CodeQL zero to hero part 4: Gradio framework case study
Learn how I discovered 11 new vulnerabilities by writing CodeQL models for Gradio framework and how you can do it, too.

The post CodeQL zero to hero part 4: Gradio framework case study appeared first on The GitHub Blog. ⌘ Read more

Hydroponic Automation Board with Raspberry Pi Zero 2 and STM32 Processor
The RootMaster is a hydroponic automation platform designed to provide precise control over water, and environmental conditions. Designed for developers and enthusiasts, it includes onboard sensors, CAN support, and outputs for controlling up to three pumps and additional peripherals. According to the documentation, the STM32G4 microcontroller is based on the Arm Cortex-M4 32-bit RISC core […] ⌘ Read more

NVK Achieves Day-Zero Support for Vulkan 1.4
The Khronos Group recently announced the release of the Vulkan 1.4 specification, and NVK, an open-source Vulkan driver for NVIDIA hardware, has achieved day-zero conformance with the latest API. This support has been integrated into Mesa and will be available in the upcoming Mesa 25.0 release, scheduled for early 2025. This development highlights Mesa’s ongoing […] ⌘ Read more

(Updated) Banana Pi Showcases BPI-CanMV-K230D Zero with Canaan K230D Chip Design
(Updated) Banana Pi Showcases BPI-CanMV-K230D Zero with Canaan K230D Chip Design ⌘ Read more

‘The Aloha Project’ announces new Haveno mainnet instance with zero fees
alohamarkus1 from The Aloha Project 2 has announced3 the launch of Haveno Aloha 4, a new public Haveno instance running on Monero’s main network that apparently doesn’t charge any fees:

So I have been working on an ‘alternate’ network [..] it’s out now on mainnet but should require some testing, if anyone wants to help? [..] we have generous sponsors, that means haveno-aloh … ⌘ Read more

Flatcar brings Container Linux to the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept Flatcar as a CNCF incubating project.  Flatcar is a zero-touch, minimal operating system (OS) for containerized workloads, addressing the challenges of managing and securing a production… ⌘ Read more

What is zero trust authorization?
Member post originally published on Cerbos’s blog by Twain Taylor Traditional security models, which rely on perimeter-based defenses, have proven to be quite inadequate in the face of sophisticated attacks and the growing adoption of cloud… ⌘ Read more

Erlang Solutions: Client Case Studies with Erlang Solutions
At Erlang Solutions, we’ve worked with diverse clients, solving business challenges and delivering impactful results. We would like to share just some of our top client case studies in this latest post with you.

Get a glimpse into how our leading technologies—Erlang, Elixir, MongooseIM, and more—combined with our expert team, have transformed the outcomes for major industry players.

(Updated) Quartz64 Zero: A Low-Cost SBC Featuring Rockchip RK3566T with 64-bit Arm and 32-bit RISC-V CPUs
Quartz64 Zero: A Low-Cost SBC Featuring Rockchip RK3566T with 64-bit ARM and 32-bit RISC-V CPUs
Pine64 recently introduced the Quartz64 Zero, a compact and economical single board computer featuring the Rockchip RK3566T SoC. Designed for both hobbyists and commercial applications, this board offers scalable features and a guaranteed long … ⌘ Read more

I’d like to see them fine me 2% of zero dollars

Banana Pi Showcases BPI-CanMV-K230D Zero with Canaan K230D Chip Design
The Banana Pi BPI-CanMV-K230D-Zero is an upcoming single-board computer for AIoT applications, developed in collaboration with Canaan Technology. Featuring the Kendryte K230D chip, it provides local AI inference capabilities, making it useful for DIY projects and embedded systems. At the core of the BPI-CanMV-K230D-Zero is the Kendryte K230D chip from Canaan’s Kendryte AIoT series. This […] ⌘ Read more

Once destined for the tip, these low-grade blueberries are being turned into wine
A food recycling charity has taken blueberries destined for the tip to create a zero-alcohol wine alternative, which is now being served in restaurants and ultimately helping feed more people. ⌘ Read more

@prologic@twtxt.net The headline is interesting and sent me down a rabbit hole understanding what the paper (https://aclanthology.org/2024.acl-long.279/) actually says.

The result is interesting, but the Neuroscience News headline greatly overstates it. If I’ve understood right, they are arguing (with strong evidence) that the simple technique of making neural nets bigger and bigger isn’t quite as magically effective as people say — if you use it on its own. In particular, they evaluate LLMs without two common enhancements, in-context learning and instruction tuning. Both of those involve using a small number of examples of the particular task to improve the model’s performance, and they turn them off because they are not part of what is called “emergence”: “an ability to solve a task which is absent in smaller models, but present in LLMs”.

