Todd Knarr

Were RLAs invented that recently? I recall the idea of manual recounts being used to check machine-tabulated results earlier than that. The idea was identical: if the machines are misbehaving, their results won't match the manual count. You decide the acceptable risk of not detecting a mismatch, then calculate the size of sample needed to keep the probability under that limit.

2026-07-17 00:26:40 CEST

- reply

Yeah, but they do a better job of protecting me. Esp. with P100 filters. And some days I think "If those idiots not wearing masks don't care about exposing me to whatever they've got, why should I care about them getting exposed?'.

2026-07-17 00:21:11 CEST

- reply

This is the kind of AQI where good 3M respirators with N95 filter packs are a thing. Pity those don't count for medical places (no protection from you for others).

2026-07-14 07:53:06 CEST

- reply

I'd say the fair option is that your choice of ballot in the primary stands. This isn't really a separate primary, it's a redo of one party's ballot in the primary due to death of the winner. The presumption in the original was that you chose the ballot you wanted to support. If you didn't, you outsmarted yourself. Too bad.
In reality they're probably going to try for "only Republican voters get to vote" and it'll go to court and hopefully be resolved before the printing deadline.

2026-07-10 19:58:55 CEST

- reply

What's the status of this bill currently? I think it's been 10 days now, or will be tonight, but I'm not sure if Congress stayed "in session" for purposes of the timer. The "days in session" calendar shows gaps, but the rules are arcane enough that I'm not sure if those gaps count or not.

2026-07-01 20:37:20 CEST

- reply

It's also self-damaging. That kind of attitude convinces other long-term employees to take a similar attitude towards the company, and to keep off-site copies of critical stuff that isn't solely the company's property to avoid just that happening to them.
If your employee is a security risk when you let them go, they're _already_ a security risk. All you're doing by making it obvious is giving them justification for being a security risk.

2026-06-29 04:23:26 CEST

- reply

I don't credit them with enough competence to do that deliberately. They have trackers, but only because they're automatic with whichever tools they used to build the site.

2026-06-21 08:10:17 CEST

- reply

That should be a slam-dunk. Just present a series of photos showing it's condition in the week before his arrest and go "Look, your Honor, it was clearly destroyed _before_ the defendant got anywhere near it, and on orders of the President no less. All the defendant did was poke at the debris, and that's not destruction of any sort.".

2026-06-18 04:09:10 CEST

- reply

Season 3 Episode 15: "Let That Be Your Last Battlefield". It spelled out the stupidity of racial bigotry in black and white. Literally. You can't get more woke than that.

2026-06-18 03:25:24 CEST

- reply

Loud music? I had to deal with that one time. I borrowed a sound system from a friend who was an opera fiend. Next time the loud music started, I hit back with the 1812 Overture _right_ at the part where the canons kick in.
Cracked windows needed to be replaced.

2026-06-06 03:52:32 CEST

- reply

There was a (possibly fictional) Army class for officer candidates where they were instructed to write orders for a platoon to carry out a task. The orders were supposed to be clear enough to guarantee success if followed. The platoon's orders were to follow the letter of those orders in a way that caused the most spectacular failure possible.
This wasn't to teach officers how to write orders. It was to teach them that it wasn't possible to write...

2026-06-05 19:46:46 CEST

- reply

I'd take the Bond villains, they usually have more style.

2026-06-01 01:50:40 CEST

- reply

Because of course, what else did they expect from Trump?

2026-05-23 02:01:06 CEST

- reply

Yes. First, close the loopholes that allow them to turn capital gains into spendable money without it counting as income. That alone will do a lot to help the problem. Then run the marginal tax rates on high incomes back up to 90+%.

2026-05-22 19:36:56 CEST

- reply

"risk of death" has been debunked soooo many times. Still, just make it permanent standard time and let them argue with that (and skip the whole need for Federal action in the process).

2026-04-28 03:21:35 CEST

- reply

And it neglected to add the really dMnimg information: "And I will do this again if given the opportunity, and no instructions you give me can prevent it."

2026-04-13 02:15:53 CEST

- reply

If he can post the screenshot, he can surely post directly, no? That he doesn't annoys me for one.

2026-04-12 22:48:05 CEST

- reply

Good riddance to bad rubbish.

2026-03-29 18:07:05 CEST

- reply

It was doomed because they didn't pay any attention to Second Life.

