News for hackers. Stuff that matters.

ThreeFx

Re:Why I Write (1946) on Friday April 24, 2026 @07:08AM (#47888547)
That chart implies it is possible for somebody to write a work that wins the Hugo awards for best novelette and best novella, which I’d really like to see happen!
Wow, that's incredible. Even though I'm from Hessen, I never thought of making that connection!
Re:Three ways "formally verified" can go wrong on Monday October 13, 2025 @05:07AM (#45566334)
Now you’ve just shifted the problem to a much harder statement: proving the things the NN recognizes as a rose is actually a rose.

You cannot get rid of the enviroment, and the best thing you can do is be explicit in what you rely on. For example, formally verified operating systems often rely on hardware correctness, even though the errata sheets for modern CPUs are hundreds of pages long.

Re:Putting out the hardware dumpster fire on Friday June 23, 2023 @04:04PM (#36451571)
I think there’s potential for a second-order effect here: generate enough vulnerabilities and SoC designers will start to put it out themselves.
Re:Salesforce NA Outage on Wednesday April 05, 2023 @12:11PM (#35456480)
Looks like a trivial outage, but this is apparently the only region that runs, among others, the US visa application service...
Why is that terrible?

Presumably it is much harder to sell now. If you didn’t want it, why buy it in the first place?

There are even cases where it is context-depedent: Maße (measurements) and Masse (mass). Both are written MASSE uppercased, but how do you know which one's which?

For additional fun: Swiss German doesn't use ß at all, so there is no difference between "in Maßen genießen" (to enjoy in moderation) and "in Massen genießen" (to enjoy in large amounts).

Except that it isn't used widely yet, if at all.
Re:Compiling Rust is NP-hard on Thursday July 08, 2021 @12:13PM (#27773981)
Not really, because for undecidable problems semidecidability can only hold one-way. If it held in both ways then the language would be decidable.

Take the Halting program for example: For a program p which halts, you can determine whether it will halt in finite time (because by definition it halts). However, there is no semidecidable algorithm for "this program runs infinitely long".

Re:How Rainbow Tables Work on Wednesday November 25, 2020 @02:26AM (#25206747)
Nitpick: the reduction function is not one way, since an important property of hashes is that they are easy to compute.
Re:Don't use third party auth to sign in on Saturday November 14, 2020 @08:09AM (#25092080)
Because there is no clear jurisdiction for the web. That's it.
Re:'changeme' is valid base64 on Saturday October 24, 2020 @05:37PM (#24882134)
I must say I never dove into the internals of base64 encoding, but this does indeed make a lot of sense :)

Thanks!

Re:Storks Deliver Babies (p= 0.008) on Tuesday October 06, 2020 @02:23PM (#24700799)
A very very good example of correlation != causation.
Re:Identifying Airtel middleboxes that censor HTTPS traffic on Tuesday September 29, 2020 @08:01AM (#24626621)
The TTL field isn't cryptographically protected though, so it should be very possible that there's an actor after Airtel which does the censoring, no?
Re:A Tale of Two Libcs on Saturday September 26, 2020 @08:04AM (#24598160)
99% of the time the answer is speed. It's just way faster to evaluate and build all of this at compile time than at runtime.

I understand both sides of the argument here - on one hand you have fast and unreadable code and on the other hand slower and more readable code. The problem here is 1. the leaky abstraction of characters and code points and 2. loss of type safety due to C's weak typing rules, which is a bit lost in the "hurr durr messy code."

4 billion is about 32 bits of security, which is most definitely not enough.
Re:I accidentally built a nudity/porn platform on Tuesday August 11, 2020 @08:42AM (#24119669)
The measure law is also known as Goodhart's law: https://en.wikipedia.org/wiki/Goodhart%27s_law
Re:Typing Is Hard on Monday August 10, 2020 @09:05AM (#24108813)
Thanks, fixed!
Re:Typing Is Hard on Monday August 10, 2020 @09:01AM (#24108782)
Since you can pass types to compile-time functions, yes that is correct. Take the example [from the 0.6.0 documentation](https://ziglang.org/documentation/0.6.0/#comptime) for example: At compile time the compiler has to figure out whether to type the `max` function using `u32` or `f64`. Since you can make the boolean condition arbitrarily complex the _type_ of max function called is undecidable in general.

I'm not arguing for or against undecidability in type systems, the page aims to be present the information neutrally.

Re:Typing Is Hard on Monday August 10, 2020 @08:36AM (#24108579)
If you have resources for dart I'd be happy to include it :)
Re:Typing Is Hard on Monday August 10, 2020 @08:34AM (#24108562)
Best known is indeed meant as "most widely known" (although that may be true for only my little bubble). I think it's taught in most type theory / formal methods courses though. If anybody has facts for/against this claim I'd be happy to update the page.
Re:What is 5D chess? on Tuesday August 04, 2020 @05:11PM (#24054534)
This looks amazing! Although I wouldn't be surprised if this was a forced first-player win.
To be fair, those days there (fortunately) wasn't really a useful cryptographic standard to use.
Init7 gets there in 15, they reach AARNet directly from their presence in LAX, however it still takes ~310ms to reach NSW.
Comes with an Intel wifi card if I'm not mistaken. Maybe update the title?
Re:So you want to write your own CSV code (2014) on Friday May 15, 2020 @08:10AM (#23191191)
What's the solution? Semantically it makes sense if it counts for both googlebot and yandex.

Have you observed one/both behaviours?

Re:The modern HTTPS world has no place for old web servers on Wednesday May 13, 2020 @01:10PM (#23169109)
I completely agree on the breaking issues, it is a _lot_ of work to maintain a website these days. In 99% of the cases I'd also agree with you that there should be _no_ reason ever to break e.g. a library used or something.

But the thing about certbot and TLS is that these things are security-relevant, and IMO security one of the only (if not the only) reason to break compatibility these days. TLS ciphers break, heck even the TLS protocol itself may reveal flaws later (see POODLE, BEAST, FREAK, etc.). That's why SSLv2, SSLv3 and TLS1.0 are deprecated: Not because there is a better protocol out there, but because the protocols are inherently insecure. (There is no huge flaw in TLS1.1 I am aware of, it uses MD5 and SHA1 under the hood for master secret derivation, but that's about the only thing).

I'm with you that maintenance is a big chunk of work, but that's IMO a price you pay for being in control. I've got a few services running myself, and honestly I forget about the boxes after setup and enabling auto-upgrades, so it isn't too breaking, at least for me.

Re:The modern HTTPS world has no place for old web servers on Wednesday May 13, 2020 @11:21AM (#23167725)
I think this post misses the point of HTTPS completely. It makes HTTPS sound like some new technology, even though the HTTP protocol is still used, the difference being that the connection is encrypted and integrity protected.

And that said integrity protection is what is important in today's world: advertising is being injected into HTTP content by third parties which is a very bad thing IMO.

If updating your servers once-in-a-while is too much for you, maybe running a webserver isn't for you at all - there are certainly enough hosting providers which handle that for you.

Older »