They show that these restricted LLMs only outperform smaller models (i.e demonstrate emergence) on certain tasks, and then (end of Section 4.1) discuss the nature of those few tasks that showed emergence.

I’d love to hear more from someone more familiar with this stuff. (I’ve done research that touches on ML, but neural nets and especially LLMs aren’t my area at all.) In particular, how compelling is this finding that zero-shot learning (i.e. without in-context learning or instruction tuning) remains hard as model size grows.

Helium Synthesis
⌘ Read more

Zero Trust and Docker Desktop: An Introduction
We explore Zero Trust security and walk through several strategies for implementing Zero Trust within a Docker Desktop-based development environment. ⌘ Read more

Building a zero CVE strategy
Member post originally published on the Kubesimplify blog by Kunal Verma With the increase in software complexity and as digital threats evolve (as discussed in our previous blog) in today’s digital age, the organizations are facing a massive increase… ⌘ Read more

Quartz64 Zero: A Low-Cost SBC Featuring Rockchip RK3566T with 64-bit Arm and 32-bit RISC-V CPUs
Quartz64 Zero: A Low-Cost SBC Featuring Rockchip RK3566T with 64-bit ARM and 32-bit RISC-V CPUs
Pine64 recently introduced the Quartz64 Zero, a compact and economical single board computer featuring the Rockchip RK3566T SoC. Designed for both hobbyists and commercial applications, this board offers scalable features and a guaranteed long-term supply. ⌘ Read more

CNCF announces the second Zero to Merge cohort
By Taylor Dolezal, Head of Ecosystem, CNCF The Cloud Native Computing Foundation (CNCF) is thrilled to announce our second cohort of the Zero to Merge program. This comprehensive four-week journey empowers participants to make meaningful contributions to CNCF… ⌘ Read more

CodeQL zero to hero part 3: Security research with CodeQL
Learn how to use CodeQL for security research and improve your security research workflow.

The post CodeQL zero to hero part 3: Security research with CodeQL appeared first on The GitHub Blog. ⌘ Read more

(Updated) Radxa previews ZERO 3E Single Board Computer with GbE port
(Updated) Radxa previews ZERO 3E Single Board Computer with GbE port ⌘ Read more

Affordable Radxa ZERO 3W Featuring Up to 8GB RAM and Onboard eMMC Storage
Radxa’s ZERO 3W is an ultra-small single board computer with high-performance capabilities. Based on the Rockchip RK3566 and supporting Wi-Fi6 / BT 5.4, this compact device is designed to cater to a wide range of users, from IoT developers to hobbyists. Equipped with the Rockchip RK3566, the ZERO 3W supports various graphics standards like OpenGL […] ⌘ Read more

DietPi January 2024 news (version 9.0)
DietPi’s latest release, version 9.0, rolled out today, marks a significant update for the lightweight Linux OS, renowned for its efficiency on single-board computers. This release phases out support for the older Debian Buster version, introduces compatibility with the new 1.5 GB Orange Pi Zero 3, and brings several enhancements and bug fixes across the […] ⌘ Read more

Low Profile Radxa X2L SBC Featuring Intel J4125 and RP2040 Microcontroller
The Radxa X2L, powered by the Intel Celeron Processor J4125, is a compact yet robust mini-computer designed to cater to a wide range of computing needs. It’s a perfect blend of performance, connectivity, and versatility, making it suitable for both personal and professional use. Unlike other recent Radxa offerings such as the Radxa Zero 3E, […] ⌘ Read more

Largest winery solar panel system in Australia switches on in the Barossa Valley
Almost 6,000 solar panels have been installed by Treasury Wine Estates, with the ability to generate more than 5,000 megawatt-hours of energy per year — the equivalent of powering around 900 homes. ⌘ Read more

**RT by @mind_booster: [1/3]
Más notícias para Portugal 🛥️

Estudo divulgado hoje pela ZERO refere que Portugal mantém o 6.º lugar entre os países europeus c/ maiores níveis de poluição de óxidos de enxofre emitido (SOx) pelos navios de cruzeiro depois de Itália, Espanha, Grécia, Noruega e França.**
[1/3]

Más notícias para Portugal 🛥️

Estudo divulgado hoje pela ZERO refere que Portugal mantém o 6.º lugar entre os países europeus c/ maiores níveis de poluição de óxidos de enxofre emitido (SOx) pelos navios de cruz … ⌘ Read more

