leastfixedpoint.com

Is there a formal Wayland threat model written down anywhere?

Firefox mobile has put spam for a "world cup" for presumably some sport on my homepage without asking. Gross, why are they like this

I don't so much program with Rocq; more I bludgeon my way through the thickets of lemmas. Crude, tasteless stuff.

By treating ChatGPT and similar LLMs as being in any way concerned with truth, or by speaking metaphorically as if they make mistakes or suffer “hallucinations” in pursuit of true claims, we risk exactly this acceptance of bullshit, and this squandering of meaning.

Such a good paper.

M. T. Hicks, J. Humphries, and J. Slater, “ChatGPT is bullshit,” Ethics and Information Technology, vol. 26, no. 2, p. 38, June 2024, doi: 10.1007/s10676-024-09775-5.

I love how Aotearoa New Zealand has become increasingly bilingual in recent years.

The password manager is almost the right shape to be the user's (object-capability) powerbox. It would need to be keyed off something like an interface name, rather than a DNS name, but otherwise it could work well.

A student of mine has identified some fraudulent references in the bibliography of a published paper. The paper was at a conference. The conference is organised around a "General Chair", "Scientific Committee Co-Chairs", etc.

Who should we contact? The equivalent of a journal's editor, right?

Would that be the "Scientific Committee"? If so, should I CC the "General Chair" too?

Or am I barking up the wrong tree here entirely?

The conclusion I get from reading the https://katacontainers.io/ website, the project documentation, and in particular the installation/getting-started instructions, is that they don't want anyone to actually try out, let alone use the software, but they would very much like everyone to know who is sponsoring the project, what its governance model is, and that the software is Apache-2.0 licensed.

Did they put AI in the autocorrect for Android recently? Because I swear it has gotten markedly worse. It has that overconfident, smug feel now where before it was quite cautious at correcting things.

I think many of my confusions about fine differences among interpretations of modal logics could be dispelled by introduction and rigorous use of suitable data definitions.

Today I learned about the "A series" and "B series" perspectives on time. B series 4 life! https://en.wikipedia.org/wiki/A_series_and_B_series #Parmenides

Any academics I follow interested in moving to Europe? My department here in Maastricht, Netherlands, is hiring:

Associate Professor in System and Network Security, open until May 10, 2026
https://vacancies.maastrichtuniversity.nl/job/Maastricht-Associate-Professor-in-System-and-Network-Security/1357701057/

Assistant Professor in Computer Systems, open until May 10, 2026
https://vacancies.maastrichtuniversity.nl/job/Maastricht-Assistant-Professor-in-Computer-Systems/1357700157/

Both of these are for the equivalent of tenure-track, i.e. after a 18-month probationary period, you have a permanent contract.

I'm happy to tell anyone interested about the university, the department, the role, the city of Maastricht, or about moving to the Netherlands as an English-speaker.

#GetFediHired #Vacancy #Jobs #Hiring #AcademicChatter

You know how ACLs/RBAC don't compose? Whereas object-capabilities do? We see this in-the-small with Unix user/group IDs. Trying to mount virtiofs from host-to-guest, everything is done by uid/gid, not by name, and if there's any mismatch, you get to keep both pieces. Exactly the same problem as trying to reconcile two ACL/RBAC databases across services, only slightly simplified by having at least a compatible schema and logical arrangement.

The systemd slogan seems in effect to be "sure, you can do it, but it'll cost you". Or, perhaps, to steal from Douglas Adams, "not so much designed as congealed".

Wow the ACM "ePDF" reader sure is some hot garbage.

So who is doing the nacl->libsodium of PQC? (Possibly libsodium?)

I've added a longer explanation of the idea to my patch for adding user-managed SSH CA keys to Forgejo. Anyone interested: feedback, comments and suggestions very welcome. Or just a +1 emoji. I really want this feature for myself, but it'd be good to know whether others' use-cases are also supported by the patch.

@mjg59 You might be interested in this PR as it adds support for user-supplied SSH CA keys to Forgejo. (Different to the enterpriseish sitewide CA configuration; more like each user being able to add a CA line to their personal authorized_keys)

Alea iacta est: https://codeberg.org/forgejo/forgejo/pulls/11746

Work in progress: user-configured SSH CA authentication for Forgejo

Edit: Made a pull request at https://codeberg.org/forgejo/forgejo/pulls/11746