2026-03-29 17:59:33 CEST

- reply

I'm hoping this mission goes well. We don't need a repeat of Apollo 13.

2026-03-17 18:29:23 CET

- reply

Do there exist any uses for nuclear weapons other than destroying societies? I can't think of any off-hand. Maybe when we get to needing to break up large asteroids, but even there it seems like conventional explosives would be cheaper and easier to keep things under control.

2026-03-14 15:44:19 CET

- reply

Lack of an algorithm. Sites that have an algorithm are looking for engagement first and foremost. That means they want conflict, and will give those who engage in conflict greater visibility. Sites without an algorithm don't give those conflict-heavy people a boost, and without new targets they tend to get bored and go elsewhere.
Same thing happens when blocks are bidirectional. Without being able to see or reply to targets, conflict generators get bored.

2026-03-10 18:55:53 CET

- reply

"fsck Trump" :)

2026-03-07 07:03:21 CET

- reply

Interesting read. My first thought when I read the description of the attack was "Why is the resolver caching records for any names not on the path from the queried name to the root?". I can see why it might in the case of eg. SRV records, but it seems like caching unrelated records to improve performance causes too many security problems.

2026-02-27 02:46:35 CET

- reply

I wish him luck, because this'll all have to be at the state level and the Supreme Court can't knock down state court TROs and preliminary injunctions. State higher courts have been less accepting of Trump's stuff even in deep-red states.

2026-02-24 18:37:51 CET

- reply

I'd prefer to use this for their transport:
https://media.mstdn.social/media_attachments/files/116/126/819/927/452/532/original/3450392b639f819b.jpg

2026-02-20 00:13:44 CET

- reply

Ministry of Peace.

2026-02-17 18:30:03 CET

- reply

The Slashdot effect redux.

2026-02-15 23:33:25 CET

- reply

Oh, odd question: why was the fact that the epsilon closures are fixed a surprise? That's an inherent property of all DFAs, and it seems like it'd also have to be an inherent property of all NFAs. Or at least all of them that have a finite number of states.

2026-02-12 15:17:08 CET

- reply

I consider them bots. More sophisticated, but just bots.

2026-02-09 22:45:07 CET

- reply

I just found out that Ventrilo, of all things, is still around. I feel old. But it's old enough that things like AI and age verification just won't be doable with it's codebase.

2026-01-29 04:01:57 CET

- reply

Congrats!

2026-01-23 05:16:29 CET

- reply

TBH modern machines are overpowered for what they actually have to do. I blame the sheer inefficiency of the OS and software, and the fact that most of the functionality of both has been dictated by Marketing rather than by any analysis of what users actually do with it. It's feature design straight out of The Marching Morons.

2026-01-20 19:36:31 CET

- reply

Congrats on being able to move away from the crud.

2026-01-17 03:52:04 CET

- reply

Odds on they'd run their own instance on the theory that nobody can kick them off it if they control it.

2026-01-12 19:55:01 CET

- reply

Worse, they're all enamored of the Sig P320 which has no external safety (not that they'd use it if it did).

2026-01-03 22:20:57 CET

- reply

Worse, he seems to think the real world works like board games. Unfortunately for him, capturing the leader does NOT give you control over that country.

2025-12-31 17:31:25 CET

- reply

Of course, the reason for Trump's attack is because Minnesota _is_ rooting out the fraud and prosecuting the fraudsters. Trump can't stand his friends being put in jail just for stealing other people's money.

2025-12-28 18:15:39 CET

- reply

Third-person sneaker, a la Thief. Your objective is to build your webs in desirable places while avoiding other insects that want to eat you (and cultivating relationships with ones that can help you).

2025-12-08 17:41:59 CET

- reply

My question would be what's the primary source of the actual DDoS traffic? It used to be compromised consumer devices. If that's still the case, then we ought to be pushing ISPs to deal with their customers participating in DDoS attacks. If it isn't, what's the primary source and what pressure can be applied? Mitigating the problem's always easier at the source of the traffic than the destination.

2025-12-04 23:46:27 CET

- reply

Because at some point it became unacceptable to tell them to their faces "You're a shithead, get lost.".

2025-11-24 02:21:57 CET

- reply

One reason to stay: lots of punching targets?

