Using Your Apple Device as an Access Card: A Clever Hack Using a Chinese Transit Card

2025-01-19
Using Your Apple Device as an Access Card: A Clever Hack Using a Chinese Transit Card

Many have tried using their Apple device as an access card, but the closed nature of NFC and Wallet ecosystems makes this difficult. However, a Chinese transit card called "China T-Union," officially supported by Apple Wallet, offers a clever workaround. Its unique properties – a non-randomizing UID and unchanging serial number across devices – allow it to be recognized by some UID-based access control systems. While UID authentication is less secure, some systems support it as a fallback. Obtaining the card requires an Alipay account and a biometric travel document. The method is slightly convoluted, but it provides a viable solution for access systems supporting UID authentication.

Read more

Ubicloud's Burstable VMs: CPU Slicing with cgroups v2

2025-05-02
Ubicloud's Burstable VMs:  CPU Slicing with cgroups v2

Ubicloud, an open-source AWS alternative, introduced burstable VMs to reduce cloud costs. Leveraging Linux cgroups v2, these VMs run on a fraction of shared CPU resources, bursting to higher usage during peak loads. The article details cgroups v2 configuration and usage, including the cpuset and cpu controllers, and management via the virtual filesystem or systemd. Testing showed burstable VMs achieve around a 30% performance boost under light loads, but this is limited by cgroups v2's micro-interval restrictions.

Read more
Development burstable VMs

Chrome 135 Introduces Device-Bound Session Credentials for Enhanced Web Security

2025-05-02
Chrome 135 Introduces Device-Bound Session Credentials for Enhanced Web Security

Chrome 135 introduces Device-Bound Session Credentials (DBSC), a new feature designed to bolster web application security. DBSC protects user sessions from cookie theft and hijacking by generating a key pair bound to the device. Even if cookies are stolen, attackers can't access accounts from other devices. Leveraging hardware-backed storage like TPM and regularly refreshing short-lived cookies, DBSC significantly enhances security without impacting user experience. Developers can integrate and test this feature via HTTP headers.

Read more

Reverse Engineering Vercel's BotID: A Surprisingly Basic Bot Protection System?

2025-06-30

This post delves into Vercel's newly released BotID anti-bot system, focusing on its free Basic mode. The author reveals that the Basic mode's current detection mechanisms are surprisingly rudimentary and easily bypassed by manipulating browser properties. While BotID collects various signals including browser fingerprints and GPU information, its processing of these signals is basic, failing to effectively identify sophisticated bots. The author speculates that Vercel is using Basic mode to quietly gather data for training future, more robust anti-bot models. The paid Deep Analysis mode, utilizing Kasada's anti-bot scripts, is significantly more complex than Basic mode.

Read more
Development

DeepSeek vs. ChatGPT: The Open-Source Challenger

2025-01-29

DeepSeek, a free and open-source AI model developed in China, is challenging ChatGPT's dominance. Built on a Mixture of Experts (MoE) architecture, DeepSeek excels in coding, scientific research, and education, boasting superior efficiency and accuracy in these areas. ChatGPT, conversely, shines in creative writing, conversational AI, and multilingual support. The article compares both, suggesting users choose based on their needs—or even utilize both for complementary strengths. DeepSeek's emergence has sparked concerns about AI competition, with even President Trump acknowledging the potential threat.

Read more
AI

KDE Plasma 6.5: Rounded Corners and UI Improvements on the Way

2025-07-21
KDE Plasma 6.5: Rounded Corners and UI Improvements on the Way

The KDE team released its weekly update, highlighting the upcoming Plasma 6.5's rounded window corners, a long-requested feature. Improvements also include refined KRunner search result ordering, a more flexible Disks & Devices widget, resizable sidebars in Discover and System Monitor, and an improved Weather Report widget. Plasma 6.4.4, addressing several bugs, will be released on August 5th.

Read more
Development UI improvements

Breaking the 40-Year Barrier: New Algorithm Cracks the 'Bookshelf Problem'

2025-07-04

Computer scientists have cracked the 'bookshelf problem' (list labeling problem), a decades-old challenge in efficiently inserting new data into sorted data structures. Researchers developed a new algorithm that approaches the theoretical lower bound, achieving a significant breakthrough in insertion cost. This advance has the potential to challenge the dominance of binary search trees in data management, revolutionizing how we handle massive datasets.

