Andrew Kvapil viluon

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

The ThinkPad P1 has no official requirements for USB-C chargers. This is the result of testing a few different USB-C chargers on my Gen 4 P1.

Notes:

Machine BIOS is N40ET44W 1.26.
This configuration (i7 11850H, RTX A3000) shipped with a 230W AC charger.
Result wattage read from Lenovo Vantage on Windows 11 Pro.
Windows does not acknowledge unsupported chargers at all (eg does not show any error messages). A KDE desktop does show a message that the wattage is too low for unsupported chargers.
Tested with a 100W C-C cable or 100W TB4 cable.

| Charger | Charger Wattage | Result |

TPM provides zero practical security

TPM (Trusted Platform Module) is as useful for preventing real attackers as the TSA is at preventing real terrorists. The architecture is fundamentally flawed and most existing implementations are completely broken. I thought this argument was settled decades ago[1] when "trusted computing" was introduced mostly as a way to provide DRM and ownership capabilities to organizations. It has largely failed to impact the consumer market when it was introduced back in the early 2000s. However, recently there seems to be a movement by certain parties to reintroduce this failed product back to the market. Microsoft argues that in order to use Windows 11, you need TPM 2.0 compatible hardware because[2]:

The Trusted Platform Module(TPM) requirement ena

Fixing Thermal Throttling on Thinkpad P1 and X1 Extreme - Linux Edition

Lenovo messed up with the X1E and P1 Gen 1 versions (and maybe later generations) in that the system boots with a thermal limit (aka Tjunction or tjmax) set to 82C (some report 80C). What this means is that regardless of power draw or under-volting settings, when your CPU hits 82C, it will drop the frequency down to the "Configurable TDP-down" frequency, or even lower. It will also may limits the system power draw.

Thermal Paste and Stress Testing

Sway output mirror and screencast

Mirror

wf-recorder

With wf-recorder it is possible to record one output. When ffmpeg is compiled with sdl support, then it is possible to use "sdl" as the muxer and replay the recorded video instead of writing it to a file.

Quick Tips for Fast Code on the JVM

I was talking to a coworker recently about general techniques that almost always form the core of any effort to write very fast, down-to-the-metal hot path code on the JVM, and they pointed out that there really isn't a particularly good place to go for this information. It occurred to me that, really, I had more or less picked up all of it by word of mouth and experience, and there just aren't any good reference sources on the topic. So… here's my word of mouth.

This is by no means a comprehensive gist. It's also important to understand that the techniques that I outline in here are not 100% absolute either. Performance on the JVM is an incredibly complicated subject, and while there are rules that almost always hold true, the "almost" remains very salient. Also, for many or even most applications, there will be other techniques that I'm not mentioning which will have a greater impact. JMH, Java Flight Recorder, and a good profiler are your very best friend! Mea

	-- DEFLATE-ANS: A variant of DEFLATE that uses asymmetrical numeral systems
	-- instead of Huffman coding, increasing decompression speed with similar
	-- compression ratios.
	--
	-- The block format matches RFC 1951 DEFLATE, with some minor adjustments:
	-- * Bit fields are always stored most significant bit first, and bytes are
	-- stored most significant byte first. This is for convenience in the bit
	-- decoder.
	-- * Huffman-encoded blocks are replaced with tANS-encoded blocks. These blocks
	-- start with an initial X value (which is R bits long), followed by the codes

	#!/usr/bin/env bash

	rm /run/systemd/system/nix-daemon.service.d/proxy-override.conf
	systemctl daemon-reload
	systemctl restart nix-daemon

	-- We can re-use metatables where possible
	local lookupCache = {
	__index = function(self, i)
	local v = { __index = i }
	self[i] = v
	return v
	end
	}

	local function use_aho_corasick(automaton, str)

	-- UnBIOS by JackMacWindows
	-- This will undo most of the changes/additions made in the BIOS, but some things may remain wrapped if `debug` is unavailable
	-- To use, just place a `bios.lua` in the root of the drive, and run this program
	-- Here's a list of things that are irreversibly changed:
	-- * both `bit` and `bit32` are kept for compatibility
	-- * string metatable blocking (on old versions of CC)
	-- In addition, if `debug` is not available these things are also irreversibly changed:
	-- * old Lua 5.1 `load` function (for loading from a function)
	-- * `loadstring` prefixing (before CC:T 1.96.0)
	-- * `http.request`