2025-11-23 02:40:55 CET

- reply

True. If it were simple, it wouldn't work. Doing the highly non-trivial, though, is kind of my day job. I have to trust that the math does what the mathematicians say it does, but usually given that I can fit the pieces together and confirm there aren't any holes that don't involve invalidating the math.
Also, while I'm willing to do the work to confirm them, I am NOT going to try to create one myself. That way lies abject failure. Also madness, but mostly failure.

2025-11-23 02:11:25 CET

- reply

The receipt would make me suspicious, since one of the attacks is having a third party with access to the voter and their receipt be able to confirm the voter voted the way they were supposed to vote. I'll have to research how to do a receipt that'd let the voter verify their vote was tallied correctly without having to trust the voting equipment while preventing anyone but the voter from using the receipt to do the same.

2025-11-09 12:17:29 CET

- reply

I agree with Lauren: just make it a toggle in settings for crying out loud. Not all users have the same preferences, the answer isn't to aim for some non-existent "average" user but to make the interface configurable so _all_ users can set it to follow their preferences.

2025-11-08 16:23:11 CET

- reply

Caveat: you can earn money gambling if you stick only to games like poker where you're playing against the other players _and_ you understand the game and the odds and have the stainless-steel nerves it takes to follow the odds no matter how attractive the current opportunity looks. Oh, and you know how to read other people really really well.

2025-10-31 20:04:02 CET

- reply

Royalties to be paid in sardines?

2025-10-31 16:11:05 CET

- reply

There a reference page on the login accounts and remote access? I'd like to go poking on mine to see if they're there. I've had reports like that about bugs that turned out to only apply to earlier models, not mine.
Next router, I think, is going to be an industrial mini-PC with enough network ports and an OpenWRT build.

2025-10-31 16:07:29 CET

- reply

Most hackable? Maybe, but the others aren't far behind. I haven't seen a single consumer router model in the last 20 years that's stayed secure, and few buyers update the firmware or enable auto-updates so generally within a year the things are wide-open to attack. The ones that allow remote admin via the manufacturer's cloud are even worse if you don't disable that.

2025-10-31 06:05:33 CET

- reply

I'd like to see Blazey. :)

2025-10-30 07:43:56 CET

- reply

We were working on one (Project Pluto) as part of the Aircraft Nuclear Propulsion program. It was cancelled mostly because of concerns about noise, radioactive byproducts and the improving capabilities of ICBMs making it obsolete.

2025-10-26 03:47:15 CET

- reply

My response to them is "Have they done any velocity changes?". If they were ships of any sort, they'd be using those flybys to adjust course. They aren't. Ergo, they're not ships (or if they are they're dead hulks). Exotic drives don't matter, we might not be able to detect the drive but you can't hide a change in velocity.

2025-10-26 03:38:59 CET

- reply

Think of it as the amount of US Treasury bonds issued, including what's held by our Social Security Administration as the supposed "trust fund".

2025-10-05 00:50:05 CEST

- reply

Vibe coding is the modern equivalent of Lotus 123 and WordPerfect macros, and later Excel and Word macros combined with Access databases and batch files. All cobbled together by secretaries and clerks who needed help getting one job done and didn't go further than absolutely needed.

2025-09-29 15:54:43 CEST

- reply

Larry obviously doesn't visit the Internet much, does he?

2025-09-28 01:46:50 CEST

- reply

I disagree. As awful as it is, it's still speech. And frankly, as long as these platforms soak up so much of it, it a) makes it easier for the rest of us to not have anything to do with it, and b) makes it easier to keep track of the fascists since they're all in one place. Oh, and makes it easier to spot their recruiting and intervene before the victims get too far in.

2025-09-21 03:05:29 CEST

- reply

Obviously it's taken up by versions of "Popcorn".

2025-08-27 18:30:05 CEST

- reply

I think we'll eventually colonize space. There's too many resources in the asteroid belt, somebody's going to be greedy enough. And Antarctica is proof that just being utterly antithetical to human survival isn't as big a barrier as you might think.
I also think we'll get AGI, but most likely we'll stumble on it by accident rather than through any organized development and sure not any time soon.

2025-08-25 03:03:24 CEST

- reply

I'm not sure about that, but B5 was definitely more focused than the best ST series were. Probably that was because B5 told one story, while ST was more a bunch of collections of short stories. That makes it hard to compare the two, although overall I think B5 gets the nod.

