Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right approach to…
It takes decades to grow the trees that then absorb the CO2 that is emitted from the burning, and the biomass that Drax burns has been (and still is) imported from Canada from felling old-growth forests (some of which…
Your markdown file has an image that links to another server controlled by the attacker and the path/query parameters you're attempting to render contains sensitive data.…
You can use `/model opusplan` to get that behaviour back though if you do want Opus for planning and Sonnet for editing.
If they're your scripts (i.e. your writing/editing them) then you can declare dependencies following the PEP723 format and uv will respect that. https://docs.astral.sh/uv/guides/scripts/#declaring-script-d...
For context, Major Paeta Hess-von Kruedener emailed [1] days before saying that Hezbollah were using his positions and the IDF was being forced to fire on them out of "tactical necessity". This isn't as clear-cut as…
I can imagine soon - within the next year or so - that business emails will simply be AI talking to AI. Especially with Microsoft pushing their copilot into Office and Outlook. You'll need to email someone so you'll…
If you want to stick with using `pip` over any of the newer tools that build on top of it (Poetry - my favourite, pdm, pipenv, rye, ...) the simplest way I used in the past was to use a `requirements.human.txt` to set…
Doesn't matter in this case. An Xbox was ordered that's classed as a "high value" item so requires a OTP being given to the driver to release the package. The package was hand delivered to the customer when the customer…
Bugger. Thanks for letting me know (embarrassingly I did load up the PEP page to make sure I remembered the right number but I didn't check its status). Was hoping that it would make things simpler for smaller projects…
I'm asking for clarification because whilst there's a strong argument that politicians are performing insider trading (which as you say is widely regarded as something that should be stopped), if an amateur can copy…
Can you clarify what you mean by "this"? Being able to copy the trades of politicians or politicians making trades that are almost instantly profitable?
Poetry is an all-in-one tool that does dependency management using `pyproject.toml` files and its own `poetry.lock` files, as well as package building, virtualenv management, and also has hooks for entrypoints and…
> the attacker obtained a valid administrative session token from _after_ any MFA would've been completed But you can lock session tokens to specific IPs or user agents. I've implemented similar in the past for a B2B…
> In 2018, Airbnb began its migration to a service-oriented architecture, as the Ruby on Rails “monorail” started becoming hard to maintain and was a single point of failure. A monolithic codebase doesn't have to be…
But how? You would be correct if the ID were an integer being serially increased. I can sign up to your website today and get an ID X and then sign up again in a week and get ID Y, I can then calculate the number of new…
> BUT my problem with this is "where do you draw the line?" Wherever it makes sense for you and your organisation. There's not a list of approved "boring technology" and unapproved "exciting but scary technology". It's…
But if you're using Postgres as your queuing system because you're already using it as your core database technology for your app, you've got the same issue. If your single Postgres instance is down then your app is,…
No, I don't think you're missing anything, other than you'd only mount the directories you want the tool / development environment to have access to. Take for instance the `npm` command [1], it mounts `$PWD` so if you…
> It's the environment and socialization factors that drive this. Then why is it overwhelmingly this breed that attacking people? We accept that certain breeds have innate instincts and traits - border collies herd,…
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose Probably so when you upgrade/lose your phone you don't otherwise lose your MFA tokens. Yes, you're meant to note down some…
Using the camera to record video is quite processor intensive, though, and that can cause a good amount of heat build up.
tmux. I know the keyboard shortcuts (that I customised) to create new windows and panes, and the shortcut to resize them all equally. I've not bothered to learn / remember the keyboard shortcuts to swap pane focus or…
> People saying you can get 10k req/s from Node.js is stupid. No, it's not, for exactly the reason you state: > You're not actually getting that on say, a single low-end instance over the Internet Some languages are, of…
> Especially if early/small, who wants to worry about scaling their DB layer unless they have to? If early/small, who wants to worry about putting another piece of infrastructure (RabbitMQ, Redis, etc) in your stack…
Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right approach to…
It takes decades to grow the trees that then absorb the CO2 that is emitted from the burning, and the biomass that Drax burns has been (and still is) imported from Canada from felling old-growth forests (some of which…
Your markdown file has an image that links to another server controlled by the attacker and the path/query parameters you're attempting to render contains sensitive data.…
You can use `/model opusplan` to get that behaviour back though if you do want Opus for planning and Sonnet for editing.
