yarnd that's been around for awhile and is still present in the current version I'm running that lets a person hit a constructed URL like
@prologic@twtxt.net @bender@twtxt.net I partially agree with bender on this one I think. The way this person is abusing the /external endpoint on my pod seems to be to generate legitimate-looking HTML content for external sites, using a username that does not exist on my pod. One “semantically correct” thing to do would be to error out if that username does not exist on the pod. It’s not unlike having a mail server configured as an open relay at this point.
It would also be very helpful to give the pod administrator control over what’s being fetched this way. I don’t want people using my pod to redirect porn sites or whatever. If I could have something as simple as the ability to blacklist URLs that’d already help.
How to Run Llama LLM on Mac, Locally
Llama is a powerful large language model (LLM) developed by Meta (yes, the same Meta that is Facebook), that is able to process and generate human-like text. It’s quite similar to ChatGPT, but what is unique about Llama is that you can run it locally, directly on your computer. With a little effort, you’ll be … Read More ⌘ Read more
Google’s Pixel 9 Pro approaches AI overload, but it’s still a fantastic phone
As well as providing brilliant hardware, the best version of Android and fantastic cameras, the latest Pixel introduces a raft of generative AI. ⌘ Read more
Survey: The AI wave continues to grow on software development teams
We surveyed 2,000 people on software development teams at enterprises in the U.S., Brazil, India, and Germany about the use, experience, and expectations around generative AI tools in software development.
The post Survey: The AI wave continues to grow on software development teams appeared first on The GitHub Blog. ⌘ Read more
Procreate Dev: “I really BEEPing hate generative AI”
Maker of graphic design software for iPad declares “No AI Features” policy. ⌘ Read more
It seems silly to me that we humans create thermal energy with coal, convert the thermal energy to mechanical energy with steam turbines, convert the mechanical energy to electrical energy with generators, and convert the electrical energy back into thermal energy with glass-top stoves and electric heaters.
What are AI agents and why do they matter?
Learn how AI agents and agentic AI systems use generative AI models and large language models to autonomously perform tasks on behalf of end users.
The post What are AI agents and why do they matter? appeared first on The GitHub Blog. ⌘ Read more
4th Public Beta of iOS 18, iPadOS 18, macOS Sequoia, Available for Testing
The fourth public beta version of iOS 18, iPadOS 18, and MacOS Sequoia, is now available to beta testers. The 4th public beta builds match the 6th developer beta builds. Beta system software is intended for advanced users and is generally a buggier experience with less than optimal performance, but anyone can install iOS 18 … [Read More](https://osxdaily.com/2024/08/13/4th-public-beta-of … ⌘ Read more
通過 Go 示例理解函數式編程思維
一個孩子要嘗試 10 次、20 次才肯接受一種新的食物,我們接受一種新的範式,大概不會比這個簡單。– 郭曉剛 《函數式編程思維》譯者函數式編程 (Functional Programming, 簡稱 fp) 是一種編程範式,與命令式編程(Imperative Programming)、面向對象編程(OOP)、泛型編程(Generics Programming)、邏輯編程 (logic Pro ⌘ Read more
DFI RPP051: A 2.5″ Pico-ITX Single Board Computer Featuring 13th Gen Intel Core Processors
DFI RPP051: A 2.5” Pico-ITX Single Board Computer Featuring 13th Gen Intel Core Processors
The DFI RPP051 is a compact 2.5-inch Pico-ITX board equipped with the latest 13th Generation Intel Core Processors, making it suitable for space-constrained applications in digital signage, IoT and more. Its small form factor combined with powerful multi-core capabilities offe … ⌘ Read more
Introducing GitHub Models: A new generation of AI engineers building on GitHub
We are enabling the rise of the AI engineer with GitHub Models–bringing the power of industry leading large and small language models to our more than 100 million users directly on GitHub.
