jan_Sate

Anyone else doesn't like modern minimalist icon design? It looks boring.

ew! why? Why?

So that's what the people were using before commercial flights were common.

The title of the article is misleading. The API documentation is indeed useful but I wouldn't call publishing the API documentation open source.

They're just publishing API documentation. No source code of the device got published.

At least people can create their own implementation of the API tho.

Looks like that I can cut it without right click by swiping fast enough.

The game's name reminds me of the Russian word for state/district/region. I was right. It's an intended pun. The game's title screen on the screenshot in the article has Russian on it.

That's a bad idea. It isn't deterministic. How do you even make documentation for users for your generative UI? It looks different for every single user.

I've also made my own implementation of CHIP-8 emulator. I was surprised that it only took me a few hours to got it working. I reserved a week for the project.

One thing interesting about making emulator is that, it's all-or-nothing. You can't tell if your implementation's working until you finish it. For my case, I did end up having a few minor bugs, which I promptly fixed and got the whole thing working correctly.

Maybe I should try implementing extensions next, when I've got the time for that. :)

Impressive. That's what I read HN for!

That's odd. Why would you want to rely on Cloudflare for airport stuffs?

Obligatory xkcd: https://xkcd.com/927/

This. The code is like 10 lines long. I might as well copy that from Stackoverflow and adapt that for my own use. Why bother packaging that?

It depends on which jurisdiction region wants to enforce the law. If someone wants to enforce a law, and it succeed, then the law of that jurisdiction region applies.

Dropped you an email. :)

Not closely relevant but I've revamped my personal website earlier this year to bring the old web vibe into it. I've got a 88x31 GIF section and I wonder where I could look for other old web sites to cross link with my site.

Interesting. So much fun clicking around on the website. Not that I'm addicted to online shopping tho but still a pretty fun site to play around with.

Not exactly. The real utility value of LLM for programming is to come up with something new. For Space Invaders, instead of using LLM for that, I might as well just manually search for the code online and use that.

To show that LLM actually can provide value for one-shot programming, you need to find a problem that there's no fully working sample code available online. I'm not trying to say that LLM couldn't to that. But just because LLM can come up with a perfectly-working Space Invaders doesn't mean that it could do that.

Woah. That's tough. I scored 12/26.

I'm surprised to find that there're so many feature of f-string that I've never heard of. I don't think I'm gonna use them any time soon but nice to know about that.

I don't get why the US thought that it'd be a good idea to vet social media accounts for visa applications. If someone's having ill intent, one could easily create a burner account and fill in some random content for the sake of getting thru the visa application. Or they could even just purchase an account somewhere on the internet.

Sad to see what US has become.

That's just the base/stock/instruct model for general use case. There gotta be a finetune specialized in translation, right? Any recommendations for that?

Plus, mistral-small3.2 has too many parameters. Not all devices can run it fast. That probably isn't the exact translation model being used by Chrome.

Impressive. Interesting how it took that long until someone found the triggering mechanism of this easter egg. Reverse engineering is tough.

Now that I wonder where I could learn RE? Where do I even start? Got any recommendation of online tutorial or book or something?

so it's for drawing attention on social media?

bwahahaha! How come that'd be a "yes" then? It's all wrong!

hahaha. That video showing the bug. It's literally bugs flying around everywhere.

Interesting. In my mother tongue it's called "back side" instead of "dark side". Looks like that "back side" is a more correct term for that.

Good question.

I haven't tested that but I think it's possible to modify the fragment with Javascript: https://stackoverflow.com/a/4282075

So my idea would be getting looo.ong to create a special client-side redirection webpage that would remove the fragment part using Javascript before performing the redirection with Javascript. And no. Using HTTP redirection response on server side won't work.

EDIT: I've actually seen URL redirection websites that removes the fragment part so it should be doable. Perhaps the purpose of that is to avoid spam abuse.

GET arguments are not redirected to the spam site because when the url redirection site has received the GET argument, the GET argument would generally be discarded/disregarded before redirecting the user to the spam site.

Be wary with making this kind of website. I made something similar long time ago (urllengthener.sadale.net) and got my site reported for "spam campaign". Turns out that the spammer was abusing my site to generate spam link. I handled that promptly by shutting down my site and didn't receive any penalty for that.

The way how it worked is that the spammer used my urllengthener as a redirection service to a website that looks like an incomplete project, which is actually a disguise. There's javascript code on their site that if there's a URL fragment identifier (the hash thingie postfix for URL) detection mechanism and if the URL fragment identifier matches an ad of their own, it'd redirect to the actual spam ad.

Let's say the spammer owns example.org. The spammer would generate link with my service such that https://urllengthener.sadale.net/foobarbaz would redirect to https://example.org. Then it'd send spam with a link of https://urllengthener.sadale.net/foobarbaz#identifierXYZ to the victim. Then the victim would click on the link, which redirects him to https://example.org/#identifierXYZ, which would show victim the ad. https://example.org/ looks legit on its own and there is no log shown on the HTTP server because the URL fragment identifier is a client-side thing. I'm kind of thankful of that spam abuse report. Otherwise I might have never found out.

(Remarks: example.org isn't the actual spam site. I just use this domain name as an example.)

I don't have the time for now but I think I should make a write up about that some time later.

And I've tested your service and apparently your site is vulnerable for the exact same kind of abuse as mine. I'd strongly recommend you to at least disabling redirection of URL fragment identifier. Example of URL that's prone to abuse: https://looooooooooooooooooooooooooooooooooooooooooooooooooo...

Strange. It works here with "Enhanced Tracking Protection". Maybe I'm using a different version of Firefox?