His top students were capable of entirely understanding Scheme within a day or so (but not capable of entirely understanding all of Python and all of PyPI). He wanted students to be even better than that. He wanted them…
Reformulating this slightly: Yesterday, you saw the first 30-minute segment. Today, you arrive at the multiplex, and are informed that the three 30-minute segments (1, 2, 3) are starting shortly on screens A, B, and C.…
In my experience, things you can ask include: What's the history of this first project I've been assigned to? Who are the most important customers, or types of customers? What's the risk tolerance (unless you've been…
For "With your threat model in mind, they should identify opportunities to add new test cases," one common reason is that security engineers are shared across a large company and it may be very expensive for them to…
We added ChatGPT Operator to UI testing, starting soon after it launched. It's only used as an extra testing step on top of everything we had previously used. A quick summary is: on the plus side, it sometimes gives us…
The letter mentions OAuth but doesn't mention the ongoing work to address the https://eprint.iacr.org/2025/629 findings, CVE-2025-27371.
Both rendering and security issues were relevant. Some of this is discussed under "Deprecate HTML Imports" at https://developer.chrome.com/blog/chrome-70-deps-rems
The TOCTOU is relevant (without suid) if someone can quickly make the right prediction of the tmpname2 value that's generated by the PRNG used by mkstemp, and create a symlink with that value before gunzip is executed.…
https://newscience.org/nih/ suggests that the higher indirect rates at private research institutions may occur because "universities do subsidize research out of their own pockets."
There is a new comment by antirez in the past few minutes: https://github.com/redis-rs/redis-rs/issues/1419#issuecommen...
This may have unintended consequences on chances of a successful application. Now, as a high school senior, you have to compete against an additional pool of strong students who aren't especially interested in MIT's…
it may actually be reasonable to start a page under https://wiki.archiveteam.org/index.php/Category:Closing_proj... to track this
I thought "the Copilot coding assistant was trained on open source software hosted on GitHub and as such would suggest snippets from those public projects to other programmers without care for licenses" was explicitly…
I think "Block if :card_count_for_ip_address_daily: > 4" might translate to "As a customer using Stripe, obtain an IPv6 address from your mobile network operator. Do not share Wi-Fi with a group, such as by renting a…
The essence of the problem is that there's no standard pathname for a personal directory that's guaranteed to be on local disk, even if $HOME isn't. Consequently, people have relied on /var/tmp/$USER for this. There are…
For example, GET /tickets/12/messages/5 has these advantages over api_get_message_from_ticket?ticket_id=12&message_id=5 Avoids writing everything twice: you don't need to name the data fields both in the base URL and in…
Another name conflict is with https://github.com/package-url/purl-spec - which is used for software identification (e.g., see the https://www.cisa.gov/sites/default/files/2023-10/Software-Id... report).
with Gemini, maybe every video that says "comment down below" can be automatically modified to say "comment on the right"
It's not quite as bad as hunger-based pricing where EatUp would cost more on longer flights.
Many U.S. hotels changed that after the Mandalay Bay hotel incident in October 2017. A guest can no longer assume that their deadbolted hotel room door will only be opened in an emergency. Routinely, hotel staff (not…
I guess there's also a chance that a banking app will initially work but then fail after a forced update at a very inconvenient time. Is there a possibility that some use of "integrity signals" (in SafetyNet Attestation…
I'm wondering about the probability that, out of all the affected customers, at least one had the research skills and social skills to identify another customer and successfully ask to meet. Like, for an essay about…
Almost nobody thinks of "earthbound" as suggesting a far-future flight from another world to earth. Instead, the connotations of earthbound are risk aversion, hesitancy to explore and discover, and fear of change. Many…
Another possibility is ML for Cued Speech: https://arxiv.org/abs/2212.01083
Why is a Microsoft Azure team now using "Radius" to mean something different from what another Microsoft Azure team documented as recently as last week? https://learn.microsoft.com/en-us/azure/active-directory/aut...
