dafelst

At most you are going to make a few thousand, maybe if you're super lucky and skilled, a few tens of thousands of dollars on bug bounties. Compared to the amount of poorly-secured money that was/is in crypto, it is a pittance.

Add to that the fact that many of the hacks are largely legal consequence free due to crypto's famous lack of regulation (by design, lol), the economics are far more skewed towards the black hats over the white hats.

It turns out there are different rules for different customers

Depends how much they're selling it for, support contracts, etc. With the right combination of those, 2MM copies could be amazing.

It is in the article:

Finally, because air humidity diffuses in three-dimensional space and the thickness of the Air-gen device is only a fraction of the width of a human hair, many thousands of them can be stacked on top of each other, efficiently scaling up the amount of energy without increasing the footprint of the device. Such an Air-gen device would be capable of delivering kilowatt-level power for general electrical utility usage.

I have been consistently amazed by Lukas Pope's creativity, drive and technical prowess, he truly is a rare person.

It is bizarre to see people rediscovering the same stuff that we were doing during the early days of the dynamic web and the web application (probably circa 2000-2003 ish?) with partial rendering via API endpoints.

What is old is new again and all that.

Ah yes, 13 year old information. Maybe it was true then, it is not now. Cutts had a known pattern of denying anything and everything about their ranking data until cornered (see his video with Harry Shum of Bing when they caught Bing stealing Google clicks), so I would recommend against using him as a source for almost anything these days.

Believe what you want, but apply some basic logic - why would they not use data they already have?

They haven't said it, but they absolutely do it, or at least did about 7-8 years ago.

Source: used to chat with Google search engineers about web spam back in the day at conferences.

There is a great story of perseverance and patience in this thread, the person keeping the bug thread alive is truly doing the gods' work.

Why is this so strangely relaxing? What an amazing idea.

I mean this is a clever hack, but it is not a Google vulnerability per se, it is a vulnerability in a public open source tool chain that they use, i.e. pip.

It is working more or less exactly as it should, the employees in question are just downloading untrusted packages inadvertently. This is something that could happen anywhere, even without private package repos.

The issue discussed in the article is that the NY Port Authority has regulations to clamp the prices of these items to comparable items in NYC (based on the average of the 3 lowest cost comparables), and they are not being transparent on which comparable items (if any) they are comparing to.

So no, it is not just a simple issue of supply and demand, it is an issue of lack of governmental transparency.

Privatized health care as a person's sole option for care is an absolute dystopian nightmare. Any system that requires balancing human suffering against profitability is inevitably going to optimize for profitability.

The fact that this is even a thing is mind boggling.

How the hell is there an RCE in ICMP in 2023?

I remember exploiting fragmented ICMP packets on Windows 95 in like 1996 to blue-screen people using the IcEbx extension for the BitchX IRC client, I think the exploit was called sping maybe? The fact that a such a vulnerability can even exist in such fundamental code these days is mind boggling, especially when bugs in the same family were around in that stack 25+ years ago.

Between this and today's TPM exploit, I have to admit the RiiR folks are starting to have a point.

What a fun idea

A bunch of my former co-workers at MSFT are working from home 100% of the time. Maybe it is a per organization thing.

Pro tip: if you think you will need to profile/trace any natively compiled code at runtime (e.g. some kind of long running service in production) then for the love of god, please don't enable "omit frame pointer" - it can mean the difference between actually readable callstacks/flame graphs and garbage. The days of it having a huge impact on performance are gone, at least from my experience - disabling omitting frame pointer has made no significantly measurable difference to any services I have run in recent years, though you should always confirm that is true for your own case.

So while this article is about Go, it definitely applies to C/C++ as well.

Some companies actively enforce their rules on discrimination and/or bullying due to homophobia, some turn a blind eye.

I am a game dev, so work in Windows for the majority of my time. I wanted something that would show the current working directory of my windows terminal in the title bar of the window so I could see which one was which on the taskbar and during alt-tabs, so I cobbled together a combination of publicly available doskey macros to do it.

You can modify Unreal Engine as much as you like to ship a game and the engine changes remain your property, you just have to pay their royalties.

At least that is how it is in practice - the language in the license agreement is actually a little fuzzy, when our game was sold from one company to our current one, the lawyers had a bit of a frowning session over some of the language there, but ultimately decided it was okay. Maybe in the future it will be challenged, but for now, self-owned engine changes are the norm.

It is certainly doable, there is a plug-in on the UE marketplace that meaningfully extends Unreal's movement replication to do nicer interpolation and extrapolation of movement, it is called SmoothSync. We used it in lieu of UE's character movement component on the vehicles in the game we shipped a couple years back. It is a bit heavier on bandwidth (to their credit, Unreal's movement component replication is VERY lean) but still well within budget.

The code is horribly ugly, but works well. The ugliness I think is less to do with integrating with Unreal and more to do with the author though. That said, it works.

That looks like someone scanning for vulnerabilities in things like outdated/misconfigured WordPress.

This looks cool, but hopefully does not run afoul of Tableau's (and now Salesforce's) many patents in that space.

IIRC part of the reason certain features couldn't make it into Microsoft's PowerBI was because of those.

Ahhh, so perhaps the position indicates the frequency and the brightness indicates the magnitude of the frequency? That makes sense - in that case the atricle's approach feels more like you said, a manually applied band pass or comb filter, i.e. it either removes or attenuates signals within certain frequency ranges.

It has been a long time since I have done anything in this domain (20+ years), but if I understand correctly, the original article author is essentially filtering out high frequency signals by painting over the bright FFT spots, essentially creating a localized low-pass filter or maybe band-pass filter.

FFT essentially just transforms data into its frequency domain, so I assume the representation shown in the article is just that, brighter spots indicate higher frequency information (which would come from all the little spaced dots), so killing those essentially smooths the noise out of the data.

I imagine that the same effect could be automatically achieved by identifying which frequencies to filter out to get the desired effect.

I've had missing bags delivered at least two or three times, and it's always just some dude in an unmarked car ala an Uber or Lyft. These couriers are just usually gig workers from what I can tell, and like peer comments say, this is probably just some rando ending up with some luggage that they are unsure of what to do with.

I'm not saying it is good, but it likely explains it.

Seems reasonable, it is hopefully on track to head towards something closer resembling its actual value.

Repositories for games are often larger than 1TB, and with things like UE5's Nanite becoming more viable, they're only going to get bigger.

Perhaps that is because they run out of money and can't keep throwing shit at the wall to see what sticks?

Pretty much always, I can afford it and hopefully it makes the lives of the workers better. Of course I would also like employers to pay a livable wage, but I can still tip and do whatever I can to help advance the cause of improving wages, they are not mutually exclusive.