|
This post introduces the “degenerate point” — the fraction of tied values at which a dispersion estimator collapses to zero — as a metric for comparing robustness to ties. Pragmastat recommends Spread — the Shamos estimator — which is based on pairwise differences and is therefore resistant to ties. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat Recently, I have been ....
|
|
The first step to any code review is understanding what the code does and why. Although the author is by far the most qualified person to…
|
|
This post introduces the “degenerate point” — the fraction of tied values at which a dispersion estimator collapses to zero — as a metric for comparing robustness to ties. Pragmastat recommends Spread — the Shamos estimator — which is based on pairwise differences and is therefore resistant to ties. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat Recently, I have been ....
|
|
The first step to any code review is understanding what the code does and why. Although the author is by far the most qualified person to…
|
There are words that have great power. They can destroy kingdoms or achieve accomplishments beyond imagination. One such word is "No". Simple, elegant, straightforward. Demolishing, thunderous, unequivocal. Just "No". Why say "No"? Because of you. Life becomes so complex that at some point you
|
|
Cathy Park Hong’s Minor Feelings is a seminal essay in bringing to the light the experience of Asian Americans, and by extension…
|
|
I think that using a dedicated air-gapped machine just for opening PDFs is a bit much if you don’t rely on assistive technologies to read PDFs. A much less nuclear option: Qubes OS has an excellent PDF converter to convert PDFs to safe bitmaps, and back into PDFs. The results are completely inaccessible, so I wouldn’t recommend sharing the final artifacts; however, this approach is fine for personal use. The Qubes blog covers this in mo..
|
|
Today, Brian Krebs reported on account takeovers happening at Experian, one of the 3 major credit agencies. The first step after getting account access is to lock out the account owner, usually by swapping the email address. 10 years ago I dealt with this problem extensively, so I'd like to share how to solve it.
|
|
AWS WAF might be your first layer of defense for attacks on websites hosted on AWS. While WAF does its best at blocking web attacks, it doesn’t stop web abuses - like bot attacks involving API abuse. For example, submitting comments on pages, credential spraying, OTP bruteforce/resend, etc.
|
|
This is an expanded version of a microblog entry: Stylometric fingerprinting resistance . It contains everything in that entry and more. I am open to feedback, especially from anybody with a more thorough background in the subject; here’s my contact information . Introduction Following a recent landmark SCOTUS ruling, many have been trying to publish resources to help people find reproductive healthcare. They often wish to publish ....
|
|
UPDATE: dwim-shell-command is now available on melpa . I keep on goofying around with dwim-shell-command and it's sibling dwim-shell-command-on-marked-files from dwim-shell-command.el . In addition to defaulting to zsh , dwim-shell-command-on-marked-files now support other shells and languages. This comes in handy if you have snippets in different languages and would like to easily invoke them from Emacs. Multi-language supp....
|
|
Holly and I recently returned from Washington. We took a trip out there to go visit my sister who was finishing her internship at Microsoft.
|
|
Implementing a simple jq clone in Go, and basics of Go memory profiling
-
notes.eatonphil.com
-
3 years ago
-
eng
In this post we'll build a basic jq clone in Go. It will only be able to pull a single path out of each object it reads. It won't be able to do filters, mapping, etc. $ cat large-file.json | head -n2 | ./jqgo '.repo.url' "https://api.github.com/repos/petroav/6.828" "https://api.github.com/repos/rspt/rspt-theme" We'll start by building a "control" implementation that uses Go's builtin JSON library with a JSON....
|
|
A collection of tweets on the philosophy of life, wealth, relationships, learning, and health from the investor and founder of AngelList Naval Ravikant.
|
|
Recently, I have been following a lot of events that made me uneasy about the future of both GNU/Linux and Free Software in general. Normally I have been an observer in these events, but I found that I have formed pretty coherent set of ideas, feelings and preferences for the future evolution of these things. As a result, I've found myself inside many discussions about these topics, and I came out pretty unimpressed and disappointed about....
|
|
Recently, I have been following a lot of events that made me uneasy about the future of both GNU/Linux and Free Software in general. Normally I have been an observer in these events, but I found that I have formed pretty coherent set of ideas, feelings and preferences for the future evolution of these things. As a result, I've found myself inside many discussions about these topics, and I came out pretty unimpressed and disappointed about....
|
|
A collection of tweets on the philosophy of life, wealth, relationships, learning, and health from the investor and founder of AngelList Naval Ravikant.
|
|
L: Update: This post does not apply anymore, we uh, found a flat long ago English Update: Click here for contact options Update: Got the news our friend won't share a flatshare with us for certain… so now it's certain we need to find something else… Until recently… we planned to have a flatshare with a friend, who wanted to study in Berlin… right now, we're unsure if that will work out though, given it has been hard to contact sa....
|
|
I've liked the concept of NuShell since I first heard about it. I then liked it more when I discovered that Yehuda Katz was involved since I strongly believe in picking software based on the pedigree of the engineers involved (no I don't – yet – have engineer trading cards but I'm thinking about it). Although I have NuShell running on my experimental system, I've held off on using it on my main box mostly due to concerns about the vast a....
|
|
NOTE : I'm not telling you to do this. This blog post advocates bulk permission changing and that's risky but HomeBrew was entirely broken and brew doctor did not work. And this solution did. Use at your own risk. I have two primary machines – a Mac Desktop and a dual monitor Mac Laptop. I use the laptop more mostly from habit but I'd really like to use the desktop for something that makes me feel better about it being next to me and ....
|
|
UPDATE: dwim-shell-command is now available on melpa . Since writing a DWIM version of the shell-command , I've been having a little fun revisiting command line utilities I sometimes invoke from my beloved editor. In this instance, converting a png file to an icns icon. What's more interesting about this case is that it's not just a one-liner, but a short script in itself. Either way, it's just as easy to invoke from Emacs using ....
|
|
UPDATE: dwim-shell-command is now available on melpa . With a recent look at writing DWIM shell commands , I've been revisiting my custom Emacs functions invoking command line utilities. Take this post , for example, where I invoke qpdf via a elisp. Using the new dwim-shell-command--on-marked-files in dwim-shell-command.el , the code is stripped down to a bare minimum: (defun dwim-shell-commands-pdf-password-protect () "Pas....
|
|
Exploring CVE-2022-33980: the Apache Commons configuration RCE vulnerability
-
snyk.io
-
3 years ago
-
eng
In this post, we’ll explore CVE-2022-33980, the Apache Commons configuration RCE vulnerability. However, we want to make it clear that there’s no need for panic. This is not Log4Shell all over again. This is simple configuration manipulation.
|
|
The first time I’d heard of the Tor in Glastonbury, it was as a result of reading a fantasy book as a teenager. Enthralled by the myths and legends the book described, I did some reading and learned that the legends did not just exist in the world of the book. I knew I wanted to visit since then.
|
|
Most of these are pages that blur the line between “document” and “app”, containing many interactive controls. Being concerned about them is valid; however, I think the concern is misplaced at this stage. For an independent engine, I’m more interested in simple “web documents”. Those need to work well before tackling “Web 2.0” territory. Specifically: articles progressively enhanced with images, stylesheets, and maybe a script or two. U..
|
A.k.a. how to install a in-situ composter made by the company “Algreen Products” company . TL;DR; What is a “solar digester”? How does a “solar digester” work? What benefits does a “solar digester” provide? What are the detriments of a “solar digester”? Step by step install instructions
|