Tootfinder

AssetHarvester: A Static Analysis Tool for Detecting Assets Protected by Secrets in Software Artifacts
Setu Kumar Basak, K. Virgil English, Ken Ogura, Vitesh Kambara, Bradley Reaves, Laurie Williams
https://arxiv.org/abs/2403.19072

AssetHarvester: A Static Analysis Tool for Detecting Assets Protected by Secrets in Software Artifacts
GitGuardian monitored secrets exposure in public GitHub repositories and reported developers leaked over 12 million secrets (database and other credentials) in 2023, indicating a 113% surge from 2021. Despite the availability of secret detection tools, developers ignore the tools' reported warnings because of false positives (25%-99%). However, each secret protects assets of different values accessible through asset identifiers (a DNS name and a public or private IP address). The asset informat…

I remember getting my license back in the beginning of March in 2021 when I changed my gender from man to woman. It felt so freeing to see the gender of who I am reflected in an official document.
#trans #transjoy

Oh god
https://www.pixiv.net/en/artworks/92041231

Yu-Gi-Oh! SEVENS / ろぐうぅぅかいしいぃぃぃ / August 16th, 2021 - pixiv
pixiv

This https://arxiv.org/abs/2307.08080 has been replaced.
link: https://scholar.google.com/scholar?q=a

Sampling Proper Colorings on Line Graphs Using $(1+o(1))Δ$ Colors
We prove that the single-site Glauber dynamics for sampling proper $q$-colorings mixes in $O_Δ(n\log n)$ time on line graphs with $n$ vertices and maximum degree $Δ$ when $q>(1+o(1))Δ$. The main tool in our proof is the matrix trickle-down theorem developed by Abdolazimi, Liu and Oveis Gharan (FOCS, 2021).

“We find disconcerting trends for maintainability. Code churn—the percentage of lines that are reverted or updated less than two weeks after being authored—is projected to double in 2024 compared to its 2021, pre-AI baseline … AI-generated code resembles an itinerant contributor, prone to violate the DRY-ness [don’t repeat yourself] of the repos visited.”

New GitHub Copilot Research Finds 'Downward Pressure on Code Quality' -- Visual Studio Magazine
We find disconcerting trends for maintainability.

Study finds that Github Copilot lowers code quality and maintainability:
"We find disconcerting trends for maintainability. Code churn -- the percentage of lines that are reverted or updated less than two weeks after being authored -- is projected to double in 2024 compared to its 2021, pre-AI baseline. We further find that the percentage of 'added code' and 'copy/pasted code' is increasing in proportion to 'updated,' 'deleted,' and 'moved '…

New GitHub Copilot Research Finds 'Downward Pressure on Code Quality' -- Visual Studio Magazine
We find disconcerting trends for maintainability.

Sources detail a secret $100M investment in Kickstarter by a16z Crypto, letting staff and investors cash out, that led to its abandoned blockchain pivot in 2021 (Fortune)
https://fortune.com/crypto/2024/03/11/kickstarter-bloc…

The untold story of Kickstarter’s crypto Hail Mary—and the secret $100 million a16z-led investment to save its fading brand
Inside the once-hot startup's struggle to regain its relevance despite a massive check from the crypto arm of the venture giant Andreessen Horowitz.

Over the next 15 years we will spend $3 Trillion on highway expansions and maintenance in the United States
With 2.5% of that funding Amtrak will deliver their vision of adding 39 new routes and enhancing 25 routes!
Imagine what Amtrak could do with 5% of the highway budget?

https://amitp.blogspot.com/2021/06/firefox-89-tab-appearance.html - Firefox 89 tab appearance fixes with userchrome.css.

This https://arxiv.org/abs/2404.13939 has been replaced.
initial toot: https://mastoxiv.page/@arXiv_sta…

Unlocking Insights: Enhanced Analysis of Covariance in General Factorial Designs through Multiple Contrast Tests under Variance Heteroscedasticity
A common goal in clinical trials is to conduct tests on estimated treatment effects adjusted for covariates such as age or sex. Analysis of Covariance (ANCOVA) is often used in these scenarios to test the global null hypothesis of no treatment effect using an $F$-test. However, in several samples, the $F$-test does not provide any information about individual null hypotheses and has strict assumptions such as variance homoscedasticity. We extend the method proposed by Konietschke et al. (2021) …

Accused Jan. 6 rioter charged with firing gun during U.S. Capitol attack: report
John Emanuel #Banuelos was the subject of the NBC News investigation that began two years ago when photos and video surfaced of a
👉 man with a gun tucked in waistband during the riots, according to reporter Ryan Reilly.
"Last month, Jan. 6 rioter

Accused Jan. 6 rioter charged with firing gun during U.S. Capitol attack: report
An accused Jan. 6 rioter who appears to have twice fired a gun during the 2021 attack on the U.S. Capitol was charged Friday, according to reports and court records.John Emanuel Banuelos was the subject of the NBC News investigation that began two years ago when photos and video surfaced of a man wi...

I've been thinking a lot about journals & special issues lately, likely because I find myself as an editor of a journal/magazine—whose entire program is thematic issues proposed & organized by guest editors—in the midst of a backlash against special issues.
This article does some nice theorizing about the changes we're seeing in editorship amidst the nexus of other transformations in scholarly publishing:

https://web.archive.org/web/20210918190243/http://timeagan.com/?eaganblog&itemid=1089
And Then What?
(Posted on August 25, 2021 by Tim Eagan)
I cannot grok
The right wing’s plot
With my strategy decod…

Performance of a modular ton-scale pixel-readout liquid argon time projection chamber
DUNE Collaboration, et al.
https://arxiv.org/abs/2403.03212 https://<…

Performance of a modular ton-scale pixel-readout liquid argon time projection chamber
The Module-0 Demonstrator is a single-phase 600 kg liquid argon time projection chamber operated as a prototype for the DUNE liquid argon near detector. Based on the ArgonCube design concept, Module-0 features a novel 80k-channel pixelated charge readout and advanced high-coverage photon detection system. In this paper, we present an analysis of an eight-day data set consisting of 25 million cosmic ray events collected in the spring of 2021. We use this sample to demonstrate the imaging perform…

#Pendulum, the #NIH #Python library for dates and times, has recently been rewritten in #RustLang. As part of the rewrite, they broke it completely for 32-bit architectures. The problem is, nobody really cares and technically the library is unmaintained since December 2021.
I mean, isn't it great? Let's write a NIH library, abandon it, then suddenly rewrite it in Rust, but leave it abandoned — and now also broken.
Fortunately, it's only used by #PgCLI in #Gentoo, and only in one place. Perhaps the author can be convinced to switch away from it?
[EDIT: Apparently it was introduced as a replacement for humanize, without a single word of rationale. Sigh.]
https://github.com/sdispater/pendulum/issues/784
https://github.com/sdispater/pendulum/issues/590
https://github.com/dbcli/pgcli/issues/1451