CodeQL zero to hero part 2: getting started with CodeQL
Learn the basics of CodeQL and how to use it for security research! In this blog, we will teach you how to leverage GitHub’s static analysis tool CodeQL to write custom CodeQL queries. ⌘ Read more

Rooting with root cause: finding a variant of a Project Zero bug
In this blog, I’ll look at CVE-2022-46395, a variant of CVE-2022-36449 (Project Zero issue 2327), and use it to gain arbitrary kernel code execution and root privileges from the untrusted app domain on an Android phone that uses the Arm Mali GPU. I’ll also explain how root cause analysis of CVE-2022-36449 led to the discovery of CVE-2022-46395. ⌘ Read more

Kaidan: Kaidan 0.9: End-to-End Encryption & XMPP Providers

Image

It’s finally there: Kaidan with end-to-end encryption via OMEMO 2, Automatic Trust Management and support of XMPP Providers!
Most of the work has been funded by NLnet via NGI Zero PET and NGI Assure with [public … ⌘ Read more

**A @ZEROasts fez um conjunto de contadores da vergonha: coisas que o estado devia estar a fazer, mas que ainda não estão feitas.

No caso do ruído, o atraso chega quase aos 6000 dias - números que deviam envergonhar todos nós.

https://zero.ong/noticias/dia-da-terra-zero-desafia-governo-a-dar-resposta-a-5-leis-ambientais-sobre-as-quais-esta-a-procrastinar/**
A @ZEROasts fez um conjunto de contadores da vergonha: coisas que o estado devia estar a fazer, mas que ainda não es … ⌘ Read more

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research
Learn more about static analysis and how to use it for security research!
In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL queries. ⌘ Read more

**RT by @mind_booster: 🤝 Apoiar a ZERO é apoiar a sustentabilidade em Portugal.

Se quiseres fazer um donativo, já podes fazê-lo online, através do nosso site. ♻️

#mundoZERO #Ambiente #Sustentabilidade #ZEROdesculpas**
🤝 Apoiar a ZERO é apoiar a sustentabilidade em Portugal.

Se quiseres fazer um donativo, já podes fazê-lo online, através do nosso site. ♻️

#mundoZERO #Ambiente [#Sustentabilidade](https://nitter.net/search?q=%23 … ⌘ Read more

How to use your own domain as your BlueSky handle
I recently got access to the BlueSky beta, and decided to poke around to see what it’s all about. I will save the details of what it is and how I feel about it for a different post. However, one of the first things you do when you sign up is choose a username that exists under the bsky.app domain. I have zero interest in another name rush where everyone tries to claim the shortest username possible, so I went with aaronpk.bsky.app rather than trying to get a … ⌘ Read more

**R to @mind_booster: “2045 não é bom?”

Não: tendo em conta o carbon budget de 2022, precisamos de atingir net-zero carbónico o mais tardar em 2040 para atingir mas não ultrapassar os 1.5°C.**
“2045 não é bom?”

Não: tendo em conta o carbon budget de 2022, precisamos de atingir net-zero carbónico o mais tardar em 2040 para atingir mas não ultrapassar os 1.5°C. ⌘ Read more

**RT by @mind_booster: A ZERO vai interpor queixa à Comissão Europeia por ausência de medidas de melhoria da qualidade do ar.

☠ Poluição do ar continua a matar 6.000 portugueses/ano
❌Plano de execução tem 4 anos e ainda não saiu do papel.
Uso do🚗 aumentou na última década
👇
https://zero.ong/poluicao-na-avenida-da-liberdade-em-lisboa-novamente-acima-dos-limites-e-sem-medidas-de-controlo/**
A ZERO vai interpor queixa à Comissão Europeia por ausência de medidas de melhoria da qualidade do ar.

☠ Poluição do ar contin … ⌘ Read more

but also the amount of time a broken clock is right has measure zero

rapidly oscillating between nibbanic zero-ontology and plotinian “badness is non-being” views

Resolve Vulnerabilities Sooner With Contextual Data
OpenSSL 3.0.7 and “Text4Shell” might be the most recent critical vulnerabilities to plague your development team, but they won’t be the last. In 2021, critical vulnerabilities reached a record high. Attackers are even reusing their work, with over 50% of zero-day attacks this year being variants of previously-patched vulnerabilities.  With each new security vulnerability, we’re […] ⌘ Read more

**RT by @mind_booster: [1/3]
2 anos de espera depois, ZERO recebe informação do ICNF, mas incompleta

❌situações de incumprimento da legislação
❌ausência de fiscalização por parte das entidades competentes
❌acesso ao pagamento majorado da energia produzida que não cumpre os deveres legais

👇cont.**
[1/3]

