Popular：
Virtualization DNS security formal verification reachability analysis compiler errors macro conflict web extension development framework Bitmap Graphics API inconsistencies All Tags

Two Bites of Data Science in K: Shorthand & Cricket Stats

2025-01-26

This post presents two data analysis examples using the K programming language. The first involves developing a shorthand writing system, analyzing the CMU Pronouncing Dictionary to determine the most common consonant clusters following 'r' and 'l' in English to optimize shorthand symbol design. The second analyzes cricket test match data to identify bowlers with the best bowling averages, and further, which bowlers possess the best average amongst those with equal or greater numbers of wickets taken. Both demonstrate K's power in data manipulation and analysis, showcasing its real-world applicability.

Read more
(blog.zdsmith.com)
Development K programming language cricket data

KV Cache Tricks for Faster Language Models

2025-01-28
KV Cache Tricks for Faster Language Models

The slow speed of large language models (LLMs) in text generation stems from the computational complexity of self-attention. This article explores KV caching and its optimization techniques. KV caching stores key-value pairs for each token to avoid redundant computation, reducing complexity from O(n³) to O(n²); however, memory consumption remains substantial. The article delves into 11 papers proposing optimizations: token selection and pruning based on attention scores, post-hoc compression techniques, and architectural redesigns such as Multi-head Latent Attention (MLA). These aim to balance memory usage and computational efficiency, ultimately making models like ChatGPT generate text faster and more efficiently.

Read more
(www.pyspur.dev)
AI KV Cache Self-Attention

Atop 2.11 Heap Overflow Vulnerability: CVE-2025-31160

2025-03-29

A heap overflow vulnerability (CVE-2025-31160) has been discovered in Atop 2.11. The vulnerability stems from Atop attempting to connect to the TCP port of the atopgpud daemon during initialization. If another program is listening on this port, Atop may connect to it and receive malicious strings, leading to parsing failures, heap overflows, and segmentation faults. This vulnerability has been present since the introduction of atopgpud in Atop 2.4.0. The solution involves: not connecting to the TCP port by default, only attempting to connect when the '-k' flag is used; improved string parsing to avoid heap overflows; and not searching for netatop or netatop-bpf by default, only when the '-K' flag is used.

Read more
(openwall.com)
Development

Reverse Engineering a Cheap Indoor Camera: Exploiting Tapo's Security Flaws

2025-09-16

The author bought a cheap Tapo indoor camera to monitor their dog, but this led to an unexpected journey of reverse engineering. To bypass the cumbersome setup process and forced subscription of the Tapo app, the author decompiled the APK, performed a man-in-the-middle (MITM) attack, and wrote cryptographic scripts. This revealed a critical vulnerability: a default password "TPL075526460603". A bash script was created for cloudless onboarding. The process uncovered security flaws in Tapo's firmware, such as inconsistent use of SHA-256 and MD5 encryption and a haphazard password synchronization mechanism. The author successfully configured the camera, only to discover their dog mostly slept.

Read more
(kennedn.com)
Tech

Command-line VPN Tool: Parameter Breakdown

2025-03-02
Command-line VPN Tool: Parameter Breakdown

This is a command-line driven VPN tool. Users can specify the private network destination (-d), global routing (-g), local address (-l), remote server address (-s), server mode (-srv), client and server TUN device IPs (-tc, -ts), and TUN device name (-tname). Crucially, the server must be able to reach the private network; otherwise, packets will be lost.

Read more
(github.com)
Development

Herbie: Boosting Floating-Point Accuracy

2025-08-07

The Herbie project aims to improve the accuracy of floating-point computations. Over several years, Herbie has released numerous versions, continuously improving algorithms, increasing speed, and adding features like a browser interface and plugins for languages such as Rust and Haskell. Recently, Herbie achieved significant accuracy improvements on the Hamming benchmark suite and added a new platform API for pluggable compilation targets. The Herbie team actively participates in academic research, publishing papers and giving numerous talks, sharing their research findings and future plans.

Read more
(herbie.uwplse.org)
Development Herbie project

6.4TB SQLite Database Powers Searchcode.com's Upgrade

2025-02-17

Searchcode.com, a source code search engine, migrated its database from MySQL to SQLite, resulting in a massive 6.4TB SQLite database—likely one of the largest publicly facing instances. Driven by a desire for a single binary deployment and reduced dependencies, the migration wasn't without challenges. Issues like database locking and cross-compilation complexities were overcome using dual database connections, a pure Go SQLite version, and filesystem-level compression (BTRFS with zstd). The result? A significantly faster and more scalable Searchcode.com with improved search speed and backend processes.

