l2dy

The Italian version of this https://www.vatican.va/content/leo-xiv/it/encyclicals/docume... uses en dashes instead. Could the em- or en- dashes be a side-effect of the translation?

Public POC at https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, allowing browser sandbox escape from render process sandbox.

Author of that PR doesn't seem to be a Microsoft employee. Keep in mind that anyone on GitHub can create PRs against VSCode.

The AI features are not fully open, and there are some forking attempts to fix that. https://github.com/warpdotdev/warp/issues/9303

Related:

* What’s new in security for Ubuntu 26.04 LTS? https://ubuntu.com/blog/ubuntu-26-04-lts-security-updates

* From Jammy to Resolute: how Ubuntu’s toolchains have evolved https://ubuntu.com/blog/from-jammy-to-resolute-how-ubuntus-t...

FYI, screenshot for the "Search and download Gemma 4" step on your guide is for qwen3.5, and when I searched for gemma-4 in Unsloth Studio it only shows Gemma 3 models.

Clients are supposed to check. For example, Apple requires a varying number of SCTs in order for Safari to trust server certificates. https://support.apple.com/en-us/103214

And yes, it does break MITM use cases, for example on Chrome: https://httptoolkit.com/blog/chrome-android-certificate-tran...

Discussed in https://news.ycombinator.com/item?id=45290245

Recovering as of October 20, 2025 09:43 UTC

[Monitoring] We are seeing error rates recovering across our SaaS services. We continue to monitor as we process our backlog.

Similar discussion: https://news.ycombinator.com/item?id=45305845

Probably VS Code with https://github.com/kahole/edamagit

Related: https://news.ycombinator.com/item?id=44211779

GitHub Copilot's Sonnet 4 is not great in Elixir either, but I'm not sure if it's because of Copilot or Sonnet.

I've been waiting for https://github.com/opentofu/registry/pull/824 ("Revert commit that removed Russian providers") to be resolved, but it seems to have stalled.

Open source does not work as I envisioned, I guess.

For personal blog, I have found the following alternatives:

- Chyrp Lite: lightweight blogging engine, written in PHP. https://github.com/xenocrat/chyrp-lite

- Typecho: a PHP-based blog software. https://github.com/typecho/typecho

and file-based static content generator:

- Quartz: Publish an Obsidian vault as a static site. https://github.com/jackyzha0/quartz

- Logseq: Publish a Logseq graph as a static site. https://github.com/logseq/publish-spa

also Jekyll templates:

- https://github.com/maximevaillancourt/digital-garden-jekyll-...

Keep doing the first sort of bug fix, and you end up with a mess.

To avoid the mess, design with the fail-fast principle in mind, which brings you closer to the spot where an error occurred.

As an example, AOSC OS project owners feel offended and made a public post about it on Telegram: https://t.me/aosc_os/523.

It could disrupt the community because for issues and pull requests created on GitCode, the original maintainers are likely not going to receive any notifications and they will just be ignored.

GitCode also did not make it clear that those repos are mirrored from GitHub in an obvious way, especially on the organization or user pages, e.g. https://archive.is/su9h5. IANAL, but this looks like impersonation to me.

A sibling comment also mentioned that CSDN is publishing machine-generated blog posts about cloned projects with a link to GitCode. I believe this is even more unethical.

Any repository without a LICENSE file or license grant in code or README, and I could create one in a few minutes.

GitHub and GitCode do not provide an easy way to search for these, so you will have to scrape the API and clone the repos to find out the ratio of FOSS/restrictive/no license.

https://docs.github.com/en/site-policy/github-terms/github-t...

[...] and to reproduce Your Content solely on GitHub as permitted through GitHub's functionality

Use, display, and perform through the GitHub Service are permitted according to the GitHub ToS, but not reproduce except on GitHub, unless further rights are granted with a license.

yabai works fine without disabling SIP. I haven't tried Aerospace yet, so can't offer a feature comparison though.

Any additional information compared to the official announcement? https://news.ycombinator.com/item?id=40466810

The title reminds me of the Work Smarter loop in "Nobody Ever Gets Credit for Fixing Problems that Never Happened", but that's more about management than organic growth of efficiency.

I don’t back up my drives, I replicate them.

Don't take this as a general advice. For important data, it's important to have multiple backups and validate their effectiveness routinely.

Blog link (Feb 2024): https://research.google/blog/a-decoder-only-foundation-model...

Previous discussion: https://news.ycombinator.com/item?id=39235983

Your device eligibility for alternative app marketplaces is determined using on-device processing with only an indicator of eligibility sent to Apple. To preserve your privacy, Apple does not collect your device's location.

If you leave the European Union for short-term travel, you'll continue to have access to alternative app marketplaces for a grace period. If you're gone for too long, you'll lose access to some features, including installing new alternative app marketplaces. Apps you installed from alternative app marketplaces will continue to function, but they can't be updated by the marketplace you downloaded it from.

If a developer sells physical goods, serves ads in their app, or just shares an app for free, they don’t pay Apple anything.

If so, don't ask me to pay $99 every year for installing my own app on a device I bought.

Apps signed with a free developer account are severely limited with a short validity period and Apple enforces a limit on the number of apps that could be installed this way on a device.

The name Yabai can also be used in a positive sense to mean "great", and is particularly common among young people. Source: https://web-japan.org/trends/buzz/bz0510.html

And the Go module proxy will probably keep the old versions available.

https://proxy.golang.org does not save all modules forever. See FAQ on the site.

You may want to try https://github.com/tectonic-typesetting/tectonic, which downloads files from TeXLive on-demand.

Personally I appreciate the fix for "Reveal in Finder" hanging a system app (Finder). I also wanted to see how people think of the Properties feature, which has not been discussed yet on HN.