in reply to daniel:// stenberg://

Indeed, it was all manual code review. Fuzzing can only go so far in detecting logic flaws (since logic flaws rarely result in a crash, they're quite difficult to instrument).

As background: I spotted some unrelated commit to the .netrc parsing code and that brought this ancient code to my attention. Fairly quickly I could see that *something* was off but couldn't put a pin on it immediately. After some pondering, I could figure out a scenario that would show demonstrable information leak.

This entry was edited (1 year ago)

Help us improve LibreOffice Writer!

Take a few minutes to share your thoughts on the templates you need most. Your input will directly shape new, user-friendly templates. Survey is open for the next 2 weeks! 💡

👉 survey.documentfoundation.org/…

(We needed to restart the survey since it run on a non-free platform. Sorry for the inconvenience.)

This entry was edited (1 year ago)

Gemini 2.0 Flash, with agentic focus and real-time camera/ screen/ microphone access is here, and it'll reach the mobile app on Android in January. Try it here now: aistudio.google.com/live

reshared this

Paměť novin – aplikace, která umožňuje sémantické vyhledávání ve starých novinách z přelomu 19. a 20. století. Jedná se o prototyp určený k testování, minulý týden zpřístupněný účastníkům konference Archivy, knihovny, muzea v digitálním světě 2024.
Aplikaci můžete vyzkoušet na pametnovin.cz, kde použijete přihlašovací údaje:
👤 Uživatelské jméno: pametnovin
🔒 Heslo: pametnovin

Klíčová čísla
🗞️ 16 novinových titulů
📅 Období: 1893 až 1913
📰 44 000 výtisků
📄 350 000 stran
🔍 7 milionů prohledávatelných textů

Co aplikace umí?
✅ Identifikuje nejrelevantnější články na základě vašeho dotazu díky sémantickému vyhledávání.
✅ Vytváří odpovědi pomocí velkého jazykového modelu, který kombinuje informace z historických textů.
✅ Poskytuje zpětné odkazy na zdroje.

Aplikace přináší nový způsob interakce s rozsáhlými digitálními archivy, umožňuje objevování historických událostí v kontextu a usnadňuje práci s velkým množstvím dat.
Stále se jedná o prototyp, a proto oceníme vaši zpětnou vazbu!

🔗 Vyzkoušejte ji na pametnovin.cz

This entry was edited (1 year ago)
in reply to Moop

interesting: On iOS 18.2, typing that in the text field of an empty message reads, " 1 1 back quote 50." I also discovered the same quirk with the number 711, so I wouldn't be surprised if on Mac OS that also wigged out like that. Looks like somehow it's getting passed to be parsed as speech parameter values instead of getting processed by the text processor part of Eloquence for reading.

Mist World 3-in-one simulator updates: (mwgame.wiki/mistsim.html):
- we now do a loop recurring until all remaining shards that are level 1 are exhausted. This should make gem crafting pricing and levels more accurate when using the "use leftover shards" checkbox.
- live region updates for NVDA: aria-live is primarily triggered by changes to the content of an element, not changes to its attributes. If you're only changing an attribute of the input field (like its value), some screen readers might not pick up on that as a content change. NVDA is one of these, so it was decided that a status div serves better of a purpose here over an input.
- added a 4th radio to Gem simulator: "Calculate by starting gem inventory amount and level " which will let you specify one starting gem and level, then type in an amount. Plans are for this feature to expand into a gem-agrigator.JS which would let you add and generate multiple fields for each level you have.
- shard price updates current as of December 10th from the game.
This entry was edited (1 year ago)

[Blog Post] Apple releases iOS 18.2 and iPadOS 18.2; Bringing Fixes and Refinements for VoiceOver and Braille Users applevis.com/blog/apple-releas…

Wrote up my initial impressions of the new Google Gemini 2.0 Flash model - it's really good, and the streaming mode (where you can stream video and audio to it and get audio streamed right back) is pure science-fiction simonwillison.net/2024/Dec/11/…
in reply to Matt Campbell

@matt they've demoed it but it's not released as general availability yet - they put out a video demonstrating that here youtube.com/watch?v=qE673AY-WE…

Hysterical, even if you don’t know your Mozart from your Bach, but exquisitely performed if you do! In the UK for one week only this year!
“We exist despite the sober formality of great concert halls, despite the boredom of classical musicians’ life, despite fanatic lovers of classical music, despite fans of rock, rap or pop who are afraid of classical music. We treat our Muse with a humorous irony and we’re sure, she will have nothing against it!”

The MozART Group are in the UK for one week only!

Looking forward to taking the wife to enjoy this in a few months. Something to Look Forward to in the New Year!