Read more
(boyter.org)
Development Database Migration Source Code Search Engine

Vulnerability-Lookup: A Collaborative Vulnerability Management Platform

2025-02-06
Vulnerability-Lookup: A Collaborative Vulnerability Management Platform

Vulnerability-Lookup is a powerful open-source platform for quickly correlating vulnerabilities from various sources, streamlining the Coordinated Vulnerability Disclosure (CVD) process. It supports importing from numerous sources including NIST NVD and CISA, and allows users to add vulnerability sightings, comments, and create bundles. Its API and Python library facilitate integration with other tools, enabling developers to easily build their own sighting tools. Vulnerability-Lookup is licensed under the GNU Affero GPL v3.0 and is developed by CIRCL, Alexandre Dulaunoy, Raphaël Vinot, and Cédric Bonhomme.

Read more
(github.com)
Development vulnerability management

Bitwarden Bolsters Security: New Device Login Protection Coming in February 2025

2025-01-28
Bitwarden Bolsters Security: New Device Login Protection Coming in February 2025

Bitwarden is enhancing security by implementing new device login protection starting February 2025. Users without two-factor authentication (2FA) enabled will be required to verify their logins on new devices with a one-time code sent to their registered email address after entering their master password. This added security measure protects accounts even if passwords are compromised. Users with 2FA, SSO logins, API key logins, or self-hosted instances are exempt.

Read more
(bitwarden.com)
Tech Login Verification

The Holy Grail of 70s Radios: The Sony FX-300

2025-02-18
The Holy Grail of 70s Radios: The Sony FX-300

A child of the 1970s reminisces about the elusive Sony FX-300 "Jackal 300" radio, a dream machine he never owned. Primarily sold in Japan, this radio boasts a mini CRT television screen, precise analog tuning, a top-mounted cassette player/recorder, AM/FM reception, and a killer retro design. The author praises its unique aesthetics and seeks readers' experiences with this 'holy grail' device.

Read more
(swling.com)
Misc vintage radio electronics

Your Phone is Killing Your Sex Appeal

2025-01-29
Your Phone is Killing Your Sex Appeal

This article argues that smartphones are killing our ability to feel sexy. The author contends that the convenience of our phones eliminates desire, risk, and genuine connection. From endless scrolling to instant gratification, phones detach us from our bodies and immerse us in a digital world, preventing us from experiencing life's fleeting sensual moments. The author calls for us to disconnect, embrace uncertainty, and reconnect with the physical and emotional experiences that make life exciting.

Read more
(catherineshannon.substack.com)
Misc smartphone addiction sexuality

X Platform Bans Signal.me Links: A Blow to Privacy?

2025-02-17
X Platform Bans Signal.me Links: A Blow to Privacy?

Elon Musk's X platform (formerly Twitter) has recently banned links to Signal's "Signal.me" URL, preventing users from posting them in DMs, public posts, or even their profile bios. This move raises concerns, as Signal, with its end-to-end encryption and privacy focus, is a crucial communication tool for journalists and whistleblowers, particularly relevant amidst recent US government data leak controversies. While users can still share their Signal usernames manually, this added friction impacts communication and potentially threatens information security and press freedom. The ban signals a further tightening of information control on X, with the motivations remaining unclear.

Read more
(www.disruptionist.com)
Tech X Platform

Xiaomi's Draconian Bootloader Unlock Policy Sparks Debate

2025-01-03
Xiaomi's Draconian Bootloader Unlock Policy Sparks Debate

Xiaomi has drastically tightened its bootloader unlock policy, limiting users to unlocking only one device per year. While this change minimally impacts average consumers, it could significantly hinder custom ROM development. This move has sparked a debate about device ownership and user freedom, with speculation focusing on Xiaomi's motivations, including preventing users from bypassing built-in ads and tracking, or thwarting scalpers reselling phones with modified software. Users see this as restricting choice, while developers worry about reduced efficiency in custom ROM creation.

Read more
(www.androidpolice.com)
Tech Custom ROM

Obsidian Goes Freemium: Commercial License No Longer Required for Work Use

2025-02-20
Obsidian Goes Freemium: Commercial License No Longer Required for Work Use

Note-taking app Obsidian has eliminated its commercial license, making it free for all workplace use! Over 10,000 organizations, including giants like Amazon and Google, already utilize Obsidian. This change simplifies pricing and aligns with Obsidian's manifesto: "everyone should have the tools to think clearly and organize ideas effectively." While no longer mandatory, organizations can still purchase commercial licenses to support development and gain showcase opportunities on the Obsidian Enterprise page.