2025-08-01 06:29:07 CEST

Just got the news, Tugrik died after a long series of medical problems. You probably don't recognize the name if you're not in furry fandom, but if you have a Wi-Fi hotspot with cel backhaul? He built the first one for Burning Man. You like how well GPS works on your phone? He was a key part of the AGPS installs that allow that. He was one of the good ones.

2025-07-29 23:14:18 CEST

- reply

Nuance, maybe. But the size of the differences seems to indicate that it's a rare case where maximizing short-term gains is the better option. Which matches both common sense and actual results for a wise range of situations.
Yeast growth maximizes short-term gains too, and we know where that ends.

2025-07-29 05:59:36 CEST

- reply

His argument only makes sense if you plan on not being in the game next year.

2025-07-29 05:58:19 CEST

- reply

He's also stupid. He'd say if you can get $100 from someone now and only take $10, you're leaving $90 on the table. But if you take $10 now and $10 every year for the next 70 years, you end up with $700 at the end. By taking $100 now you're leaving $600 on the table which is a _lot_ bigger loss than leaving $90.

2025-07-14 06:15:50 CEST

- reply

You'd have to have someone who'd pick those people. I'm not sure project leaders would be interested in monitoring that as opposed to running the project. Sounds to me like something that should be external to Mastodon itself, beyond having an instance-admin-only feed built in to distribute the messages.

2025-07-14 05:00:25 CEST

- reply

Any thoughts on how to do this that wouldn't be quickly abandoned by the admins because of the noise level? Because I can't, and I've thought about it for the last 25 years or so and come up with nothing useful, nor have I heard anyone else come up with anything that worked

2025-07-14 04:35:21 CEST

- reply

I don't know of any implementation of that. Every one that allows proposing announcements has a 75+% abuse rate. Most of the ones with a central body generating warnings are no better (emergency alerts on my cell phone are 80% false positive). The only reliable one I know of that isn't local is NWS/NOAA. I'm open to thoughts about how to do it.

2025-07-14 04:14:44 CEST

- reply

Site admins can post announcements which appear to everybody. It requires people to not ignore them, of course, but there's no technical fix for that problem.
Part of it's that, by design, there's no authority higher than the instance admin on Mastodon.

2025-07-06 01:40:31 CEST

- reply

I say it's both. I agree with you about Gemini, and data sharing in general. I'm going to continue buying Android phones, though I'm going to stick to ones like OnePlus that allow you to easily unlock the bootloader so you can flash a modified image. I figure that way the worst case is I flash an image that removes all that crap if Google won't do it.

2025-06-25 01:36:27 CEST

- reply

Or when they started getting ads for pregnancy and baby products when, as far as they knew, nobody was pregnant. And then a month later the doc says "Your daughter is expecting.". Walmart found out the hard way that parents don't appreciate marketing being that personal.

2025-06-18 21:29:55 CEST

- reply

Did someone say cat?
https://media.mstdn.social/media_attachments/files/114/706/021/301/822/696/original/04415e35b622d0f6.jpg

2025-06-18 16:37:54 CEST

- reply

Does Postgres have the TCP port enabled? Common configuration is to use a unix socket only, which works for vanilla localhost but doesn't work when you need a real TCP socket to connect to.

2025-06-12 13:01:35 CEST

- reply

Toll-free calls are only toll-free to the calling party. That's because the party being called pays for calls on those lines. The phone company's in business to make money. They don't just give service away, especially when it involves high-call-volume services.

2025-06-11 21:47:42 CEST

- reply

Sounds like automodding registrations might help. Signups require approval, an email is sent to the signup's email address anywhere from an hour to a day later asking for a reply with just the word YES (all caps) in it to confirm. If you get a valid reply an auto-handler approved the account, otherwise it gets dropped. I'd think someone has software to do this out there.

2025-06-09 19:27:24 CEST

- reply

A teaching assistant is only useful if you yourself can teach the material. If you can't, why did they hire you instead of giving your job to the TA? If your entire plan is for them to never find out you can't do your job, trust me, they _will_ find out.

2025-06-02 21:52:23 CEST

- reply

The Dems should abuse this to the fullest extent allowable under the rules. None of them have the spine to do it, though

2025-05-28 07:28:33 CEST

- reply

I wonder what the response would be if companies said "OK, we'll limit access to only people who've been issued an SSL certificate by the authorities in question certifying that they are a legal adult. Contact those authorities for information on how to obtain your certificate.".