If they're your scripts (i.e. your writing/editing them) then you can declare dependencies following the PEP723 format and uv will respect that. https://docs.astral.sh/uv/guides/scripts/#declaring-script-d...
For context, Major Paeta Hess-von Kruedener emailed [1] days before saying that Hezbollah were using his positions and the IDF was being forced to fire on them out of "tactical necessity". This isn't as clear-cut as…
I can imagine soon - within the next year or so - that business emails will simply be AI talking to AI. Especially with Microsoft pushing their copilot into Office and Outlook. You'll need to email someone so you'll…
If you want to stick with using `pip` over any of the newer tools that build on top of it (Poetry - my favourite, pdm, pipenv, rye, ...) the simplest way I used in the past was to use a `requirements.human.txt` to set…
Doesn't matter in this case. An Xbox was ordered that's classed as a "high value" item so requires a OTP being given to the driver to release the package. The package was hand delivered to the customer when the customer…
Bugger. Thanks for letting me know (embarrassingly I did load up the PEP page to make sure I remembered the right number but I didn't check its status). Was hoping that it would make things simpler for smaller projects…
I'm asking for clarification because whilst there's a strong argument that politicians are performing insider trading (which as you say is widely regarded as something that should be stopped), if an amateur can copy…
Can you clarify what you mean by "this"? Being able to copy the trades of politicians or politicians making trades that are almost instantly profitable?
Poetry is an all-in-one tool that does dependency management using `pyproject.toml` files and its own `poetry.lock` files, as well as package building, virtualenv management, and also has hooks for entrypoints and…
> the attacker obtained a valid administrative session token from _after_ any MFA would've been completed But you can lock session tokens to specific IPs or user agents. I've implemented similar in the past for a B2B…
> In 2018, Airbnb began its migration to a service-oriented architecture, as the Ruby on Rails “monorail” started becoming hard to maintain and was a single point of failure. A monolithic codebase doesn't have to be…
But how? You would be correct if the ID were an integer being serially increased. I can sign up to your website today and get an ID X and then sign up again in a week and get ID Y, I can then calculate the number of new…
> BUT my problem with this is "where do you draw the line?" Wherever it makes sense for you and your organisation. There's not a list of approved "boring technology" and unapproved "exciting but scary technology". It's…
But if you're using Postgres as your queuing system because you're already using it as your core database technology for your app, you've got the same issue. If your single Postgres instance is down then your app is,…
No, I don't think you're missing anything, other than you'd only mount the directories you want the tool / development environment to have access to. Take for instance the `npm` command [1], it mounts `$PWD` so if you…
> It's the environment and socialization factors that drive this. Then why is it overwhelmingly this breed that attacking people? We accept that certain breeds have innate instincts and traits - border collies herd,…
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose Probably so when you upgrade/lose your phone you don't otherwise lose your MFA tokens. Yes, you're meant to note down some…
Using the camera to record video is quite processor intensive, though, and that can cause a good amount of heat build up.
tmux. I know the keyboard shortcuts (that I customised) to create new windows and panes, and the shortcut to resize them all equally. I've not bothered to learn / remember the keyboard shortcuts to swap pane focus or…
> People saying you can get 10k req/s from Node.js is stupid. No, it's not, for exactly the reason you state: > You're not actually getting that on say, a single low-end instance over the Internet Some languages are, of…
> Especially if early/small, who wants to worry about scaling their DB layer unless they have to? If early/small, who wants to worry about putting another piece of infrastructure (RabbitMQ, Redis, etc) in your stack…