2 anos de espera depois, ZERO recebe informação do ICNF, mas incompleta

❌situações de incumprimento da legislação

❌ausência de fiscalização por parte das entidades competentes

❌acesso ao pagamento majorado da … ⌘ Read more

**RT by @mind_booster: [¼]💧 ZERO alerta para a Declaração de Impacte Ambiental emitida em tempo recorde: um projeto sem clara mais-valia pública e com danos ambientais irreparáveis

Processo de avaliação incompleto é aprovado pela Agência Portuguesa do Ambiente - o que ficou por garantir?
👇cont.**
[¼]💧 ZERO alerta para a Declaração de Impacte Ambiental emitida em tempo recorde: um projeto sem clara mais-valia pública e com danos ambientais irreparáveis

Processo de avaliação incompleto é aprovado pela Agência P … ⌘ Read more

Most zero-sum games are actually negative-sum games, because of transaction costs

RT by @mind_booster: As declarações do Chanceler Alemão Olaf Scholz deram ânimo às intenções dos governos de Portugal e Espanha para uma eventual expansão da rede de gás natural fóssil podendo colocar em causa os objetivos europeus de combate às alterações climáticas. https://zero.ong/zero-tem-enormes-duvidas-sobre-expansao-e-interconexao-iberica-da-rede-de-gas/
As declarações do Chanceler Alemão Olaf Scholz deram ânimo às intenções dos governos de Portugal e Espanha para uma eventual expansão da rede de gás na … ⌘ Read more

**RT by @mind_booster: [¼]
Terminou ontem a consulta pública do projeto Aproveitamento Hidráulico de Fins Múltiplos do Crato (Barragem do Crato) a que a ZERO dá parecer negativo

❌Dinheiro do PRR vai ser usado p/ projeto sem sentido e promotor de impactes ambientais e sociais negativos

👇(continua)**
[¼]

Terminou ontem a consulta pública do projeto Aproveitamento Hidráulico de Fins Múltiplos do Crato (Barragem do Crato) a que a ZERO dá parecer negativo

❌Dinheiro do PRR vai ser usado p/ projeto sem sentido e p … ⌘ Read more

R to @mind_booster: “A par disto, quer ainda retirar quaisquer restrições ao tráfego aéreo noturno em Lisboa, quando os níveis de ruído já excedem imenso, como a ZERO recentemente demonstrou, os valores legais que procuram salvaguardar a saúde pública.” 6/7
“A par disto, quer ainda retirar quaisquer restrições ao tráfego aéreo noturno em Lisboa, quando os níveis de ruído já excedem imenso, como a ZERO recentemente demonstrou, os valores legais que procuram salvaguardar a saúde pública.” 6/7 ⌘ Read more

**#Aeroporto: “as organizações não governamentais de ambiente (ONGA) consideram que ou o Governo está a tentar condicionar à partida o processo, ou tenta contornar a legislação relativa à AAE que poderia sustentar essa decisão.”

https://zero.ong/organizacoes-ambientalistas-consideram-anuncio-de-avanco-do-montijo-e-alcochete-ilegal-e-inaceitavel/**
#Aeroporto: “as organizações não governamentais de ambiente (ONGA) consideram que ou o Governo está a tentar condicionar … ⌘ Read more

China’s easing of zero-Covid restraints set to release stocks into bull-market territory for first time in three years
A change in quarantine rules comes as the CSI 300 Index is within about 2 per cent of bull-market status, but opinions differ over how heavily Beijing’s zero-Covid policy still weighs on the market ⌘ Read more

Coronavirus: faced with mounting costs, some ask whether China can afford to maintain mass testing
Extensive mass testing for Covid-19 is extracting a huge toll on regional finances, raising questions over the long-term sustainability of China’s zero-Covid policy. ⌘ Read more

China hits back at US over G7 ‘zero-sum’ belt and road alternative
Washington’s revived partnership is an effort to ‘smear Beijing’ and its infrastructure initiative, foreign ministry says. ⌘ Read more

Human cost of China’s zero-Covid policy measured in stress, anxiety
Lockdowns and unpredictable restrictions have led to soaring mental health problems in numbers which may exceed global averages. ⌘ Read more

China’s zero-Covid policy: Sri Lankan group latest to arrive as borders open to Asian students after two years
As Asian envoys press for more students to be allowed to return, the way forward of those from the West remains unclear. ⌘ Read more

Shanghai party chief declares victory in Covid battle as city records zero cases at start of major political meeting
The city endured a lengthy lockdown as it tackled China’s worst outbreak since the early days of the pandemic. ⌘ Read more