

They installed some sort of sound isolating suspended/floating (?) ceiling in my apartment. I absolutely love it. In my neighbors apartment I could constantly hear people above, but in mine it’s almost always silent.


They installed some sort of sound isolating suspended/floating (?) ceiling in my apartment. I absolutely love it. In my neighbors apartment I could constantly hear people above, but in mine it’s almost always silent.


Earlier today, a publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots, that handle private keys directly. This issue should not affect non-custodial wallets, as they generally do not expose private keys during transactions. This is not an issue with the Solana protocol itself, but with a specific JavaScript client library and only appears to affect projects that directly handle private keys and that updated within the window of 3:20pm UTC and 8:25pm UTC on Tuesday, December 2, 2024.
These two unauthorized versions (1.95.6 and 1.95.7) were caught within hours and have since been unpublished.
We are asking all Solana app developers to upgrade to version 1.95.8. Developers pinned to latest should also upgrade to 1.95.8.
Developers that suspect they might be compromised should rotate any suspect authority keys, including multisigs, program authorities, server keypairs, and so on.
https://github.com/solana-labs/solana-web3.js/releases/tag/v1.95.8


No, of course it’s not surprising that they’re not a charity. Sure, the big app stores exploit their near-monopolies with exorbitant fees.
Good for Apple, Valve and Google, but I think it’s better that game dev studios and app developers get money instead. However, devs don’t currently have a real choice but to pay up.
Competition can change that, so we should support technically worse stores like Epic so developers will not have to pay their unreasonably high fees.


Yeah, I understand why people like and buy from Steam. It gives real value.
However, especially for smaller game studios, I believe I get more value if actual game developers get more money than Steam getting it. Let’s say a studio gets $1m in revenue after years of work. Having $180k more ($120k Epic fee vs $300k Steam fee) to spend on artists and developers for their next games/DLCs is a big difference.
Those $300k is literally 0.003409% of Steam’s revenue (estimated 8.8 billion in 2020). Valve could have an army of over 40,000 developers at a yearly $200k compensation and still be profitable just from selling other people’s games.
So I make a big convenience sacrifice when I buy from Epic. I also don’t like to support Tencent. But unless the dev is selling Steam keys directly from their web site, that’s where they get the most money.


Steam is a better product, but you give less money to the developers of the actual game. Unless it has Steam exclusives (e.g. Steam workshop) I would rather buy wherever I give the devs most money.


Yes, those are all unreasonably high, which is why they have so many billions of dollars in profit. The cost of running their services is a pittance compared to their revenues.


You could make the same argument for voting. What does your little drop in the vote bucket matter? Do you believe voting is a waste of time too?
I pasted 1k line C++ file into Gemini, along with a screenshot and a trace log and asked it to find the bug. It reasoned for about 5 minutes. Extract of the solution:
It correctly identified that
sqrt(_v[0]*_v[0] + _v[1]*_v[1] + _v[2]*_v[2]);had too low precision and usingstd::hypot(_v[0], _v[1], _v[2])would likely solve it.If this is just autocomplete, then I agree that it’s a pretty fancy one.