its-summertime

As far as I know, only Motorola is given access to the driver source code for all the chips, which then as part of using it, they are obligated to release it, which then GrapheneOS can then access and use it.

As a result, Motorola's software support is just as important as Motorola's hardware

For those with difficulty accessing:

- - -

From: Anthony Hurtado <[redacted since hn has no scrape protection]>

vpk_read_packet() divides vpk->last_block_size and (par->block_align - vpk->last_block_size) by par->ch_layout.nb_channels without checking for zero.

While vpk_read_header() validates nb_channels > 0, the codec parameters may become zero through format probing misidentification (VPK probe score is 2/3 of AVPROBE_SCORE_MAX) or codec parameter reset, causing SIGFPE.

Fix by:

- Checking nb_channels != 0 before division in vpk_read_packet

- Returning EOF for empty last blocks (last_block_size == 0)

- Validating block_count > 0 in vpk_read_header

- Validating last_block_size <= block_align in vpk_read_header

Found by fuzzing with libFuzzer + AddressSanitizer. Reproduces with 10 distinct inputs.

[patch redacted for brevity]

There is training systems and validation of skills in mturk iirc: for tshirt folding, you'd be given fake setups to be able to get used to controlling the robot, if you can't do it, you won't ever get assignments to do it. For traffic overrides, you'd be tested on having correct knowledge, and once again given supervised tasks to show you can actually be trusted (and there would be safety systems, elevating tasks that can't be performed at your level to people who can, etc)

The worker needs to do a bunch to opt into any given work group, which makes the (lack of) payments extremely unreasonable on top of everything else

> but rather that we need to focus on finding and fixing vulnerabilities and misconfigurations in these environments.

And how long will that take? It's already well past due.

Protocol Labs owned significant parts of the infrastructure. Regardless of community support, PL leaving would always be damaging.

Kubo, Helia, Boxo, Rainbow, IPFS Desktop, IPFS Companion, Someguy, Service Worker Gateway, IPFS Check, libp2p, ipfs.io, dweb.link, check.ipfs.network, delegated-ipfs.dev, Wikipedia-on-IPFS.

It kinda feels like the AWS or Azure of file distribution, so much stuff so confusing. Also apparently with Protocol Labs owning several of those things despite not operating those things?

Ironically seems quite a fragile setup.

Regardless, very sad news.

    tar -c x | head -qc $((18*-512)) | gzip > x.tar.gz
    tar -c y | head -qc $((18*-512)) | gzip > y.tar.gz
    cat {x,y}.tar.gz | gzip -d | tar --list

seems easier to just not have the EOF marker, if you need to append stuff later

The title doesn't match the paper, which is about the results of improving the pre-existing hotlines setup, not about implementing a hotline or not.

This incorrect conclusion is directly called out in the paper:

> These estimates should be interpreted with a few limitations in mind. First, because 988 was implemented nationally, the design estimates the effects of greater exposure to 988-related local capacity expansion, not the total national effect of 988 relative to no crisis line.

Imagine a future where 99% of text is written by 1 unpassionate person. Reading the same patterns, the same tropes, the same flow across paragraphs, over and over, would be unpleasant. It already is unpleasant.

> My error was believing Anthropic that their system wouldn’t adulterate and corrupt the semantics of the text their models generate.

Has that ever been the case? Are they not actively tweaking their models, their fine tuning, the system prompts, the tool definitions and implementations, the guard rails, tool calls, instant responses. There are hundreds of knobs that they can change daily, or between each prompt, or even half way through a generation.

If AI is used for the code, why isn't it disclosed? Or did Valve remove the disclosure?

We have its actual reasoning traces, and we have these psudotraces, distribution / nativeness is testable now

It seems they considered water boiling in their numbers, which makes this estimation very non-portable across countries (e.g. countries where gas hobs are used, but also electric kettles are used)

The paper: https://doi.org/10.1093/pnasnexus/pgaf341

The numbers:

[...]