The post Introducing GitHub Models: A new generation of AI engineers building on GitHub appeared first on The GitHub Blog. ⌘ Read more
How to Get Apple Intelligence on Your iPhone, iPad, or Mac
Apple Intelligence is a set of AI features that Apple is rolling out in beta, and will debut to a larger set of Apple device owners in the fall. Apple Intelligence offers many features from writing and creating text and emails, to taking actions and operating across different apps, to image generation, document and text … [Read More](https://osxdaily.com/2024/07/31/how-to-get-apple-intelligence-on-your-iphone-ipad-or-m … ⌘ Read more
iOS 16.7.9, iPadOS 16.7.9, iOS 15.8.3, & iPadOS 15.8.3 Released with Security Fixes
Apple has issued security updates for prior generation iPhone and iPad models that are not compatible with iOS 17.6 and iPadOS 17.6. Specifically, the new updates are versioned as iOS 16.7.9, iPadOS 16.7.9, iOS 15.8.3, and iPadOS 15.8.3, and include important security fixes making them recommended for all users to install onto compatible devices. iOS … [Read More](htt … ⌘ Read more
Configure GitHub Artifact Attestations for secure cloud-native delivery
Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.
The post Configure GitHub Artifact Attestations for secure cloud-native delivery appeared first on [The GitH … ⌘ Read more
How to Create Dockerfiles with GenAI
We explore how to use an AI assistant to generate Dockerfiles for specific projects. ⌘ Read more
@prologic@twtxt.net Hitting that URL returns a bunch of HTML even though there is no user named lovetocode999 on my pod. I think it should 404, and maybe with a delay, to discourage whatever this abuse is. Basically this can be used to DDoS a pod by forcing it to generate a hunch of HTML just by doing a bogus GET like this.
@prologic@twtxt.net There are a lot of logs being generated by yarnd, which is something I haven’t seen before too:
Jul 25 14:32:42 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:42 (162.211.155.2) "GET /twt/ubhq33a HTTP/1.1" 404 29 643.251µs
Jul 25 14:32:43 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:43 (162.211.155.2) "GET /twt/112073211746755451 HTTP/1.1" 400 12 505.333µs
Jul 25 14:32:44 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:44 (111.119.213.103) "GET /twt/whau6pa HTTP/1.1" 200 37360 35.173255ms
Jul 25 14:32:44 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:44 (162.211.155.2) "GET /twt/112343305123858004 HTTP/1.1" 400 12 455.069µs
Jul 25 14:32:44 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:44 (168.199.225.19) "GET /external?nick=lovetocode999&uri=http%3A%2F%2Fwww.palapa.pl%2Fbaners.php%3Flink%3Dhttps%3A%2F%2Fwww.dwnewstoday.com HTTP/1.1" 200 36167 19.582077ms
Jul 25 14:32:44 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:44 (162.211.155.2) "GET /twt/112503061785024494 HTTP/1.1" 400 12 619.152µs
Jul 25 14:32:46 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:46 (162.211.155.2) "GET /twt/111863876118553837 HTTP/1.1" 400 12 817.678µs
Jul 25 14:32:46 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:46 (162.211.155.2) "GET /twt/112749994821704400 HTTP/1.1" 400 12 540.616µs
Jul 25 14:32:47 buc yarnd[1911318]: [yarnd] 2024/07/25 14:32:47 (103.204.109.150) "GET /external?nick=lovetocode999&uri=http%3A%2F%2Fampurify.com%2Fbbs%2Fboard.php%3Fbo_table%3Dfree%26wr_id%3D113858 HTTP/1.1" 200 36187 15.95329ms
I’ve seen that nick=lovetocode999 a bunch.
PEP 751: A file format to list Python dependencies for installation reproducibility
This PEP proposes a new file format for dependency specification to enable reproducible installation in a Python environment. The format is designed to be human-readable and machine-generated. Installers consuming the file should be able to evaluate each package in question in isolation, with no need for dependency resolution at install-time. ⌘ Read more
Tenstorrent Unveils Next Generation Wormhole-based Developer Kits and Workstations
Tenstorrent Unveils Next Generation Wormhole-based Developer Kits and Workstations
Tenstorrent has announced the launch of its next-generation Wormhole chip, now featured in PCIe cards and workstations designed for scalable multi-chip development. ⌘ Read more
@movq@www.uninformativ.de Somewhere or another, I think in a William Byrd talk, I heard it suggested that the best ideas in computer science should fit on an index card (ah yes it’s this one: https://paperswelove.org/2017/video/will-byrd-most-beautiful-program/ ). He was referring to the basic principles of LISP/the lambda calculus, which have sometimes been called the Maxwell’s equations of computer programming (by Alan Kay). Simple, short, elegant, but very densely packed with meaning–generations of people have spent their whole careers unpacking what those simple rules can do.