His top students were capable of entirely understanding Scheme within a day or so (but not capable of entirely understanding all of Python and all of PyPI). He wanted students to be even better than that. He wanted them…
Reformulating this slightly: Yesterday, you saw the first 30-minute segment. Today, you arrive at the multiplex, and are informed that the three 30-minute segments (1, 2, 3) are starting shortly on screens A, B, and C.…
In my experience, things you can ask include: What's the history of this first project I've been assigned to? Who are the most important customers, or types of customers? What's the risk tolerance (unless you've been…
For "With your threat model in mind, they should identify opportunities to add new test cases," one common reason is that security engineers are shared across a large company and it may be very expensive for them to…
We added ChatGPT Operator to UI testing, starting soon after it launched. It's only used as an extra testing step on top of everything we had previously used. A quick summary is: on the plus side, it sometimes gives us…
The letter mentions OAuth but doesn't mention the ongoing work to address the https://eprint.iacr.org/2025/629 findings, CVE-2025-27371.
Both rendering and security issues were relevant. Some of this is discussed under "Deprecate HTML Imports" at https://developer.chrome.com/blog/chrome-70-deps-rems
The TOCTOU is relevant (without suid) if someone can quickly make the right prediction of the tmpname2 value that's generated by the PRNG used by mkstemp, and create a symlink with that value before gunzip is executed.…
https://newscience.org/nih/ suggests that the higher indirect rates at private research institutions may occur because "universities do subsidize research out of their own pockets."
There is a new comment by antirez in the past few minutes: https://github.com/redis-rs/redis-rs/issues/1419#issuecommen...
This may have unintended consequences on chances of a successful application. Now, as a high school senior, you have to compete against an additional pool of strong students who aren't especially interested in MIT's…
it may actually be reasonable to start a page under https://wiki.archiveteam.org/index.php/Category:Closing_proj... to track this
I thought "the Copilot coding assistant was trained on open source software hosted on GitHub and as such would suggest snippets from those public projects to other programmers without care for licenses" was explicitly…
I think "Block if :card_count_for_ip_address_daily: > 4" might translate to "As a customer using Stripe, obtain an IPv6 address from your mobile network operator. Do not share Wi-Fi with a group, such as by renting a…
The essence of the problem is that there's no standard pathname for a personal directory that's guaranteed to be on local disk, even if $HOME isn't. Consequently, people have relied on /var/tmp/$USER for this. There are…
For example, GET /tickets/12/messages/5 has these advantages over api_get_message_from_ticket?ticket_id=12&message_id=5 Avoids writing everything twice: you don't need to name the data fields both in the base URL and in…
Another name conflict is with https://github.com/package-url/purl-spec - which is used for software identification (e.g., see the https://www.cisa.gov/sites/default/files/2023-10/Software-Id... report).
with Gemini, maybe every video that says "comment down below" can be automatically modified to say "comment on the right"
It's not quite as bad as hunger-based pricing where EatUp would cost more on longer flights.
Many U.S. hotels changed that after the Mandalay Bay hotel incident in October 2017. A guest can no longer assume that their deadbolted hotel room door will only be opened in an emergency. Routinely, hotel staff (not…
I guess there's also a chance that a banking app will initially work but then fail after a forced update at a very inconvenient time. Is there a possibility that some use of "integrity signals" (in SafetyNet Attestation…
I'm wondering about the probability that, out of all the affected customers, at least one had the research skills and social skills to identify another customer and successfully ask to meet. Like, for an essay about…
Almost nobody thinks of "earthbound" as suggesting a far-future flight from another world to earth. Instead, the connotations of earthbound are risk aversion, hesitancy to explore and discover, and fear of change. Many…
Another possibility is ML for Cued Speech: https://arxiv.org/abs/2212.01083
Why is a Microsoft Azure team now using "Radius" to mean something different from what another Microsoft Azure team documented as recently as last week? https://learn.microsoft.com/en-us/azure/active-directory/aut...