Articulating ideas: https://x.com/GuiAmbros/status/1598897735955988481

Code: https://x.com/GuiAmbros/status/1599282083838296064

Comments URL: https://news.ycombinator.com/item?id=48392181

Points: 3

# Comments: 0

[1] https://www.youtube.com/watch?v=22ZmmZ67SMY

Well done! Reminds me of Atari's Asteroids, with a modern take.

But there's a natural selective pressure, and it's plausible that mosquitoes would eventually evolve their sensors to become attracted to DEET, over multiple generations. And with each generation lasting only 20-30 days and a single female mosquito laying 300-500 eggs in total, they can evolve orders of magnitude faster than us.

Pretty functional design.

The market is full of dark patterns, and vendors like AMD/Xilinx can pull shitty moves like what OP highlighted, knowing there is no decent alternative (Altera is another disaster). Lattice had the opportunity to fully embrace opensource toolchain and try to disrupt from the bottom, but they seem stuck in the middle, not wanting to commit one way or another.

I'm grateful to SymbiFlow, and IceStorm and others, even though they obviously lack support for proprietary hardware features.

(That's for the CS graduate program; not sure about others)

https://github.com/microsoft/vscode/issues/52116

Comments URL: https://news.ycombinator.com/item?id=48170426

Points: 1

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=48165828

Points: 52

# Comments: 23

A better title would be the Github repo title: "Computational Refutation of Quantum Superactivation"

If I may, two suggestions:

1) Allow the user to filter for plugins based on the desired level of strictness (manually reviewed, safety rating, etc).

2) The Disclosures seems a bit too lenient. For example, the popular Templater plugin [2] gets a 92 rating, with Excellent Health and Satisfactory review. But the disclosures are pretty concerning: dynamic code execution, network calls, wasm blobs, malware scan not available, etc.

I know it's tricky to boil this down to a single numerical score that works for everyone, but I think the bar needs to be higher than this. And Plugin developers should be held to a higher standard (e.g. don't use eval()) or at least thoroughly document why you need it.

[1] https://news.ycombinator.com/item?id=48089793

[2] https://community.obsidian.md/plugins/templater-obsidian

- Think Python

- Think Data Structures

- Think Java

- Think Perl6 (!)

- Modeling and Simulation in Python

- Probably Overthinking It

And more [1]. He's a prolific writer, and very generous for offering many of them for free. I read several of them online or through O'Reilly, and bought printed copies just to appreciate his work. Really enjoyed Think DSP, Think Complexity, Think Bayes, etc.

[1] https://www.amazon.com/stores/Allen-Downey/author/B001O8NBPS

Obsidian Plugins are still incredibly vulnerable. A compromised plugin will essentially take over your machine. There's no sandboxing of any kind. It's even more insecure than browser extensions (that could steal your auth tokens, but at least don't have unfettered access to your filesystem).

This is really unfortunate. I love Obsidian and am a paid subscriber for many years, but the community plugins needs a security overhaul asap, before someone gets hurt.

"I spent a total of 35 days here. The first arrest was 3 days of processing, the initial 10 days followed by the 10 days extension for a total of 23 days before my case was dropped. But the same time my case was dropped my accusers found a another reason to issue a second arrest keeping me there for an additional 12 days!

Both cases were ultimately dropped and the second arrest was essentially tied to the first and shouldn’t have even been possible."

"...through a vulnerable WordPress plugin, a web shell, weak SSH credentials, or a compromised container"

DirtyFrag alone doesn't help an attacker; they need to get in first. But the blast radius is much wider now. A wordpress flaw, or a prompt injection in your OpenClaw skills, or a supply chain compromise in npm librarires means they now have full root access to your system.

> we're in a similar space -- http://www.getdropbox.com (and part of the yc summer 07 program) basically, sync and backup done right (but for windows and os x). i had the same frustrations as you with existing solutions.

> let me know if it's something you're interested in, or if you want to chat about it sometime.

>drew (at getdropbox.com)