Read more
(obsidian.md)
Development Note-taking Freemium

Basel Tax Authority Buys Bahamian Web Address Due to Flyer Error

2025-01-31
Basel Tax Authority Buys Bahamian Web Address Due to Flyer Error

The Basel-Stadt tax authority had to purchase a web address in the Bahamas due to a mistake on an information flyer for digital tax returns. The flyer, sent to over 100,000 households, omitted the '.ch' from the web address, redirecting users to a '.bs' domain in the Bahamas. While the error has been addressed and the Bahamian address will redirect to the correct Swiss site, the mistake cost the authority CHF 900, significantly cheaper than the estimated CHF 100,000 to reprint the flyers. Taxpayers can still file their returns online, albeit with a brief Caribbean detour.

Read more
(www.bluewin.ch)
Misc tax error

Infinigen: Infinite Photorealistic 3D Scene Generator

2025-01-22
Infinigen: Infinite Photorealistic 3D Scene Generator

Developed by the Princeton Vision & Learning Lab, Infinigen is a procedural generator of 3D scenes, built on Blender and freely available under the BSD 3-Clause License. It generates limitless variations of high-quality 3D scenes using randomized mathematical rules, controlling everything from macro structures to micro details. Infinigen automatically generates annotations for various computer vision tasks like optical flow and depth estimation, making it ideal for 3D vision research. Its focus on real geometry ensures accurate ground truth data.

Read more
(infinigen.org)
AI 3D scene generation

Debunking the Myth: Thomas Watson and the Five Computers

2025-01-24

The widely circulated quote attributed to IBM's Thomas Watson, "I think there is a world market for maybe five computers," is revealed to be an urban legend. This article traces the quote's origins, demonstrating it's not from 1943, but a misinterpretation of his remarks at a 1953 shareholder meeting. Watson discussed sales projections for the IBM 701, not the entire computer market. This highlights the importance of verifying online information and the spread of misinformation.

Read more
(geekhistory.com)
Tech Urban Legend

Botswana Launches its First Satellite: BOTSAT-1

2025-03-26
Botswana Launches its First Satellite: BOTSAT-1

Botswana successfully launched its first satellite, BOTSAT-1, on March 15th, 2025, aboard a SpaceX Falcon 9 rocket. This 3U hyperspectral Earth observation satellite, developed by the Botswana International University of Science and Technology (BIUST), will provide crucial data for national development priorities including food security, environmental conservation, and urban planning. The launch represents a significant milestone in Botswana's space program and fosters human capital development through practical training for local engineers. Collaboration with Dragonfly Aerospace enhances BIUST's capabilities with advanced imaging technology and support for cleanroom facility development.

Read more
(spaceinafrica.com)
Tech Satellite Launch African Space Program

Gource: Visualizing Your Codebase with Stunning Animations

2025-01-03
Gource: Visualizing Your Codebase with Stunning Animations

Gource is an open-source software that visualizes your version control repository history in a breathtaking animated way. The repository root is at the center, directories are branches, files are leaves, and developers become dynamic characters moving around the code tree, their contributions shown as animated trails. Gource uses OpenGL rendering and requires a 3D-accelerated video card. It supports various version control systems like Git, SVN, Mercurial, and offers extensive parameters for customization, allowing you to easily generate impressive visualizations of your codebase history.

Read more
(github.com)
Development code visualization

Albion Online Players Targeted in EFF Impersonation Phishing Campaign

2025-03-06
Albion Online Players Targeted in EFF Impersonation Phishing Campaign

A threat actor impersonated the Electronic Frontier Foundation (EFF) to target Albion Online players using decoy documents and malware. An exposed directory contained malware (Steal and Pyramid C2) alongside fake EFF reports. Analysis linked the operation to a Russian-speaking developer and 11 servers sharing SSH keys. Phishing messages claimed EFF was investigating account theft, luring players to malicious links. The incident highlights the danger of threat actors leveraging the trust associated with well-known organizations.