Som AI skeptik. Nie žeby aktuálne jazykové modely nedokázali veľmi pekné veci, keď sa nasadzujú na správne use cases ale očakávania sú prehnané a AI na nás vyskakuje pomaly aj z chladničky. Pália sa v tom miliardy a veľkohubé sľuby striedajú ešte odvážnejšie vyhlásenia. Myslím si, že je to cesta do pekla a táto bublina môže šeredne prasknúť.
in reply to Ján Bogár

@janbogar
Z veľkej časti súhlasím, je tam úžasná reálna technológia, ale v tejto aktuálnej podobe nemá vôbec ani len teoretický potenciál zrevolucionalizovať všetko. Áno, sú oblasti kde to revolúciu prinesie, ale je ich oveľa menej než si od toho ľudia často sľubujú. A otázka je aj čas - kedy? Pretože aj v oblastiach, kde sme tú revolúciu očakávali už pred dvoma rokmi sa stále nekoná. Takže je tiež len otázkou času, kedy si otázku "dokedy máme čakať" položia investori, a to môže byť ten špendlík.
in reply to Ľuboš Moščovič

No podľa mňa sú to nerealistické očakávania toho, čo je technologická revolúcia. Ony sa dejú pomaly a len spätne si ich predstavujeme prudko.

Ja si naozaj myslím, že o 10-15 rokov bude s AI skoro každý pracovať alebo ich prácu ovplyvní. O 50 rokov bude všadeprítomné a zapletené do každého aspektu života. Keď sa pozriem na iné dôležité technológie (internet, atómová energia, parný stroj,...), tiež to boli revolúcie trvajúce desaťročia.

A to som vo svojich odhadoch konzervatívny.

This entry was edited (1 year ago)

🚀 Novinka od týmu OSCloud! 🌟

S radostí vám představujeme naši vlastní PeerTube instanci: VHSky.cz! 🎥✨

📽️ VHSky.cz je komunitní platforma pro sdílení videí. Bez reklam, bez sledování, jen čistá radost z tvorby a sdílení. 🐾

Hostujte svá videa.
Objevujte originální obsah.
Připojte se k nám a buďte součástí komunity! 🌍

🛡️ Co je PeerTube?

PeerTube je open-source platforma pro sdílení videí, která nabízí decentralizovaný přístup k hostování.

Žádné reklamy, žádné sledování.
Umožňuje propojení s dalšími instancemi díky síti federace.

🔒 Bezpečnost a soukromí

Vaše soukromí je naší prioritou. Na VHSky.cz:

Neshromažďujeme zbytečná data.
Data jsou chráněna a bezpečně ukládána.

💡 Proč to děláme?

Chceme vytvořit prostor, kde mohou tvůrci a diváci sdílet a objevovat videa bez vlivu korporací. Naším cílem je podporovat svobodu projevu, komunitní spolupráci a bezpečnost na internetu.
📝 Registrace

Registrace na VHSky.cz jsou aktuálně schvalovány moderátory, aby byla zajištěna kvalita obsahu a bezpečné prostředí.
Máte zájem? Kontaktujte mě, nebo @cynik_obecny přímo tady, nebo navštivte vhsky.cz.
#opensource #peertube #fediverse #Video #activitypub

This entry was edited (1 year ago)

If you have time to dance the Hokey Pokey, you have time to get your security clearance.

Let me know when Global News, CTV, CBC, etc., AKA Canada's legacy, covers Pierre Poilievre's LACK of security clearance.

toronto.com/news/pierre-poilie…

#NOTALEADER #LEADERSDONOTDANCETHEYLEAD #cdnpoli #polcan

This entry was edited (1 year ago)

"Nearly 70% of those laid off in the 2022 tech layoffs were women."

Since there's only 21% women in tech, I can't see how this is anything other than discrimination.

wired.com/story/tyranny-tech-b…

Job termination rates also show discrimination against BIPOC, queer, and disabled people.

prismreports.org/2023/04/03/te…

Via paris@hachyderm.io who saw the Wired article, and jmcrookston@mastodon.social who found a link to the Prism report.

This entry was edited (1 year ago)
in reply to Sage Sharp

The 2022 tech layoffs were 70% women. BIPOC, queer, and disabled workers were also terminated at higher rates.

While we can't prevent corporate layoffs, we can ensure the future of the free and open source community is more diverse and inclusive. Outreachy and Conservancy are vital to that future.

@outreachy connects people who face discrimination and systemic bias to internships in free and open source software. @conservancy staff and contractors run Outreachy.

Outreachy corporate sponsorships and grants have been drastically reduced since 2022. This means Outreachy can't offer as many internships to people who face discrimination and systemic bias in tech. Outreachy's normal 60 to 70 intern cohorts have been reduced to 25 to 35 interns.

Please consider donating to the Conservancy fundraiser, in support of Outreachy and the diverse and inclusive future FOSS needs:

sfconservancy.org/donate/

#freeSoftware
#OpenSource

reshared this

What the shitting shit are you doing Microsoft, you shits? What an epic shit show of epic shitting proportions!

Microsoft is giving Copilot a new taskbar UI and keyboard shortcut on Windows
theverge.com/2024/12/10/243182…

Unknown parent

mastodon - Link to source

x0

@fireborn @miki My actual gripe is stealing the existing shortcut when they've already got one, as alt+space needs to be used by things already. Maybe they're just trying to unify things, but in that case the keystroke for the system menu needs to be rebound and that's gonna break all the muscle memory. The system menu is necessary, apps can add their own shit there it isn't always the default actions which can be accomplished with other shortcuts.