Viewing profile — cataflam

Congrats gaeld and team The demo is very impressive! disclaimer: I've known the founder for a while, as legitimate as it gets in deep tech, real years of research and engineering b…

> For monitoring I use and recommend UpDown.io, which doesn’t seem to be listed there. It doesn't seem very well known, but I've been a happy user. Most of the others have become o…

> Nicholas Carlini, a researcher at Anthropic, orchestrated 16 parallel Claude agents to write a production C compiler in Rust. To write a proof-of-concept C compiler, not a produc…

You misinterpreted the comment you are citing. This non-determinism would not and did not cause replays to diverge (the PRNG seed was most likely stored and would reproduce exactly…

Your AI powered comment is wrong. Le monde has been doing this for years. They have a series of articles about this. There is no "gap closing."

it cannot email your secret key to an attacker because of prompt injection etc.

Almost a month old, original source: https://cybernews.com/security/global-data-leak-exposes-bill... and I've never seen any confirmation elsewhere Looks like CyberNews have edited…

You're getting downvoted because you didn't read the article. It is specifically about cleaning up the data by removing these 3 and showing a clearer picture of acceleration withou…

Great series of articles!

Don't they? https://git.ffmpeg.org/gitweb/ffmpeg.git?a=search&h=HEAD&st=...

Wow. Maybe I'm missing something but it seems really weird to replace a tool with a rewrite that doesn't pass the test suite!

This comment[0] explains it. The core bug seems to be that support for `date -r ` wasn't implemented at the time ubuntu integrated it [1, 2]. And the command silently accepted -r b…

Amazing they are still alive and kicking. Started using them with Windows 95 (different specific ones, same general concept) These and Sysinternals (bought by Microsoft around 2006…

> update your password, update your 2FA should practice it for ENTER your password, ENTER your 2FA ;) > Still, I don’t understand how npmjs.help doesn’t immediately trigger red fla…

Indeed. At least the crowd here should _know_ that TOTP doesn't do anything against phishing, and most of the critical infrastructure for code and other things support U2F so peopl…

My apologies, somehow after all these years, I didn't know that (and first time I've done it)!

Yes! Here is the whitepaper (from 2017 I think), I read that and used it, it's excellent https://karla.io/files/ichthyology-wp.pdf > At Stripe, rather than focusing on mitigating m…

Still would have done nothing in this case, as they pulled the correct email address he uses for npm from another source (public API I think?). That's exactly why I said all the ot…

As for any of these cases, we do receive legitimate emails that require being logged in, Google or otherwise The answer is simple: use your bookmarks/password manager/... to login …

In that case 1. You just requested it, I'm not saying to never click link on transactional emails you requested. You still need to click on those verify email links 2. It replaces …

Besides the ecosystem issues, for the phishing part, I'll repost what I responded somewhere in the other related post, for awareness --- I figure you aren't about to get fooled by …

France and UK, from personal experience, whatsapp is big, especially for professional use, or friends/family groups. Blue bubble isn't really a thing ever mentioned in France eithe…

I mostly agree and I do use one. You only need read the whole thread however to see reasons why this would sometimes not be enough: sometimes the password manager does not auto-fil…

> outside of the West you probably mean outside of the USA, it's huge in Europe/UK (which doesn't contradict your main point)

Hey, you're doing an exemplary response, transparent and fast, in what must be a very stressful situation! I figure you aren't about to get fooled by phishing anytime soon, but bas…