steventhedev

6 ms·

1.
by steventhedev 4mo ago
The dirty secret if you work inside BigCorp and look around at the projects they're showcasing: 1. They're low stakes to get wrong. 2. The most common is MCPs or similar ai-tooling. 3. Making them look good takes time and effort s
2.
by steventhedev 6mo ago
The entire point of this is that the complexity is encapsulated on the signing side - not the verifier. So it's more that you would split the keys between systems you control - say the reverse proxy and the application server. Or one t
3.
by steventhedev 11mo ago
More like a failure on TechCrunch. There is an implied agreement and violating it will result in a flat refusal to talk outside of prepared press releases. This isn't good journalism and should not be celebrated.
4.
by steventhedev 1y ago
Reading through that I stand corrected. Thank you for sharing a link. At the same time, if a US person applies and is similarly qualified, they must be offered the job. Which is trivially abuseable by offering substantially less for the H
5.
by steventhedev 1y ago
No. The H1-B visa is intended for bringing specific technical expertise that does not exist in the US for a set period of time. This is why one of the requirements is that you must have interviewed US persons first. Its the same reason it
6.
by steventhedev 1y ago
%cpu is misleading at best, and should largely be considered harmful. System load is well defined, matches user expectations, and covers several edge cases (auditd going crazy, broken CPU timers, etc).
7.
by steventhedev 1y ago
Elastic license, so many people refer to this as source available rather than open source
8.
by steventhedev 1y ago
Temperature sensors are a great example for alerting because they fluctuate constantly, have multiple seasonalities, and failures can be subtle. In the end, you'll want: 1. If the sensor dies and there is no data at all 2. If the senso
9.
Palo Alto to scoop up CyberArk for $25B to tackle AI-era threats(reuters.com)
2 points by steventhedev 1y ago|0 comments
10.
by steventhedev 1y ago
I'm fond of using KaTeX for my personal blog posts. There is support for server side rendering for KaTeX (but not on GitHub pages because it necessarily opens it to arbitrary code execution - I asked). But it notably lacks tikz support
11.
by steventhedev 1y ago
Why not juries of 13 people? That way you never have a clean tie?
12.
by steventhedev 1y ago
It means that there is a statistically significant improvement, but that improvement is tiny, and will not make you happier than your peers all by itself (assuming a standard peer group of 200 people - you'd likely swap places with 1 o
13.
by steventhedev 1y ago
Apparently there are some forks that offer more features and fix some of those bugs. Maybe one of those can help you? This is the one that was shared on lobsters, but there are likely more: https://bill-ion.github.io/tikzjax
14.
TikZJax: Embedding LaTeX Drawings in HTML(tikzjax.com)
137 points by steventhedev 1y ago|31 comments
15.
by steventhedev 1y ago
TLS chose the threat model that includes MITM - there's no good reason that should ever change. All I'm arguing is that having a middle ground between http and https would prevent eavesdropping, and that investment elsewhere could
16.
by steventhedev 1y ago
Yes. MITM attacks do happen in reality. But by their nature they require active participation which for practical purposes means leaving some sort of trail. More importantly is that by decoupling confidentionality from authenticity, you can
17.
by steventhedev 1y ago
MITM attacks are common, but noisy - BGP hijacks are literally public to the internet by their nature. I believe that insisting on coupling confidentiality to authenticity is counterproductive and prevents the development of more sophistica
18.
by steventhedev 1y ago
There is a security model where MITM is not viable - and separating that specific threat from that of passive eavesdropping is incredibly useful.
19.
by steventhedev 1y ago
The generic version in TFA puts the data type allocated alongside the next pointer - no additional allocation needed. The only functional difference is if the zig compiler is not sufficiently advanced to understand it can reorder the fields
20.
by steventhedev 1y ago
This feels like a net negative result. It removes some of the complexity of using generics, but it couples between the data type and the collections it can be indexed by. What are the benefits of this approach? Is it limited to data alignme
21.
by steventhedev 1y ago
At no point did submeta qualify their statement to only apply to former soldiers. Quite the rather - they removed the nuance that did exist in their quoted propaganda articles and made it explicitly based on national origin only.
22.
by steventhedev 1y ago
By that incredibly racist logic Meta should only hire born and bred Americans. How many Russians work at Meta? How many Palestinians?
23.
by steventhedev 2y ago
That is suspiciously equal to the "Other revenue" line in Meta's 10-K. Given that likely rolls up other products I doubt it's all coming from Whatsapp. [0]: https://d18rn0p25nwr6d.cloudfront.net/CIK-00013
24.
by steventhedev 2y ago
Same pipeline, but if it's a friend who wants to work with you then you have someone who is not in recruiting who you can ping for updates if the process gets stuck. Depending on the company, there may even be referral bonuses so there
25.
by steventhedev 2y ago
Aside from the technical beauty of this post, what is the practical impact of this? Fan speeds should ideally be looking at temperature sensors, CPU idling is working albeit with interrupt waits as pointed out here. The only impact seems to
26.
by steventhedev 2y ago
It's intended to run for producing compiler test cases, so there shouldn't be any code that's actually running. CPython includes a flag to only run parsing/compiling to bytecode. While you can use it like they did here a
27.
by steventhedev 2y ago
I took a code theory course in grad school. It was the most rigorous course I took, and for all of the 5 students it was difficult, but I'm also really glad I took it. Reed Solomon was about two thirds of the way through the semester,
28.
by steventhedev 2y ago
From reading through the transcript - it feels like the context window cut off when they asked it about emotional abuse and the model got stuck in a local minima of spitting out examples of abuse.
29.
by steventhedev 2y ago
There are a few exceptions to this, with varying degrees of justification: 1. An underperforming teammate when your personal rating is tied to team metrics. Which is a shit way to run a team. 2. You are a tech lead in a company where the ca
30.
by steventhedev 2y ago
Why not bulk import this from your city/county/municipality GIS system? Dunno about San Francisco city, but many will track sidewalks as part of maintenance management. Depending on how well organized they are, they might have add

More ›