News for hackers. Stuff that matters.

CasperDern

Re:The Dirty Pipe Vulnerability on Monday March 07, 2022 @08:29AM (#30587465)
The kernel is relatively easy to compile and install, so I would think that's exactly what they did.
Silero[0] seems to have decent performance (although you will have to some minimal coding). I believe there are better ones if you're willing to tinker a bit more.

[0]: https://github.com/snakers4/silero-models

Re:Expanded Child Tax Policy Slashed Child Poverty on Saturday February 05, 2022 @11:48PM (#30229545)
This can argument can be made for all essential products/services, what you are arguing seems to be effectively UBI causes additional inflation, which may or may not be true.
> or any other identifying details in the request you transmit

You can definitely still use GA if you really wanted to, just not in any way that uses PII (the default).

Re:Deep symbolic regression for recurrent sequences on Sunday January 30, 2022 @08:00PM (#30143127)
The goal of the paper was not to get the best pattern fitter, but to see if it's even possible to do symbolic regression with a simple token-to-token prediction method.
Re:Deep symbolic regression for recurrent sequences on Sunday January 30, 2022 @07:53PM (#30143068)
They used a fixed size transformer, where the vocab determines the functions and input/output range. So unless the model needs more 'memory' for your class of expression there wouldn't necessarily be a big change in performance. They have experiments in the paper with bigger/smaller vocabs.
Re:Rancher Desktop 1.0 on Thursday January 27, 2022 @12:18AM (#30096519)
UI looks nice but is janky. Documentation is lacking, but sufficient. Longhorn works great (if you ignore CPU usage due to syncing when there's a lot of IOPS). Overal though self-hosting it has been pretty great for us from a usability perspective. Not sure if it's as enterprise-ready as they say though. Also haven't had to deal with their sales/support (yet).
Re:Why isn't there a universal data format for résumés? on Monday January 17, 2022 @12:50AM (#29963715)
As inconsistent as it is, "AngularJS" is the correct spelling and casing, that's probably why it kept coming. Just check the official website.
Re:European Union Public Licence on Tuesday January 11, 2022 @08:59AM (#29891508)
IANAL, but I think "to the extent allowed by the law" is a way to allow an overreaching (doing more than the law allows) contract to not be fully voided. It effectively allows you to specify ideals, but also means that the license my not work fully as intended.
Re:Almost Always Unsigned on Sunday January 02, 2022 @04:53AM (#29767325)
> Unsigned does not mean "not negative", it means "modular arithmetic".

Unsigned does mean non-negative (or rather no indication of negatives) as the sign of a number is just the positive or negative factor of a number: 1 or -1.

Re:Fastmail search is better than Gmail on Saturday January 01, 2022 @03:05PM (#29762109)
It's actually an interesting discussion. After thinking about it for a bit, it seems like Google is a search company fronting for it's own ad business. In the early days their core technology probably was search but at this point it's likely adtech. At this point it doesn't matter if their search is bad (it's probably better if it is bad, as more time is spent seeing ads) as long as they are the dominant/default search engine for the general public.

There are a lot of opportunities for a better search engines but very little incentive invest into making it so.

Re:I Don't Understand NFTs on Thursday December 23, 2021 @08:25PM (#29668887)
The talk: https://youtu.be/i_VsgT5gfMc (Unable to edit the parent)
Re:I Don't Understand NFTs on Thursday December 23, 2021 @08:21PM (#29668852)
I recommend watching this interview with the creator of NFTbay, there are a lot of misconceptions on it's current usage.

TL;DW: it's an immutable representation of some data (usually a hyperlink), put on to a public blockchain such that ownership of this representation can be verified.

Not much different to a regular certificate just different trust assumptions (certificates use a trusted party, while NFTs use a "trusted" technology).

Re:HTTP/3 Is Fast on Wednesday December 15, 2021 @05:32AM (#29564095)
I do not know about cloudflare's internals, but I believe the 6 connections limit is purely a browser thing. So it should be able to do as many connections as it's able to handle.
Re:The Joy of Cryptography on Wednesday November 24, 2021 @11:12PM (#29338156)
Not an expert, but I don't think it's necessarily a weakness in the current applications of cryptography. In something like RSA a typical key is >=1024 bits, which is 1.7e308 possible number so even though primes are more "limited" the actual reduction in security (if non-primes could have been used by magic) the primes that are left are still plentiful. One reason RSA is not really used anymore is because other algorithms such as elliptic curve cryptography provides much better efficiency (partially due to it not requiring primes keys). So it's less efficient than more modern technologies, but not necessarily weaker.
It's been a while, so I'm not sure if it will work on the newer models, but I used to use the xtensa-lx106-elf (patched from crosstool-NG[0]) toolchain to build my ESP8266 project and then upload it wil esptool.py. There was also esp-open-sdk which was an installer for that toolchain and some additional libraries[1].

[0]: https://github.com/i404788/crosstool-NG [1]: https://github.com/pfalcon/esp-open-sdk

Yes, it's pretty common in the modern web (search terms: ECDH, TLS). In this case it would be as fast as any E2EE connection.
> Typically 15% now.

Only because of the (still ongoing) anti-trust lawsuit against them.

Re:Delft café premieres with EEMCS blockchain euro on Wednesday March 10, 2021 @04:14AM (#26409361)
> The customer scans the code, sees the amount to be debited, and presses OK. The amount then moves from one phone to another without the need for WiFi or another wireless network

How does the business verify a transaction was successful? It seems like information only flows one way.

Re:DALL-E Paper and Code on Wednesday February 24, 2021 @05:39PM (#26257119)
The repository linked is just a part of the entire model so it can't be used as is.

That said there is a completely implementation made by lucidrains[1] with some results, the only missing component now is the dataset.

[1]: https://github.com/lucidrains/DALLE-pytorch

Since KiCad 5.1 you can have more than 2 layers.
Re:RSA: Theory and Implementation on Tuesday September 03, 2019 @06:33PM (#20871949)
RSA is pretty easy to implement, but hard to get right, PKCS#1v1.5 can be broken using padding attacks, and should not be used. OAEP is generally recommended.

The entire RSA suite (keygen, encrypt/decrypt, padding) can be implemented in about 300 loc[1]. Which is probably why there are so many of these 'walkthroughs'.

[1]: https://github.com/i404788/tiny-rsa