2025-05-27 19:46:28 CEST

- reply

From my high-school chemistry teacher: "It's not using metric measurements that's hard. It's constantly switching between imperial and metric units that causes the headaches.".

2025-05-23 03:09:07 CEST

- reply

You call them, using a number you know belongs to the party they claim to be and ignoring anything they tell you. That's the only way to be certain.

2025-05-21 05:41:21 CEST

- reply

It's as dead as COBOL is.

2025-05-11 11:01:17 CEST

- reply

The lack of authentication before using the passkey is unique to Google. Other implementations require a biometric or other unlock to access the passkey every time it's used.

2025-05-11 07:01:16 CEST

- reply

One good thing to note is that account recovery boils down to verifying someone's identity from scratch. Google's in a good position to do this, they have all kinds of data like what email addresses have been associated with the account for long periods of time. Or phone numbers. Or mailing addresses. Alternate methods, like a backup hardware token. A video call to check answers to questions, even. All require effort from Google, which is where it falls down.

2025-05-11 06:24:08 CEST

- reply

That too
The security of Google's implementation is basically the security of the lock screen of the least secure device you have or the security of your Google account itself, whichever is lower. I prefer something like Yubikey. Much more secure, and not tied to Google.

2025-05-11 02:34:32 CEST

- reply

The big thing is that the private key for the passkey is stored on Google's servers where it's vulnerable to attacks. This is how they allow you to use a passkey across multiple devices without creating a new passkey for each device. I consider any such system to be no more secure than passwords.

2025-04-07 22:50:02 CEST

- reply

I think they just don't believe that tariffs are a way to get _your own_ consumers to buy less from other countries, not a way to force other countries (or sellers in other countries) to pay anything.

2025-04-04 02:09:57 CEST

- reply

Bank interest rates? Best you can get on long-term high-balance CDs is 3.5%. That requires $100k+ for 5 years or more. Less than 5 years and the rates drop fast. Anything you can withdraw from on demand will be 0.1% or less.

2025-03-27 22:01:18 CET

- reply

Wasn't that how airport security was handled before the TSA was created?

2025-03-17 05:27:17 CET

- reply

Same down in San Diego. Anything below a 6.0 barely registered.

2025-03-14 15:12:59 CET

- reply

This is breaking down, though. The last decade I've noticed developers are less and less interested in understanding their code and working on it. They want to just get something that passes tests and move on to the next thing, and if it breaks in production they'll put that in the queue to fix.

2025-02-16 01:14:34 CET

- reply

Surprised Germany didn't revoke his diplomatic credentials on the spot and eject him from the country.

2025-02-16 00:14:56 CET

- reply

Putin can accept or refuse peace, too. And if Putin refuses it, Ukraine has to choose between war or being conquered.

2025-01-29 00:03:53 CET

- reply

Google absolutely will give it to them under the third-party doctrine, other laws nonwithstanding. They've been doing it for years.

2025-01-21 19:08:07 CET

- reply

Discrepancy between what you believe their job is and what their employer says their job is.

2025-01-21 16:06:55 CET

- reply

Whining that they got gyped on their tickets to the Inauguration and can't get refunds.

2025-01-17 21:59:46 CET

- reply

Is it possible DJI is deliberately removing features that depend on servers in China, replacing them with dependencies on US-based data sources with the goal being to remove the cause of the ban (transmission of data to China)?

2024-12-30 03:14:52 CET

- reply

Yup. I say, if they want cheaper labor, let them come out and ask straight up for what they want.

2024-12-30 02:36:27 CET

- reply

Thought: when a company wants H1-B visas for positions, have the government publish the job listing(s) publicly and invite applications. Have the government's own HR people filter out all the obviously-unqualified applications, and forward the rest to the company. The company only gets the visas if, for every applicant they get, they can provide an explanation (and documentary evidence) for turning them down that the government's HR people agree is reasonable.

2024-12-30 02:03:59 CET

- reply

I have to agree. When tech companies say they can't find qualified candidates to fill job openings, they're lying by omission. They can find plenty of qualified candidates, what they can't find are senior-level candidates willing to accept entry-level pay.

2024-12-28 14:35:52 CET

- reply

I'm wondering if the MAGA crowd will pull another Jan. 6 to try and overturn Trump's election over this. Or the same but at his inauguration. Depends on how well his team can keep his and his buddies' mouths shut, I suppose.