We estimate average total residential long-term NO2 exposure across the United States to be ∼10 ppbv for people who own a gas stove (∼18 ppbv or more for households in the top 5% of gas burned while cooking) and ∼8 ppbv from total outdoor exposure for those with electric stoves, which cause no additional NO2 exposure.

[...]

Stratifying exposure by gas stove use intensity (i.e. by amount of gas burned while cooking, [...]), we find that people in households burning the 5th, 50th, and 95th percentiles of fuel nationally on average are exposed to 0.03 (95% CI: 0.01–0.07) ppbv, 1.7 (95% CI: 0.8–3.5) ppbv, and 10.3 (95% CI: 4.8–21.7) ppbv, respectively, of additional NO2 exposure from using their gas or propane stoves.

[...]

Who's end state took / is going to take more tokens / money, however?

"LLMs reward expertise" is the title, not that "LLMs only make things possible for those with expertise"

No it can't, but yes it can, just not like that.

https://github.com/gorhill/uBlock/wiki/Resources-Library#now...

As can be seen, it matches on the source, not the destination

https://github.com/gorhill/uBlock/wiki/Resources-Library#web...

can match on the destination, however.

Its not a good state of things, but I'm assuming its more of an issue on the browser side as opposed to the extension side

Filter bubbles and what not, but, googling the term only had Seinfeld show up on the bottom of the fourth page. Bottom of page 2 in a private tab.

Using it correctly would not solve the issue at hand however.

I think the effect was less about it being correct or not, but instead more about if fly.io would treat humans as first class users compared to agents or not in the future.

The message is fine, but it was a weird choice to have it on fly.io instead of a personal blog

> Five of the most dangerous words in startups are “¿Por qué no los dos?”.

So are the prior products going to be shut down? If not, then when? if not when, then why not?

Searching for something like "USB-C OTG slim" will help find up shims that can be stuck in the end of USB-A Male plugs to "convert" them to USB-C, and from my testing just now, seems to work for charging.

the statements of wayland being slow or not need a lot of context: what version of the game they played, the display server, the game settings, the display server settings, the monitor's feature set, the video card's feature set, the video card driver version, etc.

https://direct.playstation.com/en-us/buy-games/death-strandi... Death Stranding 2's Physical collectors edition only comes with a digital download.

When I read "inclusive", my mind jumped to accessibility, in that colloquialisms can be difficult to understand for a subset of people with autism (and other conditions), and also that they translate poorly when run through a translator, for those that do not speak English at all.

Disney Vault comes to mind instantly. There was also limited periods for buying deluxe/collectors' editions of both movies and games.

(Releasing collectors' editions of an IP before the very first episode/movie/game/etc is a whole another issue just by itself.)

> The KEK updates are going out at ~98% success, and db update is ~99% success

glad to see the opt in fwupd analytics being so useful for something like this

Not envious of the running around contacting vendors they must of been doing on such short order.

> To be fair, they were proven right about automated spam, phishing and disinformation being a problem

When the company that enables this, makes the predictions in the first place, that is a self-fulfilling prophecy.

I think the more likely goal would be immunity to regulation.

Because liability is likely to be weird in a lot of jurisdictions. I could see incorrectly tagging content as having bigger ramifications than not tagging content.

How does one know what to tag their content as, if they do not know what tags are used by the other party? A standard where every party makes up their own rules as they go along, doesn't exactly work well.

There is an unfortunate lack of unity for such things. It would work if governments made it easily understandable how to categorize content, but the vast majority is handled by closed boards of people, so no "case law" exists for the difficult edge cases.

Additionally, some jurisdictions have laws based around religious and cultural values which are not immediately obvious, I'm sure many webmasters would be happy to spend 30 minutes or so writing something for such a framework, but the current subsequent obligation of learning the laws of relevant jurisdictions, the decisions of age rating boards, etc. would blow things out to weeks of research and potentially quite a bit of lawyer money.