Much of modern software feels like the polar opposite of that. Not only can you not write it on an index card, you never will be able to because people who write software don’t seem to aspire to try. I wish more people thought this way though!
How researchers are using GitHub Innovation Graph data to estimate the impact of ChatGPT
An interview with economic researchers who are applying causal inference techniques to analyze the effect of generative AI tools on software development activity.
The post [How researchers are using GitHub Innovation Graph data to estimate the impact of ChatGPT](https://github.blog/2024-07-17-how-researchers-are-using-github-innovation-graph-data-to-estimate-t … ⌘ Read more
Mali-G610 Achieves OpenGL ES 3.1 Conformance
Collabora recently announced a significant milestone: the Panthor kernel driver and Mesa Panfrost driver have achieved official conformance for OpenGL ES 3.1 on the Mali-G610 chip, part of the 10th generation of Mali GPUs, known as “Valhall”. According to Collabora’s latest news, achieving conformance involved passing tens of thousands of test cases, providing assurance to […] ⌘ Read more
I feel like complexity is measured differently at different levels of a project..
- at the function level you use cyclomatic complexity or how many branches internally and how much you need to keep in mind as it calls out to other functions.
- at a file/module level is a balance of the module doing too much against being so granular that you have cross dependency across modules. I have trouble with keeping things dry at this level because it can lead to parts being so abstract or generalized that it adds complexity.
- at a project level i suppose its a matter of how coupled things are across sub-modules.
Moteurs thermiques : les défenseurs du pouvoir d’achat
Un article de Henry Bonner Les rapports de connivence des entreprises avec le gouvernement sont en fait une spoliation du particulier au profit d’un groupe d’entreprises, de financiers, ou des intermédiaires. Les mesures du gouvernement – dépenses, restrictions, normes, et taxes – apportent en général une aide à un groupe de gens en particulier, aux […] ⌘ Read more
SQL simplifies TSDB – how to migrate from InfluxQL to SQL
Member post originally published on Greptime’s blog by tison This article introduced the differences between InfluxQL, Flux, and SQL as query languages. SQL is a more common and general language for querying time series data, making migrating from… ⌘ Read more
Beta 3 of iOS 17.6, iPadOS 17.6, & macOS Sonoma 14.6 Available for Beta Testing
While the majority of the Apple beta testing world has moved into iOS 18 beta, iPadOS 18 beta, and MacOS Sequoia beta, Apple continues to release beta versions for upcoming current generation system software as well. In this case, iOS 17.6 beta 3, iPadOS 17.6 beta 3, and macOS Sonoma 14.6 beta 3, are all … [Read More](https://osxdaily.com/2024/07/09/beta-3-of-ios-17-6-ipados … ⌘ Read more
it works fine if you properly escape your urls!
URIs include components and subcomponents that are delimited by
characters in the "reserved" set. These characters are called
"reserved" because they may (or may not) be defined as delimiters by
the generic syntax, by each scheme-specific syntax, or by the
implementation-specific syntax of a URI's dereferencing algorithm.