Read more
Development

DeepSeek-VL2: Advanced Multimodal Understanding with Mixture-of-Experts

2025-01-01
DeepSeek-VL2: Advanced Multimodal Understanding with Mixture-of-Experts

DeepSeek-VL2 is an advanced series of large Mixture-of-Experts (MoE) Vision-Language Models significantly improving upon its predecessor. It excels in various tasks including visual question answering, optical character recognition, and document/table/chart understanding. The series comprises three variants: DeepSeek-VL2-Tiny, DeepSeek-VL2-Small, and DeepSeek-VL2, with 1.0B, 2.8B, and 4.5B activated parameters, respectively. DeepSeek-VL2 achieves competitive or state-of-the-art performance with similar or fewer activated parameters compared to existing open-source models. The project is open-sourced, offering model downloads, quick start guides, and demo examples.

Read more

Parisian AI Startup Seeks MLE to Build the Ultimate Forecasting Foundation Model

2025-02-20
Parisian AI Startup Seeks MLE to Build the Ultimate Forecasting Foundation Model

A Paris-based AI company is hiring a founding Machine Learning Engineer to build a universal forecasting foundation model. This model will integrate diverse data sources (numerical time series, text, images) for enterprise forecasting applications like staffing, supply chain management, and financial planning. Candidates should be proficient in neural networks, PyTorch or Jax, and have experience building and deploying large models. The company offers competitive compensation and benefits, along with the opportunity to work in vibrant Paris.

Read more

Figma's Multiplayer Editing: A Simplified CRDT Approach

2025-08-19
Figma's Multiplayer Editing: A Simplified CRDT Approach

Four years ago, Figma embarked on building multiplayer functionality, opting for a custom-built system instead of the popular Operational Transform (OT) algorithm. Driven by a need for rapid iteration and concerns about OT's complexity, they created a simpler solution. This post details Figma's multiplayer system architecture, including its client/server architecture, WebSocket communication, offline editing capabilities, and data synchronization. While inspired by CRDTs (Conflict-free Replicated Data Types), Figma's implementation deviates from strict CRDT adherence, leveraging its principles while benefiting from a centralized server for efficiency and simplicity. The article contrasts OTs and CRDTs, delving into Figma's data structure design and how it handles edge cases.

Read more

Daedalus: A Fast and Easy-to-Use Molecular Viewer

2025-05-25
Daedalus: A Fast and Easy-to-Use Molecular Viewer

Daedalus is an open-source molecular viewer and editor, particularly well-suited for proteins and nucleic acids. Designed for speed and ease of use, it rivals PyMOL, Chimera, and Discovery Studio. It supports multiple file formats including PDB, mmCIF, SDF, Mol2, and PDBQT. Molecules can be loaded via various methods: opening files directly, drag-and-drop, entering protein identifiers, or using the 'I'm feeling lucky' feature. Two camera control schemes are available with extensive keyboard shortcuts for flexible viewing. While features like cartoon view and high-quality van der Waals surfaces are still under development, its core functionality is robust and actively updated based on user feedback.

Read more

Little Snitch's Secret Weapon: Precisely Controlling Safari's Search Helper

2025-01-24

While configuring Little Snitch on a new Mac, the author discovered Safari's search helper process silently connecting to Google's ssl.gstatic.com. Changing the search engine or blocking the connection worked, but the latter interfered with Gmail authentication. The solution? A clever Little Snitch rule using the 'via' function, blocking only the search helper's connection while allowing Safari itself, showcasing a powerful, little-known feature. This highlights a subtle but significant aspect of browser-search engine background communication.

Read more
Development

X Design Notes: Unifying OCaml Modules

2025-09-09

The author is designing a new programming language, X, aiming to combine PolySubML's type inference and structural subtyping with most of OCaml's functionality, particularly addressing the syntactic and conceptual differences between OCaml's module system and ordinary values. The post details how OCaml modules are unified in X, covering aspects like alias members in records, struct and sig syntax, module opening and inclusion, module extension, and abstraction with existential types. It proposes improvements to OCaml's module system, such as avoiding wildcard imports. The ultimate goal is a simpler, more understandable, and powerful programming language.

Read more
Development

Beyond Flashy Signs: A Deep Dive into India's Street Lettering

2025-08-05
Beyond Flashy Signs: A Deep Dive into India's Street Lettering

For a decade, Pooja Saxena has documented the vibrant street lettering of India, revealing a depth beyond the commonly perceived flashy signage. Her work showcases diverse forms, from ribbon lettering in metal to mosaic and wood techniques, each reflecting unique regional styles. Through interviews with artists like Delhi's Mohanlal Sihani, she unveils the trust-based process and the creative independence that imbues Indian cities with distinctive typographic flavors. Viewing the art through a typeface designer's lens, Saxena highlights the influence of traditional printing techniques and celebrates the artists' ingenuity in handling limited spaces and multilingual scripts. Her book is not just a visual feast but a profound exploration of Indian street culture.

