progval

7 ms·

1.
by progval 6d ago
Ouch, that's a big footgun. Why was the lack of randomization considered a vulnerability, but not this?
2.
by progval 6d ago
He doesn't. Inputs are: M = (1 << 61) - 1 values = [i * M for i in range(1, n + 1)] which are effectively random from the hash function's point of view, especially with a randomized seed (the default on current
3.
by progval 7d ago
The page begins with <html lang="pt">
4.
“Tweet” and the bird logo apparently enter the public domain(blog.ericgoldman.org)
227 points by progval 8d ago|132 comments
5.
by progval 8d ago
A graph to confirm it: https://stats.documentfoundation.org/downloads#week,version
6.
by progval 10d ago
Or they already have that, but it's badly designed, bloated, or doesn't have employees assigned to it.
7.
by progval 10d ago
It's the one I use the most, but in my experience it's lagging behind the Twitter accounts. It's also noisy because it puts last-minute outages at the same level as minor month-long schedule change (which can't be dismis
8.
by progval 10d ago
> to DDOS sites the owner doesn't agree with to DDOS one website, which is doxxing the owner. Not that it makes it good idea, but it's a little more understandable.
9.
by progval 10d ago
> If you live in Europe, this restriction may be considered "gatekeeping" and exempted by the Digital Markets Act. That's not how the DMA works at all, there is no concept of gatekeeping practices. Instead, the EU Commissi
10.
by progval 10d ago
Paris' subway and local train lines each have a Twitter account, and they are the only reliable source of information regarding outages. Phone apps (at least three official ones with different data sources!) and websites can be outdate
11.
by progval 13d ago
Axios already used this style long before LLMs were a thing. https://web.archive.org/web/20170609214514/https://www.axios... has two instances on the front page, more if you click on any of the articles.
12.
by progval 14d ago
This seems hard to believe, but the author already tooted about it ( https://mamot.fr/@ploum/117016623130281141 ) so he may be serious
13.
by progval 17d ago
And being one of the few who use them will be considered aggravating factor in unrelated lawsuits. This already happened once even though it's not illegal: https://www.laquadrature.net/en/2023/06/05/
14.
by progval 17d ago
The driver could run in a VM and only display applications from that VM or a subset of VMs.
15.
by progval 17d ago
> There's no asymmetry at all: you're just adding a fixed cost to each reward, for both users and abusers. There is: users solve the PoW once, scrappers solve it every time they rotate IP addresses. Some of them change their IP
16.
by progval 18d ago
No, it's not just about cycle counting. Worst-case O(n-k) complexity in general implies worst-case O(1) complexity for the set of cases where k=n-<constant>. There are still multiple cases, just a subset of those that don't
17.
by progval 18d ago
If you enjoyed the industry part, you may find https://prosperousuniverse.com/ even better than Eve.
18.
by progval 19d ago
ICANN can't suspend second-level domains, this is up to the owner of .org (the Public Interest Registry) or the registrar of the particular domain (Gandi).
19.
Changes to Sourcehut's terms of service regarding LLMs(sourcehut.org)
129 points by progval 21d ago|43 comments
20.
by progval 24d ago
It's a client-side paywall so most people with ad blockers don't even noticed there is one.
21.
by progval 24d ago
From the article: > The AFL’s refusal to allow Boyle a choice is not unlawful. Employers in Australia can install software on the equipment they own, are exempt from privacy law when handling employee records
22.
by progval 28d ago
It worked for me (from two French IP addresses in different ASs) for two or three weeks since people started talking about. Now it's gone too.
23.
by progval 29d ago
Anecdata: a coworker found a single bit flip corruption in a file he wrote in his computer. He ran memtest86 on his memory, and which found one of the two sticks was defective. The computer otherwise ran perfectly fine for years; and we wou
24.
by progval 1mo ago
It will be legal to share in some decades. Not that Amazon will bother, though.
25.
by progval 1mo ago
Isn't it because they have customers who will use as many tokens as they can? With a flat rate, they will run Gas Town continuously while paying as much as the occasional user.
26.
by progval 1mo ago
Interesting to see that peak hours are work hours in China, night in the US and Europe, and also morning in Europe. So Deepseek's customers are mostly domestic.
27.
by progval 1mo ago
Yes, as long as their development environment is isolated and they can't push to prod without a review.
28.
by progval 1mo ago
It's okay-ish for Rust because you only need the curl|bash for Rustup, which is meant as a development environment. On production you can, for example, use APT to download it from Debian.
29.
by progval 1mo ago
The Reddit post you linked to was hallucinated by Claude, see https://news.ycombinator.com/item?id=47659552 Their website (now offline) also added this page since I posted that comment: https://web.archive.org&#x
30.
by progval 1mo ago
And they're using a temporary redirect (HTTP 302) so browsers won't automatically redirect users when this happens.

More ›