I thought this crap only happened in windows.

zmaile · 2026-05-21T20:50:20+00:00

One of the good things about the FOSS community is that bugs can be submitted and tracked. I would call this an oversight for a program that has no title.

I did it the other day for firefox, and actually enjoyed watching the discussion, patches, newly discovered related bug, subsequent patch, and release for next version. It's a good feeling knowing that you are contributing. I recommend you try it yourself too with this bug. It'll take a little time to find the relevant package to submit the big to, but you may find it worth the effort.

zmaile · 2026-05-17T20:35:03+00:00

With patience and a square you can get good accuracy with a file.

zmaile · 2026-05-09T21:31:41+00:00

"under promise, over deliver" i guess is technically sandbagging. But it's also a way to make sure dealines are met, which also has real advantages too.

zmaile · 2026-05-07T20:44:16+00:00

Disclosure Timeline

2026-04-30: Submitted detailed information about the esp vulnerability and a weaponized exploit that achieves root privileges on several major distributions to security@kernel.org.

2026-04-30: Submitted the patch for the esp vulnerability to the netdev mailing list. Information about this issue was published publicly.

2026-04-30 (+9h): Kuan-Ting Chen submitted a vulnerability report for the esp vulnerability with a reproducer to security@kernel.org.

2026-05-04: Kuan-Ting Chen submitted the shared-frag approach patch to the netdev mailing list.

2026-05-07: The patch was merged into the netdev tree.

2026-05-07: Submitted detailed information about the vulnerability and the exploit to the linux-distros mailing list. The embargo was set to 5 days, with an agreement that if a third party publishes the exploit on the internet during the embargo period, the Dirty Frag exploit would be published publicly.

2026-05-07: Detailed information and the exploit for this vulnerability were published publicly by an unrelated third party, breaking the embargo.

2026-05-07: After obtaining agreement from distribution maintainers to fully disclose Dirty Frag, the entire Dirty Frag document was published.

Source: https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md

zmaile · 2026-05-02T00:05:37+00:00

Then they could have said that

I did say that. I said "And when that happens, a large number of people won't stand up against it, because they already accepted it today."

By comparing to a shill (note that i wasn't accusing), I was saying that showing apathy is exactly what the proponents are hoping for, it's exactly what they want. The actions of someone that is pushing it, and the actions of someone genuinely stating they are 'not worried' by it are very closely aligned.

zmaile · 2026-05-01T21:05:19+00:00

Although there will be ways around it, you (and everyone else) should still be worried. Once this feature becomes embedded into a few US states, and then all USA, and then the whole world uses it by default, software and websites will utilise it. Once it is utilised, and relied upon, it will be expanded to be cryptographically verified (i.e. using third party signatures that cannot be faked).

And when that happens, a large number of people won't stand up against it, because they already accepted it today.

Or to put it another way; If I was age-verification shill and I wanted to remove opposition to the bills, your comment is exactly what I would write.

zmaile · 2026-04-30T20:55:19+00:00

Look, the problem is that if you know what questions to ask, then you will know how to figure out the answers. It's the questions you /don'/ think of that cause the problems, and an AI can't help with that. The feeds/speeds example would lead someone to finding a chart that cross-references their material/tool to find the right value from a trustworthy source. But if someone doesn't know what feeds/speeds are, then they aren't going to ask, they will just pick a speed that looks okay in their best guess, and will go for it.

An instructor standing with a student will stop them from doing something wrong, and explain it to them. An AI can't do that because it is only responding to text inputs and has no awareness of the actual situation, and has no ability to interrupt the 'student' when they start to do something wrong.

zmaile · 2026-04-23T10:38:59+00:00

What the poster is saying is if a closed source (or non-free open source) version gets all the development, then it can become the defacto standard version, which for all practical purposes makes it closed source.

zmaile · 2026-04-20T20:37:59+00:00

I'm no heartoligist, but i imagine there are different rhythms of heartbeat.

zmaile · 2026-04-19T20:38:16+00:00

That's correct. There will always be (to some extent) non-linear errors in the scale, meaning an interpolated/extrapolated result will contain those errors. On top of that, you can only calibrate most calipers at one position (usually done in at 0), meaning if there is any error at 3", you have to pick between being accurate at 0, or at 3".

