Rewritten in Rust at https://github.com/Lyokolux/murder

One thing is it seems easier than tmux to use

Un fil permet de suivre la veille à plusieurs, et aussi de trier les publications d'un flux RSS unique.

Ce qui me frappe, c'est le chemin parcouru. Il y a vingt ans, c'était une astuce pour éviter d'écrire du HTML. Il y a dix ans, c'était notre format à nous, dans les repos. Aujourd'hui, mes clients en reçoivent sans le savoir, et je rédige des fichiers .md pour expliquer mes projets à des agents IA.

On the other hand: what passwords have going for them is that they’re very intuitive, everyone knows how they work, people have been using them since time immemorial, and you can choose where you store them and who you share them with. Keep this in mind.

What’s neat about TOTP is that it doesn’t rely on text messages or email or even the internet at all. Your authenticator software simply generates a random-looking number every 30 seconds based on the current time (and a random starting number called a “seed” or a “key” that is unique to you), and this is all that a website needs to verify you’re you.

Similar to passwords, TOTP can be stored the way the user want.

In fact there are many different things called “passkeys” and the FIDO Alliance has intentionally named all of them the same thing. I believe this was done in order to deliberately confuse users and encourage them not to look too closely at the fine text.

There are multiple properties for a passkeys:

• copyable or not copyable
• transferable or not transferable
• hardware-backed or software-backed
• user present or non-user-present
• user verified or non-user-verified
• attested or non-attested: They’re called authenticator data flags in the WebAuthn standard.

A platform can now say: "sorry, we only accept the User-Present User-Verified Non-Copyable Hardware-Backed varieties of passkey here" or just: "unfortunately your passkey isn’t secure enough; download our app.” But it’s an open standard, isn’t it?

Attested passkeys is the glitch (authenticator data flag AT, if you were wondering). This is the feature that means you no longer get to make the calls about your passkeys. "Critically, remote attestation requires the co-operation of your cryptoprocessor, your passkey manager software, your device’s operating system, and your device’s firmware to all pass the remote attestation check".

My expectation is that the industry will start off with very few constraints on your passkeys, and gradually add more and more, not all at the same time, but staggered on different sites, and then in a few years people will forget that they were ever offered a choice in which security measures they want to enable on their passkey.

For intelligence agencies, and for corporations like Microsoft, Google, Apple, Facebook, Amazon – giving you convenience and security is likely not their primary goal. I think they have an entirely ulterior motive. They can use passkeys to prevent you from running unapproved software.

Selon le fabricant, la majorité des unités concernées sont des produits anciens, notamment des modèles AK-SM800 et AK-SC355, arrivés en fin de vie et qui ne reçoivent plus aucune mise à jour logicielle ni correctif de sécurité.

Selon le fournisseur, il fallait donc changer le matériel. Du point de vue des supermarchés, pourquoi changer tant que les réfrigérateurs fonctionnent ?

On ne parle cependant pas de la gestion financière de l'État.

See https://rea.tools/

OpenAI submissions on math related topics

Now we have generative AI, which can also do this work. To a person who doesn’t care about the craft, some generated documentation or design elements are exactly the same as those handed over by a writer or designer. Someone, or something, else has done the work. However, machines don’t care. [...] Design systems and editorial style guides need people who care. They need people who care about the small details, who obsess over consistency. They need people who are willing to push back, and who are happy to say no to the endless requests to ignore the guidelines just this one time.

he problem for us is that it’s very difficult to demonstrate the impact of it until it’s gone

An optimisation to make JSON as robust and easy to update as JOSONB, optimized for query and performant access to the data.

Effectivement, si on doit supprimer un mail au nom de l'écologie, alors il faudrait peut-être revoir les priorités:
1) arrêter d'utilsier l'IA
2) les publicités sur une page web qui charge 2MB de données (mais un mail de 100ko c'est le mal)
3) utiliser des appareils pour deux ou trois ans

La liste continue et ensuite il s'agirait de supprimer les mails. Il s'agit ici d'économie de bouts de chandelles comme le dit Le Hollandais Volant.

1) Quand un logiciel est opensource, vous pouvez accéder à son code source, le lire, le comprendre et le modifier (ces deux mots sont importants). Un modèle de LLM, ce sont des milliards de paramètres en virgule flottante que personne ne peut comprendre. Personne n'est capable de dire, par exemple, comment est encodé le concept de "pomme" dans un tel modèle. Et il est donc encore moins possible de le modifier.

2) Une LLM "opensource", c'est comme si je vous donnais un programme binaire déjà compilé (un .exe) en vous disant : "C'est opensource ! Il contient toutes les instructions en langage machine !" [et le reverse engineering est impossible] (À ce titre, Windows est opensource, hein.) Il serait plus juste de parler de modèles gratuits, mais c'est tout.

3) En plus de ne pas pouvoir les inspecter, vous n'avez aucune idée des données qui ont servi à entraîner ces modèles "opensource". Vous ne savez donc même pas ce qu'ils contiennent.

Did you know that we live in a world where octopuses dream, otters have a favorite shell that they carry with them all their lives, cows have best friends, and bees have different “dialects” of dance depending on the region?
Or that cats purr at a frequency that accelerates bone healing, the forest grows flowers first after a fire, and dolphins give each other names and respond to them, and Penguins make proposals by giving each other the most beautiful pebble?
…be on the lookout for wonder.