Kissaki

joined 2 years ago
MODERATOR OF
[–] Kissaki@programming.dev 2 points 1 month ago

IMO the intro “[shared] to the respective secret scanning partner” is a bit misleading because it can be read as third parties unrelated to the secret that do secret scanning. The text later on only mentions the issuer of secrets, though.

To protect the developer community, GitHub partners with hundreds of secret scanning partners to identify leaked secrets.

GitHub works directly with industry partners like AWS, OpenAI, and Stripe to build detectors for their specific secret formats […]
GitHub notifies the secret issuer when publicly leaked secrets are found, allowing the partner to take immediate action.

[–] Kissaki@programming.dev 2 points 1 month ago

Probably in some AI training data sets. Not that those are particularly good backups.

[–] Kissaki@programming.dev 3 points 1 month ago (2 children)

maybe they also mean Israel/Gaza or the AI push

[–] Kissaki@programming.dev 2 points 1 month ago* (last edited 1 month ago)

… Gitlab though; the only difference is you see more “a large premium customer is requesting this” comments!

I love those! /s 😄 It can certainly feel like a pattern, specifically for some tickets.

[–] Kissaki@programming.dev 2 points 1 month ago

I expect some hot Java code on that website 😏

[–] Kissaki@programming.dev 2 points 1 month ago

YouTube recently introduced UI changes. Google probably didn't optimize for Firefox besides Chrome. Whatever they're doing, it may be more performance on Chrome than on Firefox for technical reasons.

[–] Kissaki@programming.dev 1 points 1 month ago

As a quality metric, "bad company". If you can differentiate between hardware product and drivers, you can separate those metrics. But usually, and for most people, using the product also means using their drivers.

[–] Kissaki@programming.dev 1 points 1 month ago

You can just take the L and say you didn’t see that the function definition that was “added” was just “removed” at the top.

That's not what happened though.

Changing the indent of the def changes the definition. That's my whole argument.

I don't get why you say "of course", agreeing with my point, but then "it was only the indentation that was changed".

[–] Kissaki@programming.dev 5 points 1 month ago (1 children)

Do you have a comparison to other tools like Grammarly? Were you sometimes missing suggestions or linting rules?

[–] Kissaki@programming.dev 6 points 1 month ago (3 children)

as an open-source alternative to Grammarly

intentionally avoids including any kind of generative AI in any part of our processing pipeline

Isn't that what Grammarly is all about, though? Be better than traditional spellchecking through LLM?

I assume Harper is entirely Rules based, then? Which inherently means limited to what rules where introduced manually and what the rules cover.

[–] Kissaki@programming.dev 24 points 1 month ago (2 children)

rnicrosoft.corn 🌽

[–] Kissaki@programming.dev 24 points 1 month ago (3 children)

New hardware manufacturer quality metric: Number of frustrated user pledges per time since market introduction.

 

Interop 2025 is a cross-browser effort to improve the interoperability of the web — to reach a state where each technology works exactly the same in every browser.

The WPT Dashboard, wpt.fyi, displays results for the web-platform-tests, or WPT, which are a group of test suites for many web platform specifications.

I linked to the stable view. Experimental has much higher scores. (Hopefully stable soon? :))

 

Pijul is a free and open source (GPL2) distributed version control system. Its distinctive feature is to be based on a theory of patches, while still being fast and scalable. This makes it easy to learn and use, without any compromise on power or features.

Why Pijul

Pijul is the first distributed version control system to be based on a sound mathematical theory of changes. It is inspired by Darcs, but aims at solving the soundness and perfor>mance issues of Darcs.

Pijul has a number of features that allow it to scale to very large repositories and fast-paced workflows. In particular, change commutation means that changes written independently can be applied in any order, without changing the result. This property simplifies workflows, allowing Pijul to:

  • clone sub-parts of repositories
  • solve conflicts reliably
  • easily combine different versions.

The main difference between Pijul and Git (and related systems) is that Pijul stores changes (or patches), whereas Git deals only with snapshots (or versions).

 

Pijul is a free and open source (GPL2) distributed version control system. Its distinctive feature is to be based on a theory of patches, while still being fast and scalable. This makes it easy to learn and use, without any compromise on power or features.

Why Pijul

Pijul is the first distributed version control system to be based on a sound mathematical theory of changes. It is inspired by Darcs, but aims at solving the soundness and perfor>mance issues of Darcs.

Pijul has a number of features that allow it to scale to very large repositories and fast-paced workflows. In particular, change commutation means that changes written independently can be applied in any order, without changing the result. This property simplifies workflows, allowing Pijul to:

  • clone sub-parts of repositories
  • solve conflicts reliably
  • easily combine different versions.

The main difference between Pijul and Git (and related systems) is that Pijul stores changes (or patches), whereas Git deals only with snapshots (or versions).

 

cross-posted from: https://programming.dev/post/37407248

Scrolling through this webpage is an adventure.

 

Scrolling through this webpage is an adventure.

 

Yesterday programming.dev was down for hours.

I checked https://status.programming.dev/ and it is indeed a working status page, but with no monitors added.
Which is already surprising.

But even more confusing is the consequential claim of "All Systems Operational", even when the instance is down/unreachable.

What's the state and plan for the status page?

 

cross-posted from: https://programming.dev/post/36983916

Freund wasn’t looking for a backdoor when he noticed SSH connections to his Debian testing system taking 500 milliseconds longer than usual. As a database engineer benchmarking PostgreSQL performance, he initially dismissed the anomaly. But the engineer’s curiosity persisted.

The backdoor’s technical sophistication was breathtaking. Hidden across multiple stages, from modified build scripts that only activated under specific conditions to obfuscated binary payloads concealed in test files, the attack hijacked SSH authentication through an intricate chain of library dependencies. When triggered, it would grant the attacker complete remote access to any targeted system, bypassing all authentication and leaving no trace in logs.

The backdoored versions 5.6.0 and 5.6.1 had been released in February and March 2024, infiltrating development versions of Fedora, Debian, openSUSE, and Arch Linux. Ubuntu’s upcoming 24.04 LTS release, which would have deployed to millions of production systems, was mere weeks away.

The technical backdoor was merely the final act of a three-year psychological operation that began not with code, but with studying a vulnerable human being.

 

Freund wasn’t looking for a backdoor when he noticed SSH connections to his Debian testing system taking 500 milliseconds longer than usual. As a database engineer benchmarking PostgreSQL performance, he initially dismissed the anomaly. But the engineer’s curiosity persisted.

The backdoor’s technical sophistication was breathtaking. Hidden across multiple stages, from modified build scripts that only activated under specific conditions to obfuscated binary payloads concealed in test files, the attack hijacked SSH authentication through an intricate chain of library dependencies. When triggered, it would grant the attacker complete remote access to any targeted system, bypassing all authentication and leaving no trace in logs.

The backdoored versions 5.6.0 and 5.6.1 had been released in February and March 2024, infiltrating development versions of Fedora, Debian, openSUSE, and Arch Linux. Ubuntu’s upcoming 24.04 LTS release, which would have deployed to millions of production systems, was mere weeks away.

The technical backdoor was merely the final act of a three-year psychological operation that began not with code, but with studying a vulnerable human being.

 

Over the years, our server has been racking up costs, and the now-unsupported software it was running on finally gave out.

All online services have now been migrated into permanent offline features. We made sure nothing was lost.

  • The Level Editor now saves levels directly to your disk […]
  • All community-created levels […]
  • All-time high scores have been immortalized […]
  • New high scores are saved locally […]

The game Dual Snake on Steam is free and was released in 2018.

view more: ‹ prev next ›