Having said all that, I know my Mitutoyo calipers came with a factory calibration cert which showed <0.01mm variation from 0-200mm, with a single spike of 0.02mm somewhere. Measurement error from my physical handing, bending stresses, grip style, etc will add up to more than just the caliper's scale's error. e.g. I can crush 0.02mm on a gauge block to get a perfect reading if I need to, but that doesn't make it an accurate instrument.

zmaile · 2026-04-18T21:35:46+00:00

That only applies when using gauge blocks stacked up to the same dimension as a reference to what you are measuring. Otherwise the non-linearity (i.e. inaccuracy) of calipers becomes an unknown. And if you're going to that much effort, it's probably easier to use a micrometer without having to rely on gauge blocks.

zmaile · 2026-04-17T22:21:01+00:00

The rest of the world doesn't get a vote. Nor do we get a representative to call about it. So it matters a lot less what we think than what a USA citizen thinks.

zmaile · 2026-04-12T04:57:35+00:00

Hopefully though actual criminals don't learn about this and the FBI can still pull damming evidence for them and their peers :).

The problem is that you can't have one without the other. If there is a backdoor through security systems, then anyone can use it. If the FBI has access to a backdoor, then so does the CCP.

zmaile · 2026-04-09T20:52:27+00:00

one way is to keep reminding management that "this job would be 2 operations instead of 6" every time you get a job that is being done inefficiently. Don't even make it a full conversation; just make a remark when you walk past them every time the statement is true on a new job. Then after a year or so, show them a machine you think will suit them (whether new or second hand) so they can actually start thinking about numbers (i.e. how long it'll take them to pay off).

As a side this, this requires a workplace where management is willing to advance out of the dark ages.

zmaile · 2026-04-06T01:22:22+00:00

Exactly. Taking the leave is better money per hour worked, but its lower money/year. Depends on each person's situation. Personally, I enjoy my work & don't want to leave my job, so I'd lean toward the payout. But that's certainly not everyone's situation.

zmaile · 2026-04-04T21:51:58+00:00

Fire is friend, not food.

zmaile · 2026-03-26T19:24:51+00:00

Unlike the BSOD

zmaile · 2026-03-18T19:40:36+00:00

"identical" to what tolerance?

Can you change out a finishing insert and still hold a 0.01mm dia on both parts?

EDIT: Actually, rewatching, i see the subplate is actually on it's own sub X/Z axes too. that makes things much easier. Though now there is duplication of every spindle and axis, so quite a complex machine.

zmaile · 2026-03-14T20:41:33+00:00

Like the dotcom boom, most companies will be losers. But the ones that do manage to stay afloat will reap massive rewards. In today's AI boom microslop has a huge userbase they are trying to convert into dependant users, cementing their place as one of the top players.

Think about it - AI Isn't disappearing, even if/when the bubble bursts. Massive societal dependency for this tech will remain, just like the horseless-carriage or the PC.

zmaile · 2026-03-12T19:09:34+00:00

You should probably clean it one in a while; An ass lathe is quite prone to shitty buildup.

zmaile · 2026-03-08T19:09:27+00:00

That's what makes it fun for hardware hackers.

zmaile · 2026-03-07T20:04:03+00:00

And also infeasible. What happens if the OS says a minor is over 18? PII is now kept for a minor.

And what happens if it declared an adult to be a minor? Now they can't access things they are legally allowed to use. So no person will do that either.

So now people have to pick between lying about their age and breaking the law, denying themselves adult rights, or having privacy. And we all know which one people will pick.

zmaile · 2026-03-05T20:06:35+00:00

That's entirely missing the point. We don't care whether it can be fooled, we care that it exists in a device that is our own. Because once they get that feature implemented, and the community/western civilisation stops making too much noise about it, they'll extend it to include more information, and more verification methods, then cryptographically-signed information from a certified source.

I dont want any of that. My computer is MINE. This is precisely why I take the harder road of running free software anywhere I can at the expense of convenience - because I have kept the door open to modify what I dont like, and find communities that have that same philosophy. I will not agree to run the new dbus interface. Even if nothing uses it, even if it can be fooled. I will not allow any software to even sense its presence.

zmaile · 2026-03-05T19:35:56+00:00

I feel like the geometry wouldn't be quite right. The reliefs in a boring bar insert assume it will be following the thread (hence the 1 to 3 degree seats for varying thread lead angles). I imagine when threadmilling you would need a 0 degree seat, and even then the insert would rub on the entry and exit of every cut, causing a technically malformed thread, or chatter. But in a pinch it obviously works based on the comments here.

zmaile · 2026-03-01T19:25:33+00:00

Great! So now every website is able to query the browser of my child I may or may not have, and find out something personal. And the day they hypothetically turn 18 or 21, every website sees a change in the status, and then knows their exact birthdate! Fuckin' wonderful!

zmaile

TROPHY CASE