensing under that with a warranty clause (don't blame me). My main goal here was an experiment to see how far I could push the technique, and learn things along
8.
by davidsong 4mo ago
Well, it is every version of RAR. Documenting the quirks of rar 1.4, 1.5, 2.0, 2.9, 3.0, 4.0, 5.0 and 7.0, multiple compression strategies, PPMd, RARVM, compression levels, encryption, multi volume support, a huge test corpus, round trips f
9.
Rars: a Rust RAR implementation, mostly written by LLMs(bitplane.net)
94 points by davidsong 4mo ago|84 comments
10.
by davidsong 7y ago
Thanks for doing this. It's a pretty big file, so I compressed it down to 11mb: https://www.docdroid.net/A5g0tzk/les-animaux-compressed.pdf
11.
by davidsong 7y ago
When I was six I learned that variables are little boxes, strings are made of bunting and there was some kind of octopus called INKEY$ that grabbed keys from the keyboard. I think the most important thing to learn is enthusiasm, if you&#x27
12.
by davidsong 7y ago
Theft is illegally depriving someone of something. Burglary includes an unlawful entry component.
13.
by davidsong 7y ago
Where would you point the upstream? Doesn't it just push the problem up one server?
14.
by davidsong 8y ago
I once dropped my work laptop and snapped the plastic housing on the charger plug. I only discussed it verbally with my manager and said that I, as a consultant, would replace it at my own expense. Before I'd had chance to search for a
15.
by davidsong 8y ago
Also dodgy files can contain multiple exploits, potentially for different platforms. Problem here from the malicious actor's point of view is that each vector for attack is also a vector for detection, so rather than a cesspool of expl
16.
by davidsong 8y ago
Or put it anywhere a vulnerable PDF viewer or OS might stumble upon, where an overzealous scanner has write access to, or where some snitch might grab a copy from and blacklist your domains.
17.
by davidsong 8y ago
Well yes, and in this case we're talking files that contain an exploit for a version of Acrobat from 2006 or so and an infection vector that only works on Windows XP, and connects to a botnet that is either long dead or now an NSA&#x2F
18.
by davidsong 8y ago
There are several ebooks that have been uploaded to libgen that contain PDF exploits, and from what I understand there's no way to remove them. The way that their library database works is by linking a book number to a file's md5
19.
by davidsong 8y ago
Entertaining? This is deadly serious. I think you might need extra diversity training.
20.
by davidsong 8y ago
A little over two more orders of magnitude price increase before the next two halfenings and it's guaranteed to cause a world energy crisis.
21.
by davidsong 8y ago
It's nice to believe and even nicer to talk about, and that's what's important when it comes to writing fuzzy, warm feeling fluff.
22.
by davidsong 8y ago
Call me a tinfoil hatter but I've always assumed that the likes of Cloudflare, knowingly or not, are a key part of the Internet surveillance state. It would be relatively easy for the likes of the NSA to infiltrate DDoS protection comp
23.
by davidsong 9y ago
Is it that because you don't use drugs, the people who do use them tend not to discuss them with you? I was just joking with a colleague about trying the gas and air when his wife gives birth, and everyone in our bank of desks thought
24.
by davidsong 9y ago
How about a USB OTG microphone, GPS and camera that tell a pack of lies, ideally implemented as an app on a second phone.
25.
by davidsong 9y ago
When low intelligence becomes a protected trait all Linus's rants about morons and idiots will be seen in a much harsher light.
26.
by davidsong 9y ago
And leave all the INSERTs and SELECTs to a trusted third party like Uber?
27.
by davidsong 9y ago
I understand that it's corporate etiquette to be a smiling doormat when faced with free riders abusing your services, to politely apologise for not being able to take the pain, but it doesn't mean you're an asshole if you don
28.
by davidsong 9y ago
I'm a Nautilus subscriber and I block JavaScript on untrusted domains along with all tracking. I've never seen an advert on nautil.us, so maybe if they'd used non-intrusive advertising rather than sophisticated surveillance a
29.
by davidsong 9y ago
> Nine charts which tell you all you need to know about North Korea You won't believe number 6! What on earth happened to the BBC?
30.
by davidsong 9y ago
Fair comment, but a cult of freedom trumps the mainstream religion of subjugation and domination.

More ›