brewmarche

Out of curiosity, what happens with a custom DNS server but still using DHCP? Will the suffix still be used?

Time to make the suffix configurable and default it to something standard like home.arpa (or .internal once it’s official) or a sub-domain thereof, AVM.

To me the root problem still seems to be that we use FQDNs virtually nowhere even though that is the intention. Linux and macOS not applying the suffix for multiple labels is just an implementation detail. Maybe we should standardise the behaviour and maybe it’s better to turn it around: consider everything an FQDN and provide an escape mechanism (e.g. an xx-- prefix or an escape TLD)?

Looks like they’re calling the mupdf CLI, which makes chai not a derived work of mupdf IIUC. This would mean that AGPL applies to mupdf only.

The thing missing is that DMARC ensures alignment with the From header as well which SPF and DKIM don’t do.

SPF is about the domain in the envelope address.

DKIM signatures can reference any DKIM selector on any domain.

But DMARC also checks that the domains used match the domain of the From header. DMARC passes when at least one of the two is aligned. It’s possible to require strict alignment (exact domain) or allow subdomains as well.

> Support for up to two external displays: MacBook Air with M3 now supports up to two external displays when the laptop lid is closed

As a mathematician I like the positional notation, but once we assign meaning to the slots it gets weird, so I had the same objection.

One could add some new notation to distinguish the element _T_ from the slot _T_. For example let’s write slots as _[T]_ (I’m not creative enough to come up with something good), then we can talk about ∂_[T]F or ∂F/∂[T].

One can think of the [.] operator as mapping from “semantic symbol” to slot number in a way.

OIDC actually already handles this by requiring the `sub` claim to never be re-assigned and unique: https://openid.net/specs/openid-connect-core-1_0.html#IDToke...

Of course this means that an ID token should not contain an e-mail address under `sub`.

Another potential problem: https://en.wikipedia.org/wiki/Chimera_%28genetics%29

But without DMARC will they verify alignment of bounce address (Rfc5321.MailFrom)/signing domain with the header from (Rfc5322.From)?

To illustrate why OIDC introduced audience validation:

When you separately request user info from an endpoint with an access token (which according to OG OAuth2.0 is just an opaque string, which cannot be validated) that access token could be someone else’s, possibly from a user who logged into a different, malicious application which somehow managed to trick you into using that token

If you want to refer to the symbol in a neutral way there is the term trema

Oof, I’ve complained about practical problems in my developer life above, but that’s even worse than I thought. I was able to reproduce dh1024 and no-sct on my work laptop with zScaler. Interestingly it blocks the revoked one by turning it into a self-signed one.

Also failing:

- pinning-test

- all dh*, except for dh480 and dh512

At least for me that’s the problem. When I open the redirect url manually it also fixes the problem for some time.

You can open the Teams developer tools to check this. Click the taskbar icon 7 times, then right click it. Use dev tools for select web contents, choose experience renderer AAD. Search for GIFs in Teams and monitor the network tab

Man, here I am reading this while fighting zScaler when connecting to our new package repository (it breaks because the inspection of the downloads takes too long). No one feels responsible for helping developers. Same with setting up containers, git, Python, and everything else that comes with its own trust store, you have to figure out everything by yourself.

It also breaks a lot of web pages by redirecting HTTP requests in order to authenticate you (CSP broken). Teams GIFs and GitHub images have been broken for months now and no one cares.

There’s NSubstitute. Haven’t used it personally but I’ve read good things about. I will have to look into at work as well since we’re also using Moq.

I know 𝟙_X as the indicator function (also called characteristic function) of X in measure theory and probability theory, but I’ve also seen 1_X or χ_X.

ⅈ and ⅉ can be basis vectors or imaginary units although I’ve never seen them in blackboard bold in my lectures.

httpyac is also very compatible to .http support in JetBrains IDEs. JetBrains also offers a free CLI tool to generate jUnit test reports from .http files.

Yes. Where does it expose the AVX or ARM intrinsics? I only see generic add/neg/mul methods (thus the comparison to .NET Vector<T>) and not the intrinsics exposed thhemselves; here is a random pick from the .NET ones: https://learn.microsoft.com/en-us/dotnet/api/system.runtime....*)

AFAIK the Java Vector API is like Vector<T> not like the intrinsics one

IIRC a lot of logos technically don’t meet the threshold of originality so they’re not even copyrightable

Not the original poster, but I think they talked about DNS search suffix lists. Often seen in company networks where host foo.internal.example.org might be reachable via foo because internal.example.org is the search suffix. That will not happen with `foo.`

Would `volatile` help with the barrier?

Re the multi-threading issue, it should be possible to stop the profiler thread in the hook, if we keep a reference to the thread, no?

Agree. Typical FP with ADTs would lead to the same kind of data-driven style. The point at which he went too far for me is probably the struct layout optimisation (every shape has two defining numbers, it feels a bit restrictive). For me that’s the point where I’d check whether it’s really warranted and if so create new types to distinguish the original domain (Shape) vs. number crunching (ShapeDefinedByTwoNumbers - needs a better name).

C# 10 introduced interpolated string handlers. They allow to address some of your points (you can handle format strings however you want and you could also choose invariant culture by default, without using FormattableString.InvariantCulture) and at the same time avoid allocations.

I vaguely remember a web server set up for language content negotiation failing to determine which version to send and giving me a list of links to the individual language versions instead.

I think it was Apache and the negotiable resource was called X.html while the individual linked versions had names like X.en.html etc.

Might that have been a 300 response?

There is an RFC but it just mentions + as an example of a possible sub-address separator when discussing sub-addresses in Sieve filters. Whether or not + acts as a sub-address separator is server-dependent.

However as has been said, even without intent to publish there might be civil damages involved.

It is not criminal to _shoot/film_, however it is a criminal act to _publish_ videos/photos with people when they have not consented. There are many exceptions though (famous persons, people accidentally in the picture not being the focus, public demonstrations and other events — maybe not the best translations, just to give some ideas)

This is a standard result which you can look up in most text books, or here on StackExchange: https://math.stackexchange.com/questions/57686/understanding...

In the end it doesn’t whether we go to infinity in one norm or the other.

Note that I am talking about finite dimensions, so I guess you didn’t mean the L^p norms or \ell^p for integrable functions or sequences but the finite-dimensional p-norms.

Norms are for dealing with magnitude not direction (and were brought up by my parent commenter). If you care about direction specify an angle, quadrant, cone or other subregion that allows you to take the limit to infinity which then doesn’t depend on the norm. Note this is the same in the univariate case where we talk about left and right tail if we need to distinguish.