Damus

Recent Notes

Thomas Depierre · 5w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86 Here is my pov as a maintainer. I agree with a lot of your options, but I think they will take a long time to actually hit. Because shipping continuously is going to need massive rethin...
Marcus Rohrmoser 🌻 · 5w
Hi nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86, IMO #responsibility is with the #operators. They can mitigate, monitor, patch and fund. They do fund, right? If not, what's the expectation again?
Edwin Török · 5w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86 I think that when the title, or CWE of a vulnerability and a package name is publicly known it should be assumed that the actual vulnerability is easily rediscoverable. Maybe at that poi...
Andrew Nesbitt · 5w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86 working on an ocaml runner profile for you: https://github.com/alpha-omega-security/scrutineer/pull/901
Stefano Zacchiroli · 5w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86 nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhxatvn8sm87kkhrnqku097p5ddqhmhwtn385v3are3gk208p3dqqpvlv9g nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqyhyy3h8y44a93dq62...
Anil Madhavapeddy profile picture
I'm delighted to announce that our formerly plain PDF ICFP 2026 paper (https://anil.recoil.org/papers/2026-package-calculus.pdf) has been UPGRADED with advanced AI summaries (if you pay up for the premium ACM account) and is under impenetrable cybersecurity protection (if you click through painful captchas and wait 10 seconds) and is way slower due to being hidden behind a web-based epdf reader rather than using your native PDF client. https://dl.acm.org/doi/10.1145/3828699.
1
Edwin Török · 5w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0ujnx96rzj2m7kl9yqhyplqhxuf55el43gdqw8xxpm7pdk3ph6gqwfaz86 I don't really understand the point of the web based pdf reader, since Firefox would use a pdf.js-like reader anyway (and it is way faster to load than ACM's), and Chrome has its built-i...
Anil Madhavapeddy profile picture
Seeing so many LLM-based spam attacks hitting my elderly relatives now. And meanwhile, I have to explain why the 'Apple Store' is not the same as the 'App Store'. We've collectively made a hash of partitioning trust in mobile devices, while making them a centrepoint of identity online