Read more
(bl.ag)

US Robotics Firms Urge National Strategy Amidst China's Rise

2025-03-28
US Robotics Firms Urge National Strategy Amidst China's Rise

American robotics companies are pushing for a national robotics strategy to compete with China's growing dominance in the field. While the US boasts advancements in AI and robotics, the lack of a cohesive national strategy risks losing its lead. Proposed solutions include tax incentives, funding for research and training, and a dedicated federal robotics office. China's significant investment and progress are undeniable, but the long-term viability may favor more practical, polyfunctional robots over humanoids. This race is not just about technological supremacy but also national strategy and economic future.

Read more
Tech

Claude Code: My AI-Powered Terminal Assistant Saves Me an Hour a Day

2025-06-03
Claude Code: My AI-Powered Terminal Assistant Saves Me an Hour a Day

For two months, I've run Claude Code in "dangerously-skip-permissions" mode on macOS, bypassing all permission prompts. While risky (I use robust backups), it's saved me about an hour daily. Claude Code isn't just a smarter command line; it's a universal computer interface. I use it for everything from migrating Macs and converting blog posts to generating test data, managing Git, and automating system tasks. Its command-line-first design and ability to understand context make it highly efficient, though response time can be a limitation. Unlike Warp, Claude's "dangerous mode" allows for continuous workflow without constant permission requests. This represents a paradigm shift in developer tools – from command execution to intent understanding and action. It's not about AI replacing developers, but about developers becoming orchestrators of powerful systems.

Read more
Development

ICE's Stingray Use Continues, While AI Surveillance System Falters

2025-09-09
ICE's Stingray Use Continues, While AI Surveillance System Falters

Immigration and Customs Enforcement (ICE) continues to utilize Stingray technology to track undocumented immigrants, raising privacy concerns. A recently unsealed warrant reveals ICE's use of a cell-site simulator in Utah to locate a fugitive. Meanwhile, a $12 million AI surveillance system, Sherlock, intended to streamline police work, has reportedly shown slow progress and failed to deliver expected results. Further adding to surveillance concerns, ICE also signed a nearly $10 million contract with Clearview AI for facial recognition. These events highlight the reliance of law enforcement on surveillance technology and the resulting ethical and privacy implications.

Read more
Tech

Optimal Debian Packaging Workflow for 2025

2025-05-26
Optimal Debian Packaging Workflow for 2025

This post outlines the optimal workflow for creating new Debian packages in 2025 while preserving upstream Git history. The goal is to simplify sharing improvements between upstream and Debian, and enhance software provenance and supply-chain security by easily inspecting every change using standard Git tools. Key elements include: using a Git fork/clone of the upstream repository; consistent use of `git-buildpackage` commands with package options in `gbp.conf`; DEP-14 tagging and branching; pristine-tar and upstream signatures; using `Files-Excluded` in `debian/copyright`; patch queues for rebasing and cherry-picking; leveraging Salsa (Debian's GitLab) for CI/CD and peer review. The process is demonstrated by packaging the `entr` command-line tool, walking through each step from repository creation to Merge Request submission on Salsa.

Read more
Development

Mozilla Launches Privacy-Focused AI Tool: Orbit

2024-12-31

Mozilla has released Orbit, a Firefox extension leveraging AI to summarize web content such as emails, documents, articles, and videos, while prioritizing user privacy. Orbit requires no account creation, doesn't store session data or personal information, and utilizes a Mistral 7B LLM model hosted by Mozilla. Users can easily summarize long documents and videos, quickly grasp the gist of emails and articles, and get specific information through questions.

Read more

Zuckerberg: Back to Free Expression Roots, Community Notes Replace Fact-Checkers

2025-01-07
Zuckerberg: Back to Free Expression Roots, Community Notes Replace Fact-Checkers

Meta CEO Mark Zuckerberg announced Meta's return to its free expression roots, replacing its fact-checking system with a community-based approach called 'Community Notes'. This shift aims to simplify platform policies and focus on core values. It signifies a move away from centralized content moderation towards a system relying more heavily on the user community to identify and flag inaccurate or misleading information. This decision has sparked considerable debate surrounding content moderation, information veracity, and platform responsibility.

Read more

Oaxaca's Paradise Lost: A String of Disappearances Rocks Mexico's Coast

2025-03-22
Oaxaca's Paradise Lost: A String of Disappearances Rocks Mexico's Coast

The idyllic beaches of Oaxaca, Mexico, have been rocked by a series of disturbing disappearances. Ten young adults from Tlaxcala state, aged 19-29, vanished from Zipolite and Huatulco, with nine bodies later found in an abandoned car hundreds of miles away. The case highlights potential links to drug trafficking, real estate development, and possible police involvement, alongside alleged government attempts to downplay the incidents. This tragedy not only threatens the region's vital tourism industry but also raises serious questions about security in Mexico.

