hngrok

Since Chromium 148, Math.tanh is now fingerprintable to link underlying OS from scrapfly.dev
333 by joahnn_s 5h ago | | |

Article: 27 min

The article discusses how Math.tanh function in JavaScript can be used to fingerprint underlying operating systems due to slight differences in its output on various OS platforms, which are attributed to the different implementations of libm libraries. The article also explains the reasons behind these discrepancies and provides a detailed guide on how to reverse-engineer and reproduce the algorithm exactly for each platform.

Quality:
The article provides detailed technical information and is not overly promotional or sensational.

Discussion (160): 33 min

This comment thread discusses various aspects of numerical computation, including floating-point and fixed-point arithmetic, with a focus on their advantages and disadvantages. It also delves into debates surrounding the ethics and legality of web scraping, particularly in relation to AI-generated content and privacy concerns.

Floating-point arithmetic has advantages over fixed-point arithmetic in terms of precision and ease of use.
Fixed-point arithmetic can offer uniform absolute precision but is less convenient for software applications.

Counterarguments:

Fixed-point arithmetic can be more efficient for certain applications requiring uniform precision and deterministic behavior.

Computer Science , Computer Security

GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years from nebusec.ai
107 by ranger_danger 4d ago | | |

Article: 38 min

GhostLock is a critical vulnerability in the Linux kernel that has existed since 2011, allowing unprivileged local attackers to escalate privileges and escape containers. The exploit strategy involves triggering a race condition with a specific sequence of futex operations, leading to a stack-use-after-free (UAF) scenario.

This vulnerability could lead to significant security breaches in systems relying on Linux, potentially compromising sensitive data or enabling unauthorized access.

15-year existence in Linux distributions
No special kernel configuration or privilege required
$92,337 reward from Google's kernelCTF

Quality:
Detailed technical analysis and clear disclosure of the vulnerability

Discussion (24): 2 min

The comment thread discusses a security vulnerability in Linux known as 'GhostLock', its impact on Android devices, and the controversy around upvoting original content. There is also debate about the severity of the vulnerability and its implications for different platforms like Linux containers and Firefox/IonMonkey.

original post should be upvoted

Security Vulnerabilities & Exploits

Cyberpunk Comics, Manga and Graphic Novels from shellzine.net
86 by zdw 4h ago | | |

Article: 55 min

This article is a comprehensive list of cyberpunk-themed comics, manga, and graphic novels spanning various publication dates. It includes works from Western comics, Japanese manga, and graphic novels that explore themes such as dystopia, overpopulation, technology, and societal critique.

The list provides a valuable resource for fans and scholars of cyberpunk literature, potentially influencing the direction of future works in the genre.

Themes: Dystopia, overpopulation, technology, societal critique
Publication dates ranging from the 1970s to the present day

Discussion (22): 3 min

Users discuss their preferences for different Ghost in the Shell adaptations, with some expressing hope for a follow-up animation and others feeling the franchise is over-rebooted. There's also discussion about Cyberpunk comics and recommendations of various manga series.

The new Ghost in the Shell anime has a similar animation style to the original manga

Counterarguments:

The user is done with the Ghost in the Shell franchise due to numerous reboots

Arts Comics & Graphic Novels

Tiny Emulators from floooh.github.io
157 by naves 6h ago | |

Article: 10 min

This post is a collection of links to tiny emulators for various classic computer systems, including 6502, Z80, KC85/2-4, C64, CPC, ZX Spectrum, VIC-20, Atom, and others. Each emulator comes with UI options and instructions on how to run specific games or demos.

Emulation of various classic computer systems
UI options for game selection and control

Discussion (9):

The comment thread discusses the features and potential applications of tiny emulators, with a focus on modularity, interfaces, and AI-generated code conformance.

Software Development Game Development

So you want to learn physics (second edition, 2021) from susanrigetti.com
114 by azhenley 4d ago | | |

Article: 1 hr 5 min

This article is an updated guide to learning physics, offering a comprehensive curriculum from introductory to graduate levels with recommended textbooks and resources.

Offers a detailed guide for self-study in physics, covering topics from introductory mechanics to advanced quantum field theory.
Lists recommended textbooks and resources for each topic area.
Emphasizes the importance of solving problems as the key to understanding physics.
Discusses popular books on physics suitable for inspiration and overview.

Discussion (13): 2 min

The comment thread discusses various perspectives on learning physics, with a focus on self-study versus traditional university courses. Opinions vary on the effectiveness of different methods and the value of pursuing a comprehensive course of study.

Learning through self-study requires clear direction or specific interest.
There are many people who self-teach themselves university-level courses.

Counterarguments:

Learning in a non-linear fashion can be more efficient for specific needs.

Education Science Education, Physics Learning Resources

Designing and assembling my first PCB from vilkeliskis.com
57 by tadasv 3h ago | | |

Article: 18 min

The article describes a personal journey in designing and assembling a custom PCB for an IoT project using Arduino Nano ESP32 dev board, including the process of schematic design with KiCad, sourcing components from DigiKey, ordering a PCB from JLCPCB, and hand assembly with Hakko FX888DX-010BY soldering iron and Quick 861DW hot air station.

