I completely agree with climbing gyms! I'm lucky enough that I live in a city that has a newbie-friendly group that climbs every week and goes for dinner and board games afterwards. I consider myself an introvert, but…
It's obvious in hindsight but to me its really interesting you can collect data points on the community just by chatting with them. Maybe you could guess, by appearance or behaviour or something, whether most people at…
> ...stored in the global StorageDatabaseNameHashtable. > This mapping: > - Is keyed only by the database name string > ... > - Is shared across all origins Why is this global keyed only by the database name string in…
Someone from my high school added me on LinkedIn and works at Palantir. What I find interesting, is that a few months after joining, he scrubbed all posts, descriptions, and mentions of the word "Palantir" in his…
Back when I was in university, one of the units touching Assembly[0] required students to use subtraction to zero out the register instead of using the move instruction (which also worked), as it used fewer cycles. I…
Also wondering how it compares to https://pikimov.com , another browser-based video editor I've seen making the rounds.
> What are the security implications this raises It increases attack surface area on the browser. Even if you do need to "accept" a connection for a device, this isn't foolproof. I imagine adding WebUSB is a…
I do not understand the appeal of the workflow of working on separate things in parallel, then splitting it off into branches/commits. imo, isn't it better to fully focus on one thing at a time, even if it is "simple"?…
The video in question:- https://youtu.be/_mL1uaOgGvc Although the channel is indeed called SWEet, I should have given the YouTube channel handle, SWEetOverflows.
Very cool! I wonder if someone more creative than me would be able to push this to do things it was not designed to do. I recently found a video where someone exploited some properties of certain transcript file formats…
> Never follow a shortened link without expanding it using a utility like Link Unshortener from the App Store, I am unfamiliar with the Apple ecosystem, but is there anything special about this specific app that makes…
> Except every big server has to run an anticheat. Some servers required clients with client side anticheats even. I am fine with anticheat on the server-side to help volunteers/moderators find issues, since it does not…
> Because game studios these days are all about global matchmaking Why not have moderation then? When participating in an online forum, you are essentially "matchmaking" to a topic or corner of the internet with similar…
> they should provide built-in anti-cheat support in the OS. As much as I dislike anti-cheat in general (why incorporate it instead of just having proper moderation and/or private servers? Do you need a sketchy…
> The phrasing of your first two sentences in your first post makes it sound like you're dismissing the security issue. Genuine question, How does it sound like I'm dismissing it? My first sentence begins with the the…
You misunderstand. I already said I do not like that it is just using HTTP, and yes, it is problematic. What I am saying is that the issue the author reported and the issue that AMD considers man-in-the-middle attacks…
While I don't like that the executable's update URL is using just plain HTTP, AMD does explicitly state that in their program that attacks requiring man-in-the-middle or physical access is out-of-scope. Whether you…
> The bots will quite possibly have no extensions at all I imagine most users will also not have extensions at all, so this would not be a reliable metric to track bots. Maybe it might be hard to imagine for someone…
> the idea being that the platform is "someone else's computer" I have a vague memory of once having a userscript or browser extension that replaced every instance of the word "cloud" with "other peoples' computers".…
> the characters ’n’ and ‘o’ differ by only one bit; an unpredictable error that sets that bit could change GenuineIntel to GenuineIotel. On a QWERTY keyboard, the O key is also next to the I key. It's also possible…
Is "clown GCP Host" a technical term I am unaware of, or is the author just voicing their discontent? Seems to me that the problem is the NAS's web interface using sentry for logging/monitoring, and part of what was…
What are your thoughts on the usefulness of tribal knowledge when older (age-wise) employees change jobs? [0] Then, the tribal knowledge they had at their previous place of employment won't be as useful somewhere else.…
> most tech debt isn’t actually created in the code, it’s created in product meetings. Deadlines. Scope cuts. > When asked what would help most, two themes dominated > Reducing ambiguity upstream so engineers aren’t…
> the faded colors, limited palette along with the dithering really grew on me I wonder if the similarity of a faded photo (like a faded polaroid) might have helped with this, especially if already has memories and some…
> ten years from now, people will look back at 2024-2025 as the moment Apple had a clear shot at owning the agent layer and chose not to take it I don't pretend to know the future (nor do I believe anyone else who…
I completely agree with climbing gyms! I'm lucky enough that I live in a city that has a newbie-friendly group that climbs every week and goes for dinner and board games afterwards. I consider myself an introvert, but…
It's obvious in hindsight but to me its really interesting you can collect data points on the community just by chatting with them. Maybe you could guess, by appearance or behaviour or something, whether most people at…
> ...stored in the global StorageDatabaseNameHashtable. > This mapping: > - Is keyed only by the database name string > ... > - Is shared across all origins Why is this global keyed only by the database name string in…
Someone from my high school added me on LinkedIn and works at Palantir. What I find interesting, is that a few months after joining, he scrubbed all posts, descriptions, and mentions of the word "Palantir" in his…
Back when I was in university, one of the units touching Assembly[0] required students to use subtraction to zero out the register instead of using the move instruction (which also worked), as it used fewer cycles. I…
Also wondering how it compares to https://pikimov.com , another browser-based video editor I've seen making the rounds.
