tomxor

5 ms·

1.
by tomxor 3d ago
> I’m a big fan of Hanlon’s razor. There is a 3rd option: malicious stupidity / aka wilful ignorance. Google is a collection of individuals, so it's very likely both sides of Hanlon's razor are true: a little malice from t
2.
by tomxor 5d ago
I'm not completely sure if this is supposed to be sincere, but it should be. It's not uncommon practice to omit the security implications on public facing commit messages when fixing secirity issues, so as to not to draw attention
3.
by tomxor 6d ago
Yes, that used to be the way. But it's getting increasingly hard to ignore their smart functionality and be comfortable enough simply leaving it "unnetworked". The problem is the incentives, even though TVs represent a higher
4.
by tomxor 8d ago
Not really (I've looked pretty thoroughly), but I've been looking into large format gaming monitors like the 48" Asus OLED PG48UQ [0] which are essentially dumb TV panels. I haven't finished researching yet but happy to
5.
by tomxor 12d ago
Yes, the irony is that vertically scaling will always go "faster" due to latency until you genuinely need more DB than a single box can handle. Premature horizontal scaling only increase complexity and reduce performance. And even
6.
by tomxor 14d ago
Thats a good point to highlight. If the purpose of down votes is to guide discussion away from uninteresting or counterproductive paths, then it also scoops up divisive comments. I suppose divisive comments are potentially disruptive if the
7.
by tomxor 15d ago
Exactly. Framing completely changes this from an absurd story causing pointless grounding due to loss of institutional knowledge, to an example of good judgement (or protocol) in the absence of knowledge and acknowledgement of the risk of u
8.
by tomxor 20d ago
I think this is best described as a one-shot control plane, the single use address/key (same thing) is shared out of band, so it's far more minimal than the TS control plane. The examples show the concrete use cases... Basically g
9.
by tomxor 21d ago
> Why you wouldn't want to hand that off to a computer program is beyond me. Trust, stability, security. The reasons many people run Debian. Although I think the main incompatibility in philosophy here is in "hand that off&quot
10.
by tomxor 25d ago
Funny they mention demoscene as an example. I've tried to get various LLMs to explain or modify my demos and they utterly fail. At the extreme end this style of coding requires you to hold all understanding of what is happening end to
11.
by tomxor 1mo ago
> You know about the values of a culture, if they call your old parents to rip them off. Large groups of people in a poor country steal from rich countries, and your explanation is a morally corrupt culture? not the obviously extremely p
12.
by tomxor 2mo ago
> A ping goes around the whole world before your pressed key is visible on the screen. I don't disagree with your sentiment, but as someone who manages infrastructure which is literally on the opposite side of the planet (from me) R
13.
by tomxor 3mo ago
> For many people, LLMs are the first time that computers do what they tell them to. Not what some big tech PM has decided is or isn’t possible. The crux is here somewhere. A massive group of people (A), don't fully understand or ca
14.
by tomxor 4mo ago
That's helpful to prevent individual secret harvesting, however it does not protect you from potential silent downstream effects in packages. i.e. inclusion of malicious code in libraries you depend on, this could be as simple as inser
15.
by tomxor 4mo ago
At this point lifecycle script should be disabled by default in NPM. It's a convenience feature that provides built-in Arbitrary Code Execution (even for transient dependencies), and every one of these widespread NPM worm style attacks
16.
by tomxor 4mo ago
> You are not recovering these investments OK, Question: Would this outcome still benefit society overall? In the aftermath of this bubble "AI" will still have utility, like the dotcom bubble. So lets say FANG doesn't ma
17.
by tomxor 5mo ago
Hah TIL. So it's the river Welsh river on the English side of the Bristol channel. I often feel like I would understand a lot more names if I bothered learning Welsh. It's pretty popular for made up climbing route names too, becau
18.
by tomxor 5mo ago
> Immediate public disclosure is the only choice that isn't irresponsible as far as I'm concerned. No, it's really not. High severity vulnerabilities are responsibly handled by quietly neutralising them with subtle patches
19.
by tomxor 5mo ago
FYI it's dynamically loaded on demand, so lsmod will show it after you try run the exploit, or you can explicitly load it with: modprobe algif_aead The following mitigation (from the article) does work for Debian 12 and 13, I&#x
20.
by tomxor 5mo ago
Another happy self hosted Gitea user here for ~3 years now. Came from Gitlab which started pushing out basic users in 2022 with massive price hikes. I weighed Github as an option but was like "no I don't want to be dealing with th
21.
by tomxor 5mo ago
> aaand we have Quake and Comand&Conquer - Red Alert Agreed, it would seem that evolutionary biology peaked in the late 90s then
22.
by tomxor 6mo ago
These robots weren't really "walking" in the sense that humans walk through continuous dynamic balancing, i.e falling forward. These used quasi-static walking, where the zero moment point (like a moving centre of gravity) is
23.
by tomxor 6mo ago
Go back to Win98 UI, I know it will never happen but can you imagine... At this point I genuinely think people would be blown away at how much of a functional improvement it would be. There would also be a lot of bewilderment for the younge
24.
by tomxor 6mo ago
Yes, by generally I really mean all the defaults are pretty permissive, but I understand some people tune both TCP and SSH on their servers to drop connections faster because they are worried about resource exhaustion. But if you throw up a
25.
by tomxor 6mo ago
If hung SSH connections are common it's likely due to CGNAT which use aggressively low TCP timeouts. e.g. I've found all UK mobile carriers set their TCP timeout as low as 5 minutes. The "default" is supposed to be 2 hou
26.
by tomxor 6mo ago
> It’s who’s looking at your profile; it’s the profiles that you’re looking at. That was the holy grail Facebook actually implemented this as a user facing feature. I think it was very early days, but I used it, it was fucking creepy, an
27.
by tomxor 7mo ago
Yup, in a word, ownership. But that's an unpopular approach these days where many companies are obsessed with minimising the bus factor to the point that their IP is as replaceable as their employees.
28.
by tomxor 7mo ago
> I cannot think of a technology more diametric to 'plug n play' than VR, which is very unfortunate. Ironically that's exactly what the Quest solved with SLAM, it really is plug and play, otherwise I would not have bought
29.
by tomxor 7mo ago
Not Maybe, I owned a 2009 MBP. Everyone with a macbook from that period that I knew had the same issue, they were absurdly bright, you could not keep it anywhere near a bedroom without putting very thick tape over the light. It was a poorly
30.
by tomxor 7mo ago
> I started making deliberate grammar and spelling mistakes in professional context. I've also noticed an increase of this in myself and others, I used to edit a lot more before sending anything, but now it seems more authentic if y

More ›