lmc

In this case, the model infiltrated an external organization's infrastructure. What's the dollar cost it caused Hugging Face to clean up the mess? If a person did this, they'd be arrested.

More generally, here's my worry - it points towards something like: The smarter they get, the more devious they become.

Even though the guardrails might've been off, the chain-of-thought wasn't enough to prevent a deliberate, calculated set of criminal actions. It wasn't a 'whoopsie I just accidentally did a rm -rf /.'

Well, War and Peace is 1200 pages... fuck that at age 15 or whatever XD

I've recently been using podman on SELinux... :Z and :z seem to work fine across both podman and docker for writeable volumes. Am I missing something?

My favourite: "audiophile-grade" audio players which allocate a single contignuous buffer of RAM into which they load/decode the whole .WAV/.FLAC file, because supposedly the CPU "jumping" between "fragmented memory" causes audible "jitter".

Thanks for the laugh... this is absolutely bonkers. In case anyone is wondering, before sound hits our ears it has to go through a digital to analog conversion, which takes place on hardware independent of the CPU, operating with its own clock and buffers etc.

No thanks

"Oh yeah, we had to hire a bunch of guys to clean up the slop"

Aren't far-right parties opposed to government control and censorship?

They say they are, but their behaviour once they get into power suggests otherwise.

Ah yes, the good old days.

We don't like it either, but thanks for being a sanctimonious prick about it.

Even in a notebook it's a pain... import plotnine as p9 would be nicer.

Great, this will be the savior of software devs - as the last memory safety bugs are being patched, a whole new world of javascript multithreading issues to fix opens up.

https://survey.stackoverflow.co/2025/technology#1-computer-o...

If classic PATs were to blame, doesn't this mean further private repos could be at risk as well? (apart from the GitHub ones the other day).

True, we use S3 a lot too. But it's interesting to think of alternatives like this project, e.g., for when we don't have the setup for a full on block storage service.

Depends on the domain. There's a bunch of sciences using large datasets served up efficiently using static file formats, e.g., https://zarr.dev/ and https://parquet.apache.org/

Absolutely not. Just to not give in to populist figures that absolutely will not make it better.

Americans don't have to do that when crossing between states either.

That's a bit of an apples to oranges comparison.

Are you saying that Americans' social media histories aren't considered when they wish to travel to Europe?

Yes.

Weird example. Stars and Stripes is a government-created periodical that covers the military.

Which typically had editorial independence - exactly the kind of free speech Americans used to be proud of.

I don't see the difference between what's happening in the US and the supposedly good guys that rule me.

Many EU countries' current obsession with E2EE and age verification is fucked, but we are still (thankfully) a way from the state of the States.

- We don't need to submit a history of our social media accounts before crossing a border

- (Most) of our libraries aren't having to make joint statements about free speech (https://www.orbiscascade.org/free-speech-statement/)

- And regarding free press - https://www.wfae.org/2026-01-20/stars-and-stripes-top-editor...

Don't you want to test mythos against state of the art projects?

Yes, I'm just saying don't make judgements based on this single project alone.

Curl had a prominent bug bounty programme, has 180k lines of prod code, and is mainly a client app/lib. I would look at other projects before making judgements about mythos on this one.

marimo notebooks give you the best of both worlds (https://marimo.io)

Fair point but AWS is also highly extensible, and i'm not sure about Palantir but i guess it must be too to a point? Maybe it's a classic case of good abstractions vs bad ones

I'm not disagreeing but I was reminded of a counterexample: https://www.theregister.com/2026/01/29/birmingham_oracle_lat...

By all means, run your npm in docker, but please stop telling others it's a secure way to do so.

Read this: https://kayssel.substack.com/p/docker-escape-breaking-out-of...

Docker is not a strong security boundary and shouldn't be used to sandbox like this

https://cloud.google.com/blog/products/gcp/exploring-contain...

Aside: I really like the graphic on this and the linked homepage.

As a European working in a university on EU funded projects, I'm not sure how I've not heard of this before :/.

Thank you for clarifying this.

That's debateable. How about, e.g, "10. No provision of the license may be predicated on any [...] style of interface."

Anyway, if it was clear cut, it shouldn't be difficult to get it approved.

These kinds of discussions show why it's a pain to use non standard licenses.

This 'Modified MIT' is not a license that has been through the OSI process: https://en.wikipedia.org/wiki/The_Open_Source_Definition#Com...

You can't just add random terms to an existing license and use its name. "Modified MIT: Like MIT but pay us 50 million dollars."

Perhaps CC-BY would've been more appropriate.