Hey, sorry for the slow response. Feel free to appoint me as a mod until someone else wants to fully take over so that you don’t feel pressured to hold that spot for longer

Is your friend alright?

Yes, there is a lot of potential. There are micro-spectrometers available covering this range, like the MEMS-FPI type spectrometer or the multi-pixel arrays with filters (example: https://www.mantispectra.com/products). But this new kind of detector seems to come with higher resolution, faster readout than the MEMS-FPI, and more sensitivity. It is quite exciting, I’m curious to see if they commercialize it soon.

I am not 100% sure, but I think that the designer bears the cost of the wafer yield.

The PDK is specific to the manufacturer, and I imagine that the risk associated with specific features is known and the yield range can be estimated. A design with more and riskier the features would lower the expected yield, and it makes sense that this risk gets passed onto the designer. The contract may have some protections for the case when the yield is significantly lower than expected because of the manufacturer’s fault. Just a guess though, it would be great if someone with real experience can answer.

Very cool!

I also like that they included a device cost analysis. I think they used some aggressively optimistic assumptions (100% yield from the wafer) and large-volume procurement prices that I am skeptical of, but if true it is valuable info.

Nice!

You may have disabled the visibility of bot accounts in your user settings

I could see the credits for “Everything’s Gonna Be Alright” in Deezer, but I am not sure about how exactly Deezer determines this: https://www.deezer.com/us/album/951602381

I would make use of a VPS to serve a directory with the files using Nginx. The VPS is ~$5 /month. You can share the ip or buy a domain name for ~$10/year. If you are not opposed to vibe-coding, you can probably generate the Nginx + HTML config to play through the songs without having to click them individually with little effort.

Wait what, how do you know my code?

Also: I use the timer very often, and I find setting a timer on a phone to be more awkward.

Sport watches.

Combination of two tings: I used to think that wearing a watch was irrelevant because I could always see the time in my phone. And I did not want to have an app knowing how many steps I take.

What changed a few years ago: I stopped having a phone on me most of the time, so a watch became extremely handy for knowing what time it is, and I found out that Garmin watches work perfectly well without an app. So, now, I really like my watch. I am considering getting a fancier one with solar charging, and I even got a chest strap to improve measurement accuracy while running.

Very interesting! Thank you a lot for finding and sharing that, I couldn’t find any good info myself via online searches.

The song Everything’s Gonna Be Alright is a cover of the song from Sweetbox (1997) that goes by the same name and is based on Bach’s Air from Orchestral Suite No. 3…

I think that the rest are originals. Not 100% sure. I am surprised by how little information they made available, they just randomly dropped this with no context after almost a decade since the previous one. I ordered the physical album so hopefully it comes with some additional info haha.

Definitely, disclosing (either private or publicly) a vulnerability that has been verified is significantly better than passing on the LLM output without verifying it.

It isn’t my intention to argue one specific case. What I think is that normalizing public disclosure of LLM-inspired vulnerabilities would lead to a wide distribution of cases. We would have some successful cases like yours, and also some cases of the type that I have mentioned. Increase in disclosures will raise the noise floor, and the fact that it is done publicly adds the additional pressure that I mentioned.

I see your point, but I don’t agree that the benefit of public awareness offsets the increase in noise. This disagreement isn’t rooted in aspects that we can objectively quantify though - we just have a difference of opinion here.

And in that world, doing a private disclosure made a lot of sense because you did a lot of hard work to find it, and it wasn’t easy for somebody to replicate. This was valuable and dangerous knowledge that had to be communicated in a responsible fashion.

Private disclosure still makes sense to me when you add LLMs into the mix. It is possible that an LLM outputs some plausible-sounding story that over-estimates the actual risk and impact of the exploit. If this story is publicly announced to people who use the software but are not capable of assessing these risks themselves, this can easily have a negative unnecessary consequence - for example, people may bring their server down until an expert or developer provides an assessment or fix.

This is a source of noise, and I don’t agree that this is better than private disclosure. Via public disclosure one is applying a lot of pressure to the developer(s) to prioritize whatever is being disclosed, which may not always be the nicest thing to do, especially if the impact is not as significant as the LLM suggests. This may not have been what happened in your case (I don’t know the details), but I am thinking about the idea of the average person disclosing publicly LLM-discovered vulnerabilities.

All volunteer efforts are welcome, and using AI tools to support volunteer work is completely reasonable to me.

I personally value well-crafted human-made art more highly than AI-generated art. If someone wants to invest the time to create original icons and donate them, I am always very happy to see that!

That said, requiring unpaid contributors to meet a craftsmanship standard before they are allowed to help does not seem constructive to me. Volunteer communities usually work best when people contribute with the time, skills, and tools they actually have available.

A middle-ground alternative to AI-generated work is searching through Creative Commons assets, but even that still takes time to source, filter, adapt, and integrate. Expecting volunteers to always provide fully custom artwork or spend significant additional time curating assets does not seem like a fair expectation to me.

They are banned

Not really, no

Since my work involves sensors, I set up a continuous testing setup on a raspberry pi and got its IP whitelisted. I ssh into it when something is annoying to do in the Windows laptop.