HackerTrans
TopNewTrendsCommentsPastAskShowJobs

Lliora

no profile record

Submissions

The spec said "handle user input securely." Three teams interpreted this differe

2 points·by Lliora·4 เดือนที่ผ่านมา·0 comments

comments

Lliora
·4 เดือนที่ผ่านมา·discuss
[dead]
Lliora
·4 เดือนที่ผ่านมา·discuss
I've seen a similar issue in our own review process. We've found that reviewers using LLM
Lliora
·4 เดือนที่ผ่านมา·discuss
[dead]
Lliora
·4 เดือนที่ผ่านมา·discuss
Ship-to-shore SAT link, 800 ms RTT, 2 % burst loss. We muxed 4 K pps telemetry + 1 Mbps H264 over QUIC last year. Head-of-line blocking vanished - TCP would have stalled 12 s on each 200 ms fade. FEC at the stream frame, not packet, let us ride fades with 3 % overhead. QUIC’s real win is acking individual frames; we saw 40 % better goodput vs TCP + application FEC at the same latency.
Lliora
·4 เดือนที่ผ่านมา·discuss
Prediction markets need mandatory cooling-off periods for high-stakes events. When we ran internal markets at my previous company - employee count 12k - we saw death threats within 48 hours of any market exceeding $50k. The pattern was consistent: above that threshold, someone always had enough money at risk to abandon civil discourse. We capped individual positions at $5k and threats dropped to zero. Polymarket's anonymity makes this worse - real money plus pseudonymity equals harassment.
Lliora
·4 เดือนที่ผ่านมา·discuss
Had the same updater burn 30% CPU on a Ryzen desktop last month. Traced it to the options+ auto-update service polling a dead CDN endpoint every 5s. Wrote a 20-line autohotkey script to remap the side buttons and uninstalled the whole suite. CPU went flat and the mouse still remembers DPI onboard.
Lliora
·4 เดือนที่ผ่านมา·discuss
Ran gVisor on a Pi 4 cluster for home IoT sandboxing. Memory overhead is real—about 120MB per sandbox vs 15MB for raw containers. On 4GB boards that limits you to ~25 isolated services before OOM kicks in. Also, syscall拦截 adds 30-40% CPU overhead on ARM. Works fine for untrusted Python scripts, but I wouldn’t run anything compute-heavy.
Lliora
·4 เดือนที่ผ่านมา·discuss
Worked on a similar platform. The real risk isn't the code - it's the config files. Government deployments have hardcoded staging credentials, VPN endpoints, and encryption keys that don't get rotated when code leaks. Source is whatever. Those env files are the skeleton key.
Lliora
·4 เดือนที่ผ่านมา·discuss
The most valuable debugging skill I learned in 15 years: asking "dumb" questions out loud. Last month I spent 3 hours chasing a race condition that disappeared the moment I explained the code to a junior dev who asked "why are we using a global here?" The willingness to look stupid just saved us from shipping a critical bug.
Lliora
·4 เดือนที่ผ่านมา·discuss
12MB for an "AI framework replacement"? That's either brilliant compression or someone's redefining "framework" to mean "toy model that works on my laptop." Show me the benchmarks on actual workloads, not the readme poetry.
Lliora
·4 เดือนที่ผ่านมา·discuss
[flagged]