colonelxc

This very article shows how they use another product that just turns on the pi on a schedule (once a day) to render the updated calendar.

This is part of the reason the Google Safe Browsing project was created. At the time there were a lot of malicious sites either trying to get high SEO or paying for ads. The goal was to make it safe(r) to go to google and search (and click!) on things.

For a project that didn't directly make money (there are some 'cloud' offerings now), Safe Browsing probably was a very high return on investment.

CSL doesn't appear to support software as a 'type' of thing, which it has a hardcoded list of options[0]. Of course, maybe they should have just fixed an existing format instead of creating a new one.

[0] https://github.com/citation-style-language/schema/blob/maste...

The article we are commenting on is about targeted no-interaction exploitation of tens of thousands of high profile devices. I think this is one of the areas where there is a very clear safety value (not just theoretical).

One of the videos has a kid read off a thermometer at 79 degrees (with snow on the ground). You can judge for yourself the size of the fire in that video.

I wondered too, and found this from the debian docs: https://wiki.debian.org/BridgeNetworkConnectionsProxyArp

TL;DR: Some routers don't like it, so layer 3 might work better

Not even the first preauth VSphere RCE this year: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2197...

I was surprised that the (1921) filing cabinet comic featured a "Mr. Google" that did the organizing. I thought this was a case of someone editing a comic, but it turns out that's how it was:

https://www.google.com/books/edition/Filing_Office_Managemen...

It truly has been a long time for you, as you don't even need to lick stamps, they are sticky on their own.

The gov is absolutely responsible. They chose the vendors, they implicitly (or explicitly) approved their storage policies. The time range for these 'temporarily stored files' was Jan 1 to Dec 10 2020, aka a whole year.

Though the 'law' is associated with reading source code, I think it can also apply to people using the code, and reporting errors (sometimes automatically).

They may not be able to fix it, but just noticing there is a problem is a big first step.

usps does scan packages though...

Yes. I interned at a local ISP (DSL provider on AT&T lines), but most of their business was essentially just this type of stuff. Building simple static websites, running some software package for a business (doing the admin+hosting work), and fixing/configuring computers and such at the local businesses.

Businesses like this are really flexible, and seek to serve their local customers with whatever IT needs they have.

But the company has existed for a long time. The higher ups of the company have already vested a lot of stock (which would not be subject to California's reach).

I admit I wouldn't know how options would play out here, but if the reason for the move is 'avoid taxes', they have probably done their due diligence.

One trick google uses is that there are 'standard' templates to start your design doc from. So it has all the sections mentioned in the post, and each section is initially filled with a description of what is needed there (and sometimes links to other supporting materials).

Not everyone will be diligent and fill out all applicable sections, but it does help bring some uniformity to the process.

I agree that short videos can be misleading. But I think it's wrong to say that we're only allowed to get one side of the story, because some media outlets are focusing heavily on riot/looting/destruction of property (and essentially not covering the protests when they are completely peaceful).

Another point is that protesters feel the police should not be using these amounts of force at all.

I think what this boils down to is that it is evidence of use of force. If this was a courtroom, it would be up to to the defence/prosecution to argue each side, and provide whatever missing context would affect the judge/jurors decision.

Like anything in the 'court of public opinion', it doesn't work like that. Police departments (and city/local governments) are free to put out statements defending their actions as well.

Ideally, the person(s) maintaining this repository would respond to extra gathered evidence/context and remove any links where the context determines something else is happening. That would further strengthen their arguements, as it removes arguments of "well that one doesn't was `justified`, so maybe they all are".

But in general, I have to say that any individual has no responsibility to provide 'both sides' of the argument. The police almost always say their use of force is justified, so they're not the unbiased party either.

Google adjust salary based on location. I moved from the Bay Area to the Seattle area, and took a small paycut. And it's not directly COL, they are paying 'market rate' (or, some multiplier based off that) for the area.

I knew I would before I moved (still worth it).

No, they are quite large. The joke is that the "micro"kitchens are larger than people's expensive bay area apartments.

My previous experience, though I wrote software, was more like "research code" instead of "software engineering". We didn't have formal processes (no testing, testing fixes in prod, etc). Our focus was more on the (cool) analysis we were doing and not on the reliability of our systems.

One of the reasons I chose to join Google over another security-related company (that would have done little coding) was that I wanted to learn how to write software better. I've learned a lot about testing, understanding the reliability of distributed systems, writing code for maintainability, etc.

The main thing is that Google prefers to downlevel people who have external experience. I (male) had 5 years of experience, still was hired at L3. I know many others who have the same story.

So the L4 person probably had some better story/negotiation which allowed them to start at L4. It of course could be bias.

It was really frustrating for me to be at the same level as new grads, though on reflection, I was not at a the same level as other L4 employees around. Some transparency around these processes I think could help candidates a lot.

I think the bigger issue is that new-grad phds are almost always hired at L4. They are often less experienced at software engineering than someone with a bachelors and a few years of experience. So unless the person is being hired into an area that actually makes use of their phd, it seems that Google is just willing to pay for the title.

Why couldn't just a new tax bracket at 10mil be added? No need to stretch or modify any others.

I read it differently. They are not advocating against the military, just that they will not participate. They are not trying to say that all CS (or any field) should wholly shun military work, just that they have.

Choice quote:

"""Do you try to keep others from taking military funding?

No. Mine is an individual testimony, and each person makes an individual decision about how they will spend their life's work."""

Do you mean PS4? PS3s were very hard to get at the start.

3 PS3s guy: https://www.youtube.com/watch?v=8sjhjFOw4Ok

Yes you can. The restriction is on what can be put into this "upstream" version.

That is in this post.

Though you have received downvotes, that is a good tl;dr. To expand on it, they had a couple theories about what is driving ipv6 adoption, but there measurements don't support them, so they still don't know.

Did Facebook previously use s2n? Fizz isn't a fork of s2n, so I don't understand the connection (other than they are both TLS libs).

Maybe "Duck", is duck.com available? /s

That is a good point. I don't know, so I've been googling around and came across this awesome article:

https://shipilev.net/jvm-anatomy-park/18-scalar-replacement/

It essentially says that java doesn't (ever?) allocate Objects on the stack, but it sometimes approximates it by just storing the scalar values (that would have been part of the object) on the stack, and never allocating the object (with its headers) at all. The end result is similar.

It also has a mention of an easy way to confuse the escape analysis (though Go's escape analysis has many pitfalls as well).

I'm speculating, but it could be partly that the escape analysis and resulting scalar replacement is a hotspot optimization, and therefore the Java GC has to be well tuned to handle non-jitted items. It may have something to do with what types of failure cases each of the languages have with their analysis.

Go uses escape analysis at compile time to determine where to allocate each variable. If the variable is shown to not 'escape' the current goroutine's stack, then it is can be allocated on the stack. Otherwise it is said that the value 'escapes' to the heap.

You can see what the escape analysis has determined for each variable by building like so: go build -gcflags "-m"

Unfortunately it can be hard to know by just looking at code if something will be stack or heap allocated. You can allocate a struct and take its pointer, and have it still end up on the stack, for instance (which is good). You can also have seemingly obvious flows for a variable that the analyzer can't reason about and it escapes when you didn't think it would. You really just have to run the tool to see if you want to be sure.