> What are the security implications this raises It increases attack surface area on the browser. Even if you do need to "accept" a connection for a device, this isn't foolproof. I imagine adding WebUSB is a…
I do not understand the appeal of the workflow of working on separate things in parallel, then splitting it off into branches/commits. imo, isn't it better to fully focus on one thing at a time, even if it is "simple"?…
The video in question:- https://youtu.be/_mL1uaOgGvc Although the channel is indeed called SWEet, I should have given the YouTube channel handle, SWEetOverflows.
Very cool! I wonder if someone more creative than me would be able to push this to do things it was not designed to do. I recently found a video where someone exploited some properties of certain transcript file formats…
> Never follow a shortened link without expanding it using a utility like Link Unshortener from the App Store, I am unfamiliar with the Apple ecosystem, but is there anything special about this specific app that makes…
> Except every big server has to run an anticheat. Some servers required clients with client side anticheats even. I am fine with anticheat on the server-side to help volunteers/moderators find issues, since it does not…
> Because game studios these days are all about global matchmaking Why not have moderation then? When participating in an online forum, you are essentially "matchmaking" to a topic or corner of the internet with similar…
> they should provide built-in anti-cheat support in the OS. As much as I dislike anti-cheat in general (why incorporate it instead of just having proper moderation and/or private servers? Do you need a sketchy…
> The phrasing of your first two sentences in your first post makes it sound like you're dismissing the security issue. Genuine question, How does it sound like I'm dismissing it? My first sentence begins with the the…
You misunderstand. I already said I do not like that it is just using HTTP, and yes, it is problematic. What I am saying is that the issue the author reported and the issue that AMD considers man-in-the-middle attacks…
While I don't like that the executable's update URL is using just plain HTTP, AMD does explicitly state that in their program that attacks requiring man-in-the-middle or physical access is out-of-scope. Whether you…
> The bots will quite possibly have no extensions at all I imagine most users will also not have extensions at all, so this would not be a reliable metric to track bots. Maybe it might be hard to imagine for someone…
> the idea being that the platform is "someone else's computer" I have a vague memory of once having a userscript or browser extension that replaced every instance of the word "cloud" with "other peoples' computers".…
> the characters ’n’ and ‘o’ differ by only one bit; an unpredictable error that sets that bit could change GenuineIntel to GenuineIotel. On a QWERTY keyboard, the O key is also next to the I key. It's also possible…
Is "clown GCP Host" a technical term I am unaware of, or is the author just voicing their discontent? Seems to me that the problem is the NAS's web interface using sentry for logging/monitoring, and part of what was…
What are your thoughts on the usefulness of tribal knowledge when older (age-wise) employees change jobs? [0] Then, the tribal knowledge they had at their previous place of employment won't be as useful somewhere else.…
> most tech debt isn’t actually created in the code, it’s created in product meetings. Deadlines. Scope cuts. > When asked what would help most, two themes dominated > Reducing ambiguity upstream so engineers aren’t…
> the faded colors, limited palette along with the dithering really grew on me I wonder if the similarity of a faded photo (like a faded polaroid) might have helped with this, especially if already has memories and some…
> ten years from now, people will look back at 2024-2025 as the moment Apple had a clear shot at owning the agent layer and chose not to take it I don't pretend to know the future (nor do I believe anyone else who…