If data for a URI component would conflict with a reserved
character's purpose as a delimiter, then the conflicting data must be
percent-encoded before the URI is formed.
reserved = gen-delims / sub-delims
gen-delims = ":" / "/" / "?" / "#" / "[" / "]" / "@"
sub-delims = "!" / "$" / "&" / "'" / "(" / ")"
/ "*" / "+" / "," / ";" / "="
Beta 2 of iOS 17.6, iPadOS 17.6, & macOS Sonoma 14.6 Released for Testing
The second beta versions of iOS 17.6, macOS Sonoma 14.6, and iPadOS 17.6 are available to users who are enrolled in beta testing programs for current generation system software of Apple devices. While many beta testers have likely proceeded ahead with installing the iOS 18 beta, iPadOS 18 beta, and MacOS Sequoia beta, undoubtedly there … [Read More](https://osxdaily.com/2024/07/01/beta- … ⌘ Read more
Using Generative AI to Create Runnable Markdown
Explore the innovative realm of AI developer tools with Docker’s GenAI Docker Labs series. Join us as we dive deep into the potential of AI. Discover how generative AI can assist with documentation, project-specific tasks, and more throughout the software lifecycle. Stay updated and get involved with Docker’s latest projects and tools. ⌘ Read more
Inside the AI ‘deepnude’ apps infiltrating Australian schools
The websites are currently legal in Australia, but many do not have adequate controls preventing them from generating images of children. ⌘ Read more
ReadMeAI: An AI-powered README Generator for Developers
The ReadMeAI tool allows users to upload a code file and describe their project. The tool generates documentation in Markdown code for immediate preview and editing. ⌘ Read more
Vitess 20 is now Generally Available
Project post by the Vitess Maintainer Team We’re delighted to announce the release of Vitess 20 along with version 2.13.0 of the Vitess Kubernetes Operator. Version 20 focuses on usability and maturity of existing features, and continues to… ⌘ Read more
Minisforum UM890 Pro Taps AMD Ryzen 9 8945HS Processor
Minisforum has recently announced the pre-sale of a new Mini-PC, which is built around the latest generation AMD Ryzen 9 8945HS processor, featuring the advanced Zen 4 architecture. This device supports DDR5 dual-channel memory and utilizes M.2 2280 slots for SSD storage. The Minisforum UM890 Pro is equipped with the AMD Ryzen 9 8945HS processor […] ⌘ Read more
Palmshell PuER N1: Upcoming Networking Compact PC with 4x 2.5GbE Ports
The Palmshell PuER N1 is an upcoming compact networking PC built around the Intel Celeron J6412 Quad-core processor from the 10th generation lineup. This device features multiple 2.5GbE ports and offers a range of storage options designed for users who demand both high-speed network connectivity and substantial data storage capabilities. Unlike the Palmshell Slim X2L, […] ⌘ Read more
ASUS Chromebox 5a with 13th Gen Intel processors start at $294.00
The ASUS Chromebox 5a is a versatile mini-PC equipped with 13th Generation Intel Core or Celeron processors. These devices support multiple 4K@60Hz displays and include an M.2 2280 PCIe slot for storage expansion. According to the ASUS product page, the new ASUS Chromebox 5a is compatible with the following Intel 13th Generation processors: i7-1355U — […] ⌘ Read more
10 分鐘瞭解 Golang 泛型
泛型是 Golang 在 1.18 版本引入的強大工具,能夠幫助我們在合適的場合實現簡潔、可讀、可維護的代碼。原文: Go Generics: Everything You Need To Know[1]導言可能有人會覺得 Go 泛型很難,因此想要借鑑其他語言(比如 Java、NodeJS)的泛型實踐。事實上 Go 泛型很容易學,本文希望能幫助讀者更好的理解 Go 泛型。 👉注:本文不會將 ⌘ Read more
Sipeed Lichee Book 4A: Affordable RISC-V Laptop with Upgradeable Computer Module
The Sipeed Lichee Book 4A is a cost-effective laptop utilizing RISC-V architecture, designed primarily for developers interested in exploring this platform. It merges standard laptop features with functionalities tailored to RISC-V, offering a practical tool for both software development and general use. According to recent updates on the company’s social media, the Sipeed Lichee Book … ⌘ Read more
GitHub Enterprise Server 3.13 is now generally available
With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more.
The post GitHub Enterprise Server 3.13 is now generally available appeared first on The GitHub Blog. ⌘ Read more
Det er virkelig kaotisk at undersøge hvilke ophavsrets-vilkår gælder for ting skabt ved hjælp af generative modeller.
