robryk @robryk@social.cleverlibre.org
I enjoy things around information theory (and data compression), complexity theory (and cryptography), read hard scifi, currently work in infosec, am somewhat literal minded and have approximate knowledge of random things. I like when statements have truth values, and when things can be described simply (which is not exactly the same as shortly) and yet have interesting properties.
I live in the largest city of Switzerland (and yet have cow and sheep pastures and a swimmable lake within a few hundred meters of my place :)). I speak Polish, English, German, and can understand simple Swiss German and French.
If in doubt, please err on the side of being direct with me. I very much appreciate when people tell me that I'm being inaccurate. I think that satisfying people's curiosity is the most important thing I could be doing (and usually enjoy doing it). I am normally terse in my writing and would appreciate requests to verbosify.
I appreciate if my grammar or style is corrected (in any of the languages I use here).
Joined Nov 2020
robryk
boosted
IFComp 2023 begins now! https://youtu.be/bd1X9GrkCcs
robryk
boosted
Related to the latest round of everyone finding out what happens when you write image decoders in C++ now known as CVE-2023-5129: you may want to update every electron app on your machine as much as possible. Electron is built on the foundation of Google Chrome and it turns out that the webp vulnerability is also present in Electron. Annoyingly, this is going to require you to figure out which vendors have patched their apps for the vulnerability. Good luck.
You probably should update Discord immediately.
Hm~ on the off chance it's obvious to someone: I'm trying to use the built-in I2C hardware in STM32Lsomething. I use RIOT-OS's library for interacting with that I2C hardware, and what happens is that as soon as the pins are switched to the alternate function of I2C they get pulled down (afterwards it seems that no I2C operations ever complete, but that's not that weird considering this messed up initial state). Is there something obvious I could be doing wrong, or something I ought to check?
plpol
Mam wrażenie, że bezrefleksyjna powszechność zwrotu "głosowanie za kimś" powoduje podobnie dużo szkód jak "aresztowanie za coś".
Powszechny jest pogląd, że głosowanie polega na wybraniu kandydata, którego najbardziej chcielibyśmy widzieć wybranego. Nawet w przypadku wybierania jednoosobowego organu nie jest to sposób, w który najlepiej możemy realizować nasze preferencje (nawet nie może, bo nie zależy od tego, których z pozostałych kandydatów wolimy bardziej). W przypadku organów wieloosobowych sytuacja jest jeszcze bardziej skomplikowana, bo przestrzeń możliwych preferencji jest większa.
IMO warto myśleć o głosowaniu nie jak o wyrażaniu poparcia dla konkretnego kandydata, ale jak o wyborze, który ma skutki. Jeśli mamy do dyspozycji rozsądnie dobre przewidywania wyników wyborów, możemy poszacować jak każdy możliwy wybór może wpłynąć na wyniki.
Eh, chyba powinienem po prostu napisać taką symulację i ją udostępnić.
robryk
boosted
Today was ... interesting. If you followed me for the past months over on the shitbird site, you might have seen a bunch of angry German words, lots of graphs, and the occassional news paper, radio, or TV snippet with yours truely. Let me explain.
In Austria, inflation is way above the EU average. There's no end in sight. This is especially true for basic needs like energy and food.
Our government stated in May that they'd build a food price database together with the big grocery chains. But..
robryk
boosted
robryk
boosted
@samwho Rust is even more aggressive about some of this. You'd have to Pin<> things at a minimum, and that may not be enough. And any code that involves Pin<>s is usually a pain.
Put your secrets in a different address space, ideally in a different processor entirely.
robryk
boosted
This is absolutely crazy stuff. Chinese hackers were able to get into a bunch of government email accounts by forging Microsoft access tokens, but how it happened is wild.
Apparently an internal Microsoft system responsible for signing consumer access tokens crashed, then a bug in the crash dump generator caused the secret key to be written to the crash dump. Microsoft's secondary system for detecting sensitive data in crash dumps also failed, allowing the crash dump to be moved from an isolated network to the corporate one. The Chinese hackers compromised a Microsoft engineer's account and were able to get a hold of the crash dump. They were not only able to find the key and figure out that it's responsible for signing consumer access tokens, but were also able to exploit a software bug to use it to sign enterprise access tokens too, basically giving them the keys to the kingdom.
So many security system had to fail for this to happen. Either the hackers were very lucky or extremely patient.
robryk
boosted
The physics of why the first clock in America failed
The first clock in the Americas was an abject failure.
