As much as I think TSLA/SPCX are overvalued there is nothing unique about their drop compared to many other companies in the last day or two. I wouldn't even hazard a guess on whether the floor has fallen out on anything yet, it could just as well be a temporary reaction to the election results and volatility following the uncertainty of that for these types of companies.
Of course one can always pick a set of tickers and day ranges that make it seem like any trend if you filter the view enough.
Keyboard parts based macropads are the original idea and have been around long before AI. Single purpose marketed versions are the lazy implementations - you can already get any keycaps you want and swap them on to your 10 year old macro pad (or spend a little more for ones with traditional screen based buttons).
In Alpine, these would all be the case for an out of the box install with openssh added unless you specifically install openssh-server-pam and configure sshd_config to use PAM (Alpine is already musl-c based and doesn't default to PAM).
Doesn't it also need a user to be added with a password entry?
I only ever see Alpine Linux used for containers which don't need accounts with interactive user logins, which is not to say it doesn't exist, just that it doesn't seem like Alpine comes with all preconditions met out of the box
Isn't it the opposite, accounts which have no password and hence had * instead of a hash?
> accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters.
But yeah, Alpine for persistant installs isn't unheard of - just not as popular as the container use case. They offer official VM, Xen, Pi, and bare metal images users deploy as well. I actually had a fleet of VMs to update!
Edit: The Alpine notice made it clearer to me that at least one other account has to have a password, it's just the target account that doesn't. So if you truly have no users with passwords in your container deployment then those passwordless users aren't vulnerable to this bug, but any of the image types which have a user will likely have root exposed.
> The attacker needs the name of an account whose password field is * (an account with no password set, which is normal for key-only accounts), and needs the machine to have at least one other account with a $5$ or $6$ password hash.
I think it's worth pointing out the compiler usually won't do much (if any) of this kind of check unless you tell it to.
When you tell it to, you usually have good control around what kind of thing you want it to consider a problem, how much effort you want it to spend trying to prove that, and what should happen with code it can't prove that property for. Most commonly, people just use the "tell me if I've made an obviously dumb infinite loop which does nothing useful while it runs".
E.g. y-cruncher does something other than infinitely loop for no reason so it wouldn't trigger the loop detection logic on most anyone's compilation settings.
On the other hand, a loop which does nothing but run until the last digit of pi would either trigger the compiler to say this is a useless infinite loop or to say it isn't able to prove this loop stops (almost certainly the latter, as such a loop is a great example of going out of your way to fool the compiler).
A loop which sometimes terminates and sometimes doesn't depending on runtime input would depend on your compiler settings, but almost always nobody sets it in a way to say that's a problem (and when they do almost always it's not possible for the compiler to prove one way or the other) if their compiler even supports that kind of analysis.
Interestingly, in C++, a trivial infinite loop is undefined behavior. So the compiler not only doesn’t have to detect it, it is allowed to assume you didn’t do it. [0] This is inconvenient when you actually want a trivial infinite loop. (C++26 was going to fix this, but it seems we may not ever get a C++26…)
> The basic algorithm divides points by a power of the time since a story was submitted. Comments in threads are ranked the same way.
> Other factors affecting rank include user flags, anti-abuse software, software which demotes overheated discussions, account or site weighting, and moderator action.
The Intel D270, Nvidia DGX Spark, and (somewhat) AMD Strix Halo also use the same approach, so it seems to be getting pretty common.
SRAM wise it doesn't seem too insane. About the same ratio of memory:SRAM as the 5090 (IIRC). Still more than I would have expected. I assume they found it helps process the current layer faster or something.
If you need to start adding exceptions before you've finished your comment then it seems it must not be hard to come up with how someone can find value in it?
For a random non-software example: My mother has an HR job and absolutely loves it for working with spreadsheets, sorting through email, making mail merges, reviewing the policy documents for errors as she works on them, and so on. She spends less time in document hell and more time getting things done or talking to people.
Personally, I find the ability to quickly remove technical debt to be more practically valuable than the ability to quickly create software. A lot of the smaller shops I work with never had the time or money to properly manage, update, or retire their infrastructure. Now many are in a better shape than my own stuff has been because you don't need to be an uber nerd spending a weekend to upgrade an ancient & neglected MediaWiki box (or whatever) anymore.
> If you need to start adding exceptions before you've finished your comment then it seems it must not be hard to come up with how someone can find value in it?
I only added it because I don't consider that use case a valid exception and I'm just anticipating that sort of comment.
Creativity is defined by what one did in the creative process, not whether you did something else outside of the creative process or not. I.e. if the only thing you do is say "make me a piece of art, I'll pay you $x" then you had 0 creative involvement. Not because you paid for it, but because of the lack of doing anything during the creation process.
The same is true of using any tool. If you just click a premade and generic "process photo" button in an image editor for every photo you get then you're doing no creative work (unless that whole action is a meta statement itself or something). If you mess with the different options and settings to find the one which matches your creative vision then you've played a part in the creative process, even if you weren't the one responsible for the code of how the pixels changed and paid for the software to do that part.
To LLMs directly, if you just say "make me some art" then you've done nothing creative as well. If you iterate and mess around with what you like until you get something you find interesting, then you've played, what seems to me, the biggest part in the creativity process of that output (which has nothing to do with where the code to match that vision of the output came from). I think LLMs and creativity can be confusing because "make me some art" will produce something that, at a glance, looks very much like we'd expect creative art to look like (regardless the reason or if it actually is), and we often falsely jump to the conclusion anything that looks creative out of an LLM must therefore only ever be able to source from the LLM. This would be like assuming because an image editor has that generic "process photo" button one can never do anything creative with an image editor.
ASML -9% in 1 day
AVGO -10% in 1 day
MU -17% in 1 day
NVDA -9% in 1 day
SKHY -13% in 1 day
TSMC -10% in 1 day
As much as I think TSLA/SPCX are overvalued there is nothing unique about their drop compared to many other companies in the last day or two. I wouldn't even hazard a guess on whether the floor has fallen out on anything yet, it could just as well be a temporary reaction to the election results and volatility following the uncertainty of that for these types of companies.
Of course one can always pick a set of tickers and day ranges that make it seem like any trend if you filter the view enough.
reply