• 0 Posts
  • 489 Comments
Joined 3 years ago
cake
Cake day: June 30th, 2023

help-circle

  • Yeah, windows came from a different era where if you’re seeing a new exe, it’s because you put a disk in the drive and explicitly navigated to it. Speaking of which, this isn’t even the first time that convenience ended up opening up a wide security hole because they handled CDs differently and added an autoplay feature that would check the disk for autorun.exe and just run it if autorun was enabled. I started disabling it after word about sony’s rootkits got out but have been appalled to see it enabled by default still ever since then.

    I was one of the few that appreciated UAC when it was there and kept it on one of the stricter settings. I’d rather my PC ask than assume, but people bitched about it so they weakened it and eventually just got rid of it entirely I think?

    Though a permissions setup would be even better. I didn’t like that UAC was an all or nothing prompt, plus it didn’t give any details about what a program wanted to do. Are you asking because this program is trying to create a new directory in program files or because it wants to replace system32 dlls with its own versions?

    It’s an area even Linux can improve in (though probably depends on flavour). I like the android permissions model, where there’s various actions and you can allow or deny categories (though GrapheneOS does it even better by also sandboxing everything). I’d love to see something like that for my desktop, where apps are free to save files but can’t touch files that aren’t their own unless an explicit share is set up, where I might want one app to have network access and no disk access and another to have the opposite. I’d love to be at a state where I could just run any executable from the internet because I know that my OS won’t let it fuck anything up other than its own address space. Hell, could even dedicate a core to monitoring apps to detect if one breaks out of its sandbox without my explicit permission (while the OS also doesn’t use that to enforce the desires of other developers over my own).





  • Back in the 00s, a story about CPUs getting so hot they’d start on fire went viral. In it was a video of someone removing the cooler while it was running and then a few seconds later a flame appears.

    On the one hand, obviously you shouldn’t remove your CPU cooler while it was running.

    But on the other hand, fans and mounts can fail, so this was still a risk even for people who were smarter than removing the cooler entirely.

    It prompted CPU makers to add thermal protections that started out as “if CPU hits threshold, cut power”, but over time more sophisticated heat management was integrated with more sophisticated performance and power management.

    So these days, if you aren’t sufficiently cooling your CPU, it won’t die much quicker, instead it will throttle performance to keep heat at safe levels. OP would have gotten better performance out of it after removing that plastic. Assuming it was CPU bottlenecked in the first place. Things like RAM choice and settings can make it a moot point because the RAM can’t keep up with the CPU at 100% power anyways.





  • On yeah, the little mouse puzzles. I always figured it wouldn’t be that hard to give cursor movement a more natural curve, just give it an interpolation that clamps the first 3 derivatives of position and adds jitter and a little overshoot and correction or clamps the derivatives even harder at the end to mimic slowing down for precision.


  • I’d say countdown to programs that pretend to be webcams and display an AI video of the requested action has started but I bet at least someone has already done it. And then the arms race between actions to be requested and what AI can do will start until eventually passing the test will be a fail because the actions requested are either too difficult for humans to understand or too difficult for humans to perform, at which point AIs will be trained on knowing the physical limitations of humans.

    This will come in handy for when they get tired of our shit.


  • Personally, one of the reasons I mostly play solo video games is so that if I feel like taking a break, I can do so without affecting anyone else or needing to wait until everyone is ready for a break. Sometimes I think I want to play a game and then am just not feeling it a few mins in. Or I’ll be really into a game for months and then just drop it when that obsession passes.

    Playing together is a big commitment!



  • I’m one of those the fits in both categories. I’ve been blown away by what these AI agents are capable of. I’ve “written” a bunch of scripts that involve parsing and generating code for another tool to consume and it’s been able to take over the tedious parts, like writing a function to parse the parameters out of this code, then follow the code it goes into and extract the relationships between the parameters and recreate them another way. It’s something I could write the code for, but that code will be mostly undocumented, will contain “quick version that I’ll come back later and fix up (but I never get to it because if it works, there’s other more productive things to do)”, plus some debug code that I’m not sure if I’ll need again so it’s just there so I can uncomment it instead of writing it again. Not to mention all the typos and sloppy errors along the way that may or may not be easy to find later during compile and testing.

    I consider myself a competent coder. AI makes me better, more focused and less sloppy. But that said, my prompts reflect that. I understand that these models aren’t really programmers but just correlation engines that have been trained on a ton of programming material. It can tell you the traveling salesman problem is NP but won’t necessarily realize that the problem you’ve asked it to solve is equivalent to the traveling salesman problem. It will happily spit out an identical function to one it did before, just with name differences that are specific to the current thing it is doing rather than just calling the same function. It will pick the least efficient way to do some things. It’s not a problem solver, it’s a solution predictor, which sounds better but isn’t.

    So I consider them more like force multipliers rather than adders. If you have the skills, I believe you could use an LLM to make anything (as a development cycle, not “spits out perfect implementation first try”), but if you don’t have the skills, you’ll struggle a lot even on fairly basic shit simply because you don’t how to direct the LLM properly.

    But I still watch it produce code with a mixture of awe and fear. I don’t think the above will be true forever. Maybe not even for the rest of the 20s.






  • Can you elaborate a bit on how notepad following a link can result in running arbitrary code? Cause it sounds more like a second vulnerability is involved, because a text editor following a link still shouldn’t result in running whatever code is on the other side of the link.

    Though it is a privacy issue on its own, just like a tracking pixel or images in emails.

    I’m also curious what the actual use case is for having a link that notepad automatically follows on load in markdown. Or why they got rid of wordpad (their default rich text editor) and put it into notepad (their plain text editor), ruining one of the reliable things about notepad: it would just show you the actual bytes of the file, whether it was text or not, kinda like a poor man’s hex editor (just without the hex).

    Makes me wonder if eventually opening an html file in notepad will make it render it like a browser. “Back in my day, we edited html in notepad instead of browsed it!”