anticristi

Interesting angle: Compiler errors brings back math teacher trauma. I noticed Rust tries to be a bit more helpful, explaining the error and even trying to suggest improvements. Perhaps "empathic errors" is the next milestone each language needs to incorporate.

It would be interesting to experiment with providing people only with a sundial. :)))))

Where I work, we have company-wide breaks between 10.00-10.15, 12.00-13.00 and 15.00-15.15. These cannot easily be enforced with external parties, but running an internal meeting over a break will need an explanation. What I noticed is that back-to-back meetings are more likely "capped" at 2 hours, so it's easier for people to show up on time and energized.

This is great news! Who would have expected Cloudflare to truly contribute to EU digital sovereignty.

On a more serious note, I'm surprised Cloudflare wants to pull out of Italy. Being a company which terminates TLS connections for Italy must be a gold mine for the NSA.

Whether the claims are true or not, this was a very entertaining BGP refresher. It made me wonder: 15+ years ago, I was network engineer and we used quite a bit of "BGP community magic" to get the routing outcomes we wanted.

If BGP only really needed to represent three types of peers (provider, customer, actual peer), wouldn't BGP configuration and perhaps even BGP be massively simplified?

Well said! I used to administer both FreeBSD and Linux (Debian) servers at the same time. I found them different, but couldn't say either was better or worse.

How about trying out legal solutions against browser fingerprinting? The European Data Protection Board -- i.e., the union of "GDPR Police" in each EU Member State -- made it clear the fingerprinting violates the ePrivacy Directive.

Can I also get the analogous code for an AI customer navigating the AI customer service to get to a human customer service?

"He gets what he wants done, compromising on timing." is a really good summary!

That's what I love most about using ChatGPT vs Google for finding information: less bloat, just what I asked for.

This is really scary. It could have totally happened to me too. How can we design security which works even when people are tired or stressed?

Once upon a time, I used a software called passwordmaker. Essentially, it computed a password like hash(domain+username+master password). Genius idea, but it was a nightmare to use. Why? Because amazon.se and amazon.com share the same username/password database. Similarly, the "domain" for Amazon's app was "com.amazon.something".

Perhaps it's time for browser vendors to strongly bind credentials to the domain, the whole domain and nothing but the domain, so help me Codd.

These judges are going to be in serious trouble once AI turns against us. #AIRights

I work as a Data Protection Officer, which is a legal role under GDPR, and am rather unimpressed by GPC. I could whine for a day, but among the most problematic issues: It's not clear if "Sec-GPC: 0" should be interpreted as:

1. "no" to collect personal data under GDPR consent; or 2. "objection" to collect personal data under GDPR legitimate interest or; 3. "no" to retrieving and storing data on a user device (e.g. cookies, localStorage); or 4. A linear combination of the above.

Personally, I think we should simply fine the heck out of all websites until they all feature a "Reject all" button. No need for browser vendors to propose standard which at least one browser vendor can't be bothered to implement.

There is something about the "moving humans" part in the article that doesn't hold water.

From what I noticed, dentists use fingers 4 and 5 to track the movement of the head or jaw. I saw no such tracking in this robot, with the article simply making a handwavy "trust AI" argument.

In general, I think if robots are to overdo humans, they should do that with improved sensors and actuators, not just "enough AI".

I guess the dentist will simply push a few buttons, while a cheaper dental hygienist will do the comforting.

Sjunet also uses public IP, but never exposes those on the Internet. No clue why, probably it turned out to be the easiest solution to avoiding collision with private ranges used at all member organizations.

My understanding is that the members need to sign a contract to join Sjunet. I'm not sure of penalties, but being kicked out of Sjunet is likely an incentive for decent IT staffing.

I wonder how long until someone will simply smoosh a billion songs into a "large song model" and make all signal processing knowledge irrelevant.

In Sweden, there is a private network (Sjunet) which is isolated from the Internet. It is used by healthcare providers. Its purpose is to make computers valuable communication devices (I love how the article points this out), but without exposing your hospital IT to the whole Internet. Members of Sjunet are expected to know their networks and keep tight controls on IT.

I guess Sjunet can be seen as an industry-wide air-gapped environment. I'd say it improves security, but at a smaller cost than each organization having its own air-gapped network with a huge allowlist.

I always understood "user" in "userspace" as "the user of the operating system kernel".

The EU DORA regulation (Digital Operational Resilience Act for Financial Entities) has explicit provisions to avoid concentration risks. I heard a story that a bank was forced to use Google Cloud, because two other banks were already on AWS and Azure.

It sounds to me near-impossible to convert C or C++ into as-safe-as-possible Rust code, because the original intention of the developer are missing. However, I wonder if some clever generative AI could be taught to recognize sufficient C programming patterns in relevant code bases to make the problem tractable.

Why?

The proposed EU Cyber resilience Act positions itself to be a solution. To put it simply, vendors are responsible for vulnerabilities throughout the lifetime of their products, whether that is a firewall or a toaster. Thus, the vendors are incentives to keep OSS secure, whether that means paying maintainers, commissioning code audits or hiring FTEs to contribute.

:)))

I find the super-plain voice of the annoyed character further amplifies the humor.

But wait. There’s more. With the team growing, how are we supposed to manage shared resources? Do I have to run tf apply, wait for completion, and then immediately commit and push, and hope I don’t have to manually manage a state file merge conflict? Or should I use some bizarre, self-built mutex?

In one project, we had Terraform run from GitLab CI. The CI was creating a plan. The reviewer had to approve applying that plan.

I'm curious about your usage of Ansible for AWS resources. How do you delete them? Do you have a policy of always having 'state: absent' for at least one commit?

I feel offended that the author didn't bash GitHub and GitLab. The PM features are still small, but I can totally see how they will eventually become the next Asana or Jira to hate.

Too bad I live in a developing country when it comes to IPv6. Hi from Sweden!

This is the weirdest video I ever watched. It's like Black Mirror ... but in real life ... and a somewhat happy ending.

I'm also somewhat skeptical. How would a program deduce that "cookies and similar technologies" will mean localStorage, sessionStorage, IndexedDB, etc. Remember that the law was written well before some of these technologies even existed.