Tech-udbydere skriver vildt forskellige ting i deres EULA’er, og det er totalt umuligt at sige hvad der overhovedet er lovligt.
På nettet kan man finde enormt mange der spørger: “hvem ejer hvad?”
og det lader til at det eneste rigtige svar er: ¯\_(ツ)_/¯ ⌘ Read more
Luckfox Pico Ultra RV1106 is a Linux Micro Development Board with PoE Support
The Luckfox Pico Ultra RV1106 is a compact, Linux-based micro development board powered by Rockchip RV1106, tailored for embedded applications. It features a single-core ARM Cortex-A7 32-bit processor with NEON and Floating Point Unit enhancements. Embedded in the Luckfox Pico Ultra is Rockchip’s fourth-generation Neural Processing Unit, which supports int4, int8, and int16 hybrid quantiza … ⌘ Read more
Unlocking the power of unstructured data with RAG
Unstructured data holds valuable information about codebases, organizational best practices, and customer feedback. Here are some ways you can leverage it with RAG , or retrieval-augmented generation.
The post Unlocking the power of unstructured data with RAG appeared first on The GitHub Blog. ⌘ Read more
Next-Generation SDR: LimeNET Micro 2.0 Developer Edition Enhances Raspberry Pi CM4 Capabilities
Crowdsupply recently featured the LimeNET Micro 2.0 Developer Edition, an advanced software-defined radio that integrates Raspberry Pi CM4 with LimeSDR XTRX. This powerful combination provides a comprehensive baseband and RF solution, suitable for everything from amateur radio to complex telecom infrastructures. Central to the LimeNET Micro 2.0 DE is the … ⌘ Read more
Watch a Video of John Sculley Discussing Steve Jobs Being Fired from Apple
Steve Jobs being fired from Apple, the company he cofounded, is both a famous moment in Apple history, and broader business history. The story generally goes that Jobs was fired in 1985 due to a significant disagreement with the Apple CEO, John Sculley, and the companies board of directors. Who better to discuss the firing … [Read More](https://osxdaily.com/2024/06/08/watch-john-sculley-discusses- … ⌘ Read more
Generative AI for Kubernetes: meet K8sGPT open source project
Ambassador post originally published on the Logz.io blog by Dotan Horovits Troubleshooting within Kubernetes environments can be a daunting task. If we could only have a magical artificial intelligence advisor that could gather all the data about what… ⌘ Read more
https://drawdb.vercel.app/ database design tool and SQL generator
Fire-proof safes are generally designed so the internal temperature stays at or below ~350°F. Is there a computer medium I can write that’s likely to survive an extended stay around that temperature? Storage size doesn’t matter too much; a CD would be plenty (although an actual CD would presumably turn to soup).
Civilian deaths from killer drones are this generation’s ‘Oppenheimer moment’
The geopolitical tensions and challenges faced by physicists and other scientists 70 years ago in their search for nuclear arms control is now being replicated in the 21st century. ⌘ Read more
testcerts - v1.2.0 released - Dynamically generate self-signed certificates
1 points posted by madflojo ⌘ Read more
M5Stack CoreS3 SE with 2.0″ Capacitive Touch Display and 16-bit I2S Amplifier
M5Stack CoreS3 SE with 2.0” Capacitive Touch Display and 16-bit I2S Amplifier
The M5Stack CoreS3 SE, a streamlined version of the third-generation CoreS3 unit from the M5Stack series, is engineered for IoT applications, smart home systems, and industrial automation. This device supports key programming platforms such as Arduino and UIFlow, enhancing its adaptability for diverse project requ … ⌘ Read more
ZOTAC ZBOX PRO Series: External GPU Boxes Featuring NVIDIA RTX Ada Generation Professional-Grade GPUs
ZOTAC ZBOX PRO Series: External GPU Boxes Featuring NVIDIA RTX Ada Generation Professional-Grade GPUs
ZOTAC has recently launched the ZBOX PRO External Graphics Box series, engineered to enhance the graphics and computing performance of Mini PCs and notebooks. The series includes three models, with the EGB AD5000 featuring up to 9728 CUDA core … ⌘ Read more