Read more

6502 Assembly Language: A Beginner's Guide to Retro Computing

2025-02-07

This tiny ebook introduces you to 6502 assembly language, a historical processor powering iconic machines like the Commodore 64 and Apple II. Learning assembly offers a deep understanding of computer architecture. The 6502, with its human-friendly design, makes it an ideal starting point. The book guides you through registers, flags, instructions, addressing modes, and the stack, culminating in a simple Snake game. An online assembler and simulator are included for hands-on learning.

Read more
Development

Trump Admin Seeks to Shutter Key Climate Change Research Lab

2025-07-03
Trump Admin Seeks to Shutter Key Climate Change Research Lab

The Trump administration's proposed budget aims to shut down the Mauna Loa Observatory in Hawaii, a critical facility that has gathered the most conclusive evidence of human-caused climate change since the 1950s. The lab's Keeling Curve data, an iconic chart in modern science, documents the steady rise in atmospheric CO2. Closing the lab would disrupt this invaluable long-term data record, severely impacting climate change research. This move reflects a broader Trump administration plan to slash climate-related research, shifting the National Oceanic and Atmospheric Administration (NOAA)'s focus from climate science to weather forecasting.

Read more

Gukesh Crowned Youngest World Chess Champion in History

2024-12-12
Gukesh Crowned Youngest World Chess Champion in History

In round 14 of the 2024 World Chess Championship, 18-year-old Indian Grandmaster Gukesh D defeated defending champion Ding Liren to become the youngest world champion ever! Ding employed a Reversed Grünfeld Defense, but Gukesh, with precise opening play and deep preparation, steered the game into a complex endgame. After a prolonged struggle, Ding blundered, allowing Gukesh to capitalize and secure a historic victory, fulfilling a lifelong dream.

Read more

Valhalla: Java's Epic Refactor Nears Completion

2024-12-17

After a decade-long journey, Project Valhalla, Java's ambitious refactor, is nearing completion. Aiming to bridge the gap between classes and primitives, Valhalla introduces value classes that offer the coding convenience of classes with the performance of primitives, resulting in a flat and compact memory layout. At Devoxx 2024, Java Language Architect Brian Goetz provided a comprehensive update, highlighting key features such as value classes, null-restricted types, enhanced definite assignment analysis, and strict initialization.

Read more
Development Value Classes

US High Schoolers' Scores Plummet to Historic Lows Amidst Decade-Long Decline

2025-09-10
US High Schoolers' Scores Plummet to Historic Lows Amidst Decade-Long Decline

The Nation's Report Card reveals a decade-long slide in US high schoolers' reading and math performance, exacerbated by the COVID-19 pandemic. 12th-grade scores hit a more than 20-year low, while 8th-grade science scores also significantly dropped. Experts attribute this not only to pandemic-related school closures and absenteeism but also to longer-term factors such as increased screen time, shorter attention spans, and a decline in reading longer texts. The achievement gap widened, particularly affecting girls in STEM subjects. This alarming trend sparks concerns about the US education system and fuels debate over federal education funding.

Read more

Synthesizing OOP and Functional Design for Reusability

2025-09-09

This 1998 ECOOP paper tackles the challenge of extending both tools and data types in evolving programs by combining the strengths of object-oriented and functional programming. Traditional approaches struggle to support both: functional programming excels at adding tools, while OOP excels at adding new tools or extending datasets, but not both simultaneously. The paper proposes a composite design pattern that synthesizes the best of both, suggesting new linguistic features for class-based languages to achieve extensibility without modifying existing code.

Read more
Development code reuse

Desktop-TUI: A Graphics-Free Desktop Environment

2025-09-11
Desktop-TUI: A Graphics-Free Desktop Environment

Desktop-TUI is a tmux-like desktop environment without a graphical interface. It parses shortcut files to launch applications and commands, supporting window movement, resizing, tiling options, and handling application errors and GNU application crashes. Users can select files or folders as application or command arguments. Currently using ncurses (with color issues), it plans to switch to Crossterm. Install via `cargo install desktop-tui` and run with `cargo run -- `. Shortcut files (e.g., helix.toml) use TOML format to define application names, commands, and arguments.

Read more
Development

Sweden Designates Demoscne as UNESCO Heritage

2025-03-31
Sweden Designates Demoscne as UNESCO Heritage

Sweden has designated the demoscene as a national UNESCO intangible cultural heritage. The demoscene, arguably the oldest creative digital subculture, has maintained its values and traditions amidst technological and economic shifts. While core to it is the competition to push hardware limits, the demoscene encompasses diverse activities: creating quirky works, maintaining online communities, organizing parties, and more. The author emphasizes the scene's diversity and inclusivity, appealing to both nostalgic programmers and unconventional artists.

Read more
1 2 341 342 343 345 347 348 349 596 597