Viewing profile — pledess

His top students were capable of entirely understanding Scheme within a day or so (but not capable of entirely understanding all of Python and all of PyPI). He wanted students to b…

Reformulating this slightly: Yesterday, you saw the first 30-minute segment. Today, you arrive at the multiplex, and are informed that the three 30-minute segments (1, 2, 3) are st…

In my experience, things you can ask include: What's the history of this first project I've been assigned to? Who are the most important customers, or types of customers? What's th…

For "With your threat model in mind, they should identify opportunities to add new test cases," one common reason is that security engineers are shared across a large company and i…

We added ChatGPT Operator to UI testing, starting soon after it launched. It's only used as an extra testing step on top of everything we had previously used. A quick summary is: o…

The letter mentions OAuth but doesn't mention the ongoing work to address the https://eprint.iacr.org/2025/629 findings, CVE-2025-27371.

Both rendering and security issues were relevant. Some of this is discussed under "Deprecate HTML Imports" at https://developer.chrome.com/blog/chrome-70-deps-rems

The TOCTOU is relevant (without suid) if someone can quickly make the right prediction of the tmpname2 value that's generated by the PRNG used by mkstemp, and create a symlink with…

https://newscience.org/nih/ suggests that the higher indirect rates at private research institutions may occur because "universities do subsidize research out of their own pockets.…

There is a new comment by antirez in the past few minutes: https://github.com/redis-rs/redis-rs/issues/1419#issuecommen...

This may have unintended consequences on chances of a successful application. Now, as a high school senior, you have to compete against an additional pool of strong students who ar…

it may actually be reasonable to start a page under https://wiki.archiveteam.org/index.php/Category:Closing_proj... to track this

I thought "the Copilot coding assistant was trained on open source software hosted on GitHub and as such would suggest snippets from those public projects to other programmers with…

I think "Block if :card_count_for_ip_address_daily: > 4" might translate to "As a customer using Stripe, obtain an IPv6 address from your mobile network operator. Do not share Wi-F…

The essence of the problem is that there's no standard pathname for a personal directory that's guaranteed to be on local disk, even if $HOME isn't. Consequently, people have relie…

For example, GET /tickets/12/messages/5 has these advantages over api_get_message_from_ticket?ticket_id=12&message_id=5 Avoids writing everything twice: you don't need to name the …

Another name conflict is with https://github.com/package-url/purl-spec - which is used for software identification (e.g., see the https://www.cisa.gov/sites/default/files/2023-10/S…

with Gemini, maybe every video that says "comment down below" can be automatically modified to say "comment on the right"

It's not quite as bad as hunger-based pricing where EatUp would cost more on longer flights.

Many U.S. hotels changed that after the Mandalay Bay hotel incident in October 2017. A guest can no longer assume that their deadbolted hotel room door will only be opened in an em…

I guess there's also a chance that a banking app will initially work but then fail after a forced update at a very inconvenient time. Is there a possibility that some use of "integ…

I'm wondering about the probability that, out of all the affected customers, at least one had the research skills and social skills to identify another customer and successfully as…

Almost nobody thinks of "earthbound" as suggesting a far-future flight from another world to earth. Instead, the connotations of earthbound are risk aversion, hesitancy to explore …

Another possibility is ML for Cued Speech: https://arxiv.org/abs/2212.01083