“You should willing expose yourself to danger to protect the profits and business models of corporations who are attempting to monetize your attention and personal information.”
I really don’t think I’d lose any sleep if suddenly YouTube, Facebook, etc, became unsustainable. I remember what the Internet was like before every dumbass MBA decided to try to wring as much money as possible out of it, and I preferred it that way.
Ad block is the number one thing you can do on the Internet to reduce your risk to exploits, phishing, etc. The US government recommends the use of ad block specifically for this reason. Usage of ad block is basic internet security hygiene.
If only there were other things that a person could do outside of voting once every four years to participate in the political process.
Hey, look at that. It’s the inevitable consequence of the game theory of first past the post voting. Voting system reform is my #1 issue, and if you actually care about the fact that “99% of voters” are locked into voting for someone they dislike to avert disaster every 4 years, it should be yours as well.
There is no meaningful future for third parties until and unless this occurs. IRV is a good first step, but Score voting is better. Multimember districts are also important. Getting rid of the electoral college is a no-brainer.
A problem that only affects newbies huh?
Let’s say that you are writing code intended to be deployed headless in the field, and it should not be allowed to exit in an uncontrolled fashion because there are communications that need to happen with hardware to safely shut them down. You’re making a autonomous robot or something.
Using python for this task isn’t too out of left field, because one of the major languages of ROS is python, and it’s the most common one.
Which of the following python standard library functions can throw, and what do they throw?
bytes, hasattr, len, super, zip
Too bad you’ll never receive that option from any manufacturer.
The scam is that they are actually doing the work, getting paid well
Listen. I know that there are some really shitty stuff going on in North Korea, and very real threats that their government is capable of, and it sucks for the people living there who have to do this work under threat of death.
But if you say that “the scam” is they’re doing work and receiving full pay for work done, I’m going to make fun of you. Oh no, someone outside of the West did work and was slightly less exploited by capital than usual in the process. Horror upon horror.
Please don’t tell me you, unironically, actually use the Carmack rsqrt function in the year of our Linux Desktop 2024.
Also if you like, you can write unsafe Rust in safe Rust instead.
std::mem::transmute
Not quite. Their “malicious” extension only got a few hundred installs. Using the data gathered by that extension and via other means they were able to locate other actually malicious extensions. Those total in the millions of installations.
Through this process, they have found the following:
1,283 with known malicious code (229 million installs).
8,161 communicating with hardcoded IP addresses.
1,452 running unknown executables.
2,304 that are using another publisher's Github repo, indicating they are a copycat.
To add, let’s do some math!
Let s be the total annual salary of every employee using Adobe. Our goal is to find the productivity ratio r such that changing to Gimp and open source more generally is a net positive from the standpoint of productivity and labor.
s/r will be the total annual salary after changing over, because (for instance) if r = 0.8 then LTT will need to either hire or work his existing hires 1/0.8 times longer, giving (at best, ignoring overtime and so on) s/r as the new labor cost.
We then subtract the current labor cost to get the switching cost s/r - s, and if this is greater than $10,000 then the switch is not worth it.
For instance, let’s say LTT employs 1 person at $50k/year. He’s a bit of a skinflint. We solve for r and arrive at a ratio of 5/6 or 83.33%.
If we have a different world where LTT hires 10 people and pays each of them $100k, we solve for r and get about 99%.
In other words, the switch is worth it only if the labor cost is small, so the extra labor is not very expensive, or the difference between the two software is negligible.
For those curious: Gothic 1.
I’ve never heard of it before and it doesn’t look like my type of game. Anyone played it?
What about Elisa? I was under the (potentially mistaken) assumption that Elisa was the successor of Amarok.
I am sorryI am sorryI am sorryI…
Most closely matches the behavior of actual SNES consoles.
This requires very careful emulation of the timings of the various buses and co-processors, as well as on-cart chips which may or may not be present. For instance, a Speedy Gonzales game has a button in the final stage which crashes almost every emulator because enters an infinite loop reading from an open bus and waiting for the value to attain a specific pattern. However reading from an open bus is generally specified to be the last value loaded into the bus, which in this case is the load instruction itself, $18. So the value is read to be $1818 by most emulators, which doesn’t match the pattern expected.
However, this is only if you’re emulating with instruction level accuracy. It is possible for the value of the bus to change in between the instruction being loaded and the value of the bus being loaded due to an HDMA load being triggered, but this requires a cycle accurate emulator.
Be careful, the small partitions might be UEFI partitions (/boot and /boot/efi) and are required for booting your computer.
Well, the problem is you don’t know what you don’t know. One of the first example tasks in the paper was regarding implementing a symmetric cipher. Using a weak cipher was recommended by AI tools sometimes, these developers didn’t know that some ciphers were weak. Additionally, even when the AI tool recommended a strong cipher, such as AES, it generated code that screwed up an implementation detail (failing to return the authentication tag), making the result insecure. And the user didn’t know it was wrong because they didn’t know it was incomplete.
There’s no substitution for domain specific knowledge. Users who were forced to use traditional tools got the answer correct significantly more often because they had to read, process, and understand the documentation for the libraries, which meant they understood why the symmetric cipher was the way it is, and what additional information needed to be reported and why.
LLMs are bad for the uses they’ve been recently pushed for, yes. But this is legitimately a very good use of them. This is natural language processing, within a narrow scope with a specific intention. This is exactly what it can be good at. Even if does have a high false negative rate, that’s still thousands and thousands of true positive cases that were addressed quickly and cheaply, and that a human auditor no longer needs to touch.