Used Arduino Nano ESP32 dev board as the base for prototyping
Designed a BME280 sensor module using KiCad
Sourced components like LCD and BME280 sensor breakout boards from DigiKey
Ordered custom PCBs from JLCPCB

Quality:
The article provides a detailed, step-by-step guide with personal insights and experiences.

Discussion (10):

The comment thread discusses the positive experiences and opinions of users regarding affordable custom manufacturing services, particularly for PCBs and sheet metal parts. Users highlight game-changing impacts on their projects, interest in CAD design, and the benefits of competition driving reasonable prices.

affirmative opinion on the accessibility and affordability of custom manufacturing services

Hardware Arduino/Embedded Systems, Soldering & Assembly

Why Vanilla JavaScript from guseyn.com
67 by guseyn 3h ago | | |

Article:

The article provides advice on how to prevent malware infections when using personal connections.

Run an antivirus scan on your device at home.
Ask the network administrator to check for misconfigured or infected devices in a shared office environment.

Discussion (28): 7 min

The comment thread discusses the pros and cons of using frameworks versus vanilla JavaScript, with a focus on the benefits of both approaches. The conversation also touches on Web Components as an alternative to frameworks and the impact of AI on development practices.

Frameworks are essential for guiding future development and establishing ground rules.
Bespoke solutions can be artful but lack structure for future developers.

Counterarguments:

Creating bespoke solutions can be artful but may lack structure for future development.

Internet Security

Modernizing Property Tax Assessments in Allegheny County from prohousingpgh.org
15 by mooreds 1h ago | |

Article: 4 min

Pro-Housing Pittsburgh has released a report advocating for modernized property tax assessments in Allegheny County, using open-source methods to estimate updated values and improve transparency. The report suggests that regular reassessments could be performed internally by the county at an affordable cost of approximately $1 million per year, potentially generating tens of millions of dollars in annual economic benefits.

The report could lead to more equitable property tax assessments, increased public confidence in the assessment process, and potential economic benefits for the county.

Periodic reassessments since the 1970s have led to inequities and reduced transparency.
Proposed use of modern, open-source assessment techniques for fairness and efficiency.
Potential for $1 million annual cost for in-house reassessment.

Discussion (1):

The comment discusses the experience of appealing Allegheny county's newcomer tax, noting its strange process and potential gentrification effects while acknowledging it might be necessary for continued growth.

The process of appealing the newcomer tax was strange.
There is a benefit in not raising taxes consistently for long-term owners.

Government & Politics Local Government, Public Policy

Old and new apps, via modern coding agents from terrytao.wordpress.com
420 by subset 15h ago | | |

Article: 7 min

Mathematician Terry Tao discusses his experience with migrating old applets to modern languages using AI assistance, and shares the process of creating new apps related to special relativity and the Gilbreath conjecture.

Tao successfully migrated his old web page and blog data to a more maintainable repository using AI assistance.
AI helped porting old applets from Java 1.0 to Javascript, with graphical upgrades and identifying bugs in the original code.
Tao created an applet for visualizing special relativity, inspired by his idea from 1999, and is seeking feedback on its alpha version.
He also developed a visualization tool for the Gilbreath conjecture, which he plans to use as supplements for future papers.

Quality:
The article provides a detailed account of Tao's experience with AI assistance, which is informative and balanced.

Discussion (122): 22 min

The comment thread discusses the use of Large Language Models (LLMs) in various fields, particularly their potential impact on software development jobs. Opinions range from positive views on LLMs' utility in education and research to concerns over job displacement. The discussion highlights the integration of AI into different domains while acknowledging its limitations.

LLMs have the potential to revolutionize software development by assisting in various tasks, including teaching materials creation, mathematical research, and visualization generation.
There is a concern about the displacement of traditional jobs due to advancements in AI technology.

Counterarguments:

LLMs are not always suitable for serious tasks due to their limitations in understanding context and nuances specific to certain domains.
Not all mathematicians share the same level of concern about AI's impact on their profession.

Computer Science Software Development, Artificial Intelligence

The four horsemen behind Postgres outages from malisper.me
14 by craigkerstiens 3d ago | |

Article: 17 min

The article discusses the common issues that lead to Postgres outages, focusing on VACUUM and Transaction ID Wraparound, Connection Limits and Query Parallelism, Bad Query Plans, and JSON usage. It also introduces pgrust, a reimplementation of PostgreSQL aiming to address these problems.

pgrust aims to improve PostgreSQL's reliability and performance, potentially reducing outages in production environments.

VACUUM process can lead to I/O competition, causing outages.
Transaction ID wraparound requires a shutdown to prevent data corruption.
Connection limits limit scalability and require careful configuration.
Bad query plans can significantly impact performance.
JSON usage in Postgres has limitations with statistics and compression.

Quality:
The article provides a balanced view of the issues and solutions, with clear explanations.

Discussion (2):

More comments needed for analysis.

Database PostgreSQL