Read more
(hunt.io)
Tech

CA AG Sues OMB to Block $3 Trillion Federal Funding Freeze

2025-01-28
CA AG Sues OMB to Block $3 Trillion Federal Funding Freeze

California Attorney General Rob Bonta, along with 22 other state attorneys general, filed a lawsuit against the Office of Management and Budget (OMB) to block a directive that would freeze up to $3 trillion in federal funding. The directive threatens to halt crucial funding for disaster relief (including California's wildfire recovery), public health, education, and public safety programs. Bonta argues the directive violates the Constitution and the Administrative Procedure Act, and seeks a temporary restraining order to prevent immediate and irreparable harm.

Read more
(oag.ca.gov)
Tech federal funding public safety

All the HTML Elements: A Comprehensive Guide

2025-01-25

This article playfully explores every HTML element, from common headings, paragraphs, and lists to lesser-known elements like `` and ``, and even deprecated elements such as `` and ``. An interactive survey is included to test your understanding. It's a fun and comprehensive journey through the world of HTML, showcasing its richness and versatility.

Read more
(iamwillwang.com)
Development HTML elements

Augmenting CLIs and APIs for LLM Agents

2025-07-20
Augmenting CLIs and APIs for LLM Agents

The author encountered limitations in existing command-line tools and APIs when using Large Language Model (LLM) agents for reverse engineering automation, especially with the small context windows of local models. APIs need to balance providing enough information to reduce tool calls while avoiding context window overflow. Solutions explored include improved docstrings, helper functions, and pre-commit hooks. Further improvements suggested involve wrappers that cache output, structure it, and report remaining lines, as well as shell hooks providing directory information. The author concludes that existing CLIs need LLM enhancements; perhaps even a whole set of LLM-enhanced CLIs or a custom LLM shell is needed to improve the user experience for LLM agents.

Read more
(www.notcheckmark.com)
Development CLI Tools

Samsung's Breakthrough: Next-Gen Peltier Cooling Tech for Refrigerant-Free Future

2025-07-21
Samsung's Breakthrough: Next-Gen Peltier Cooling Tech for Refrigerant-Free Future

Samsung Electronics, collaborating with Johns Hopkins APL, unveiled a revolutionary thin-film semiconductor Peltier device in Nature Communications. This nano-engineered technology achieves refrigerant-free cooling, boasting a 75% efficiency boost over conventional methods. Already integrated into Samsung's Bespoke AI Hybrid Refrigerator, the technology intelligently switches between Peltier and compressor cooling for optimal performance and energy savings. The long-term vision? A completely refrigerant-free refrigerator.

Read more
(news.samsung.com)
Hardware Peltier cooling

Exploring the Fourth Dimension: A Journey into 4D Geometry

2025-01-28

This article uses engaging analogies to explain the concept of the fourth dimension. By imagining a 2D being observing a 3D object, the author illustrates how we might perceive a 4D hypercube. It clearly explains how to understand 4D geometry through cross-sections, and utilizes rotation matrices and linear algebra to calculate and visualize the projection of a rotated hypercube into 3D space, resulting in complex geometric forms.

Read more
(axalatar.github.io)
Misc fourth dimension

From CTO to Indie Hacker: My Journey to Passive Income Through Coding

2025-01-14
From CTO to Indie Hacker: My Journey to Passive Income Through Coding

A former CTO of a 150-person software company shares his transition to becoming a full-time indie hacker, generating passive income by selling software products online. Starting with a small place card app, he gradually built a portfolio of revenue-generating software, ultimately achieving financial and time freedom. The article details his experience from finding time, selecting projects, building MVPs to marketing and promotion, emphasizing the importance of continuous iteration, managing expectations, and resilience, encouraging developers to explore turning coding skills into passive income streams.

Read more
(www.coryzue.com)
Development passive income indie hacker

China's Supreme Court Cracks Down on Academic Paper Mills

2025-03-04
China's Supreme Court Cracks Down on Academic Paper Mills

China's Supreme People's Court has issued its first-ever guidance on cracking down on academic paper mills, aiming to curb scientific fraud. While previous government regulations existed, paper mills – businesses that produce fraudulent or low-quality manuscripts – have persisted. The court's guidelines instruct lower courts to severely punish 'paper industry chains' and research fraud. The number of paper mill-related cases has increased in recent years, with court rulings shifting from recognizing contracts with paper mills as valid to deeming them invalid, reflecting a stronger emphasis on academic integrity and fair competition. While some researchers are optimistic this will curb misconduct, others remain skeptical of its impact.

Read more
(www.nature.com)
Tech paper mills
1 2 … 584 585 586 588 590 591 592 … 596 597