Little did everyone know that gravitation was to blame.
https://bigthink.com/starts-with-a-bang/physics-first-clock-america-failed/
Serwujecie na pol.social media z niewłaściwym Content-Type. Np takie https://pol.social/system/media_attachments/files/110/935/884/311/554/703/original/be66df9224d6be69.webp ma `Content-Type: text/plain`, a jest obrazkiem. To powoduje, że linki do nich (np. te w klientach innych instancji) otwierają stronę robaczków miast obrazek.
robryk
boosted
@msuriar tbf HAVING and WHERE being two different language elements is absurd.
Consider trying out https://prql-lang.org/ which compiles to readable standard SQL and doesn't have such issues :)
robryk
boosted
We have a wonderful Slack channel called #why which is filled with questions like "why do we do <thing>" or "does anyone remember why we do <thing>"
1. It's kinda helpful when you scale up staff by 100% in approximately one year
2. Even the CEO asks why questions!
3. At year 6 or so of a startup there are lots of decisions to be reconsidered
robryk
boosted
Some people, when confronted with a key management problem, think “I know, I'll use a Public Key Infrastructure.” Now they have a Problem Authority.
robryk
boosted
🇭🇰🇯🇵🇵🇱🇪🇺
In what world is walking on a bike lane (instead of a pedestrian lane immediately to its side) a reasonable way to minimize the chance of collision with a bicycle?
robryk
boosted
speaking of πλανητες watch the anime planetes now if you haven't already
robryk
boosted
@harcesz "The name and logo of "NERV" are used with the explicit permission of khara Inc., the copyright holder of the "Evangelion" series, and Groundworks Corporation, which manages the rights to the series." (https://nerv.app/en/support.html). Dodatkowo w jednym z nagrań głos podkłada aktor, który w anime wcielał się w kolegę Shinjiego :)
Why can stinging nettle sting through clothes, but only if they're wet?
robryk
boosted
Przez chwilę myślałem, że to jakiś nieoficjalny dostęp do danych z aplikacji NERV (heh*), ale wygląda na to, że to jednak zupełnie oficjalne działanie agencji odpowiedzialnej za tą usługę;
www.itmedia.co.jp/news/articles/…/news134.html
note.com/xanac13/n/nbf49cf724c19
Wygląda na to, że w sumie prowadzą ponad 230 kont na mastodonie, tak że można precyzyjnie dobrać preferowany typ ostrzeżeń a dodatkowo najważniejsze są podbijane przez wszystkie konta regionalne w zasięgu - sprytne rozwiązanie. Usługę uruchomili w 2017.
*Czy jakaś bardziej japoniofilna osoba może mi wytłumaczyć - czy Japończycy faktycznie nazwali agencję ostrzegającą przed katastrofami za, oraz skopiowali logo/motto agencji konstruującej roboty do obrony ziemi z popularnego anime?
robryk
boosted
I know corporations are evil but I'm still quietly impressed at the LEGO group's tax policy (namely - to pay them, make sure to pay them and to acknowledge that taxes are a core part of giving back to society and corporate responsibility). The corporate income tax rate in Denmark is 22%, and 22% is what they pay on their gross profit. The tax policy document is a short but informative read (see link).
Compare this with Google, Amazon and friends, who constantly trumpet their social responsibility but who are somehow only paying a few percentage points of US federal income tax on their own profits.
And yet Lego continues to make generous net profits and has not been taxed into oblivion as conventional thinking in the US would consider inevitable.
https://www.lego.com/cdn/cs/aboutus/assets/bltfc621352618d8b90/Tax_Strategy_2023_Final.pdf
I enjoy things around information theory (and data compression), complexity theory (and cryptography), read hard scifi, currently work in infosec, am somewhat literal minded and have approximate knowledge of random things. I like when statements have truth values, and when things can be described simply (which is not exactly the same as shortly) and yet have interesting properties.
I live in the largest city of Switzerland (and yet have cow and sheep pastures and a swimmable lake within a few hundred meters of my place :)). I speak Polish, English, German, and can understand simple Swiss German and French.
If in doubt, please err on the side of being direct with me. I very much appreciate when people tell me that I'm being inaccurate. I think that satisfying people's curiosity is the most important thing I could be doing (and usually enjoy doing it). I am normally terse in my writing and would appreciate requests to verbosify.
I appreciate if my grammar or style is corrected (in any of the languages I use here).
Joined Nov 2020
