r4indeer

Let me support your argument by telling you what you just reminded me of...

I was briefly subscribed to the NYT from Germany. To my surprise, I couldn't cancel online, but had to call. (The EU has a law which requires that if you can subscribe online, you must be able to cancel online.)

They have national numbers for many countries, but they're just forwarders to the same call center, with notably mangled audio quality presumably due to multiple lossy compression algorithms applied at each hop of the call.

Additionally, there was lots of background noise when I got connected to a rep. Over this barely usable line, I was now asked to spell out my email address, which naturally took multiple attempts of painfully slow spelling before the rep was able to locate my account. (My very limited knowledge of the NATO alphabet didn't help.)

Of course, I then had to go through the spiel of declining alternative offers and providing a reason for my cancellation (all of which I never had to do in Germany before) before they finally confirmed it. Yeah, I'm glad about consumer protection law in the EU.

I'm conflicted on the use of AI in CTFs. On the one hand, they are supposed to mirror real-life scenarios, so of course you should be able to use any tool that would be available to you in real life.

On the other hand, CTFs are fundamentally a game and a competition which are supposed to be fun and compare and improve ones skill. So when I let an LLM generate the entire solution for me, what's the point anymore? I did not learn anything. I did not work for that place on the leaderboard, I just copied the solution. And worst of all, I did not have any fun. It's boring.

So how does using AI as a solver not feel like cheating?

The deal is in contrast to Anthropic and OpenAI who wanted additional restrictions regarding the use of their models for autonomous weapon control and domestic mass surveillance. The US government agreed to these terms in the case of OpenAI [0], yet publicly denounced Anthropic for wanting the same thing [1].

[0] https://openai.com/de-DE/index/our-agreement-with-the-depart...

[1] https://www.anthropic.com/news/statement-comments-secretary-...

If QC gets to the point where breaking RSA and ECC in the real world is actually going to happen, I'd imagine you will find a consensus rather quickly.

Ok, fair point. However, I would consider any MDM-enabled device fully "compromised" in the sense that the org can see and modify everything I do on it.

The argument regarding no certificate pinning seems to miss that just because I might be on a network that MITM's TLS traffic doesn't mean my device trusts the random CA used by the proxy. I'd just get a TLS error, right?

Bubblewrap is exactly what the Claude sandbox uses.

These restrictions are enforced at the OS level (Seatbelt on macOS, bubblewrap on Linux), so they apply to all subprocess commands, including tools like kubectl, terraform, and npm, not just Claude’s file tools.

https://code.claude.com/docs/en/sandboxing

This would only apply if they were distributing the GPL licensed code alongside their own code.

As far as I understand the FSF's interpretation of their license, that's not true. Even if you only dynamically link to GPL-licensed code, you create a combined work which has to be licensed, as a whole, under the GPL.

I don't believe that this extends to calling an external program via its CLI, but that's not what the code in question seems to be doing.

(This is not an endorsement, but merely my understanding on how the GPL is supposed to work.)

I fully agree. The original comment and the other replies to it are bewildering. There was nothing to gain here, yet people are throwing ad hominem attacks left and right.

Firefox on Android seems to be unaffected.

The next paragraph also reads...

However, The Guardian reported that Lidden’s solicitor, John Sutton, had criticised the Border Force for how it had handled the incident, describing it as a ‘massive over-reaction’ because the quantities of material were so small they were safe to eat. He reportedly said that he had been contacted by scientists all around the world saying that the case was ‘ridiculous’.

In addition to the other comments: If you are on NixOS, you can use nixos-enter [1].

[1] https://wiki.nixos.org/wiki/Change_root

At least for the "to the right" part, I think the monotonicity of time has that one covered unless someone invents a time machine to improve metrics in the past.

FYI, assuming that is your web server, your TLS certificate expired end of last month.

Personally, I like a lot of things about NixOS.

Redeploying a machine has never been easier for me as all of my config is stored in a git repo in a few .nix files. I don't need to remember what I installed or configured somewhere in /etc five years ago, I can just look in the .nix file for that machine. Everything I configure or install is synced across my desktop and laptop through imports (unless specified), which makes the experience very seamless.

When something goes wrong e.g. after an upgrade, I just reboot and choose the previous generation from the boot menu. If I just want to try out a package, I can get a temporary shell where that package is available. If I don't need it after all, it just gets garbage collected.

When working on a project, I can use a dev shell where everything I need to build/test that project is isolated so I don't pollute my root namespace.

Sounds like what you have is similar to the idea of a bastion host, even if not quite the same.

Now an old fashioned light bulb shouldn't be expected to last a decade, but an oven?

Funnily enough, there actually was the Phoebus cartel [1] which sought to reduce the lifespan of incandescent light bulbs to around 1,000 hours and raise prices.

[1] https://en.wikipedia.org/wiki/Phoebus_cartel

Mastodon is decentralized / federated, so the page load time depends on the instance you're visiting.

Only 2 left, probably for a while already. I'd guess that's old stock.

What if they don't have packages you need?

Unlikely. But if so, you can provide the packages yourself: https://info.arxiv.org/help/submit_tex.html#wegotem

What if your paper isn't written with LaTeX?

Then they still accept PDF or HTML. See: https://info.arxiv.org/help/submit/index.html#formats-for-te...

The tweet was updated five minutes later to correct 550 to 505.

https://twitter.com/karaswisher/status/1726599700961521762?s...

This still has nothing to do with the ImageMagick developers, which the original comment implies: "Compare [sic] to codesign, vulnerability management is more concerning."

You are free to criticize Canonical for their business model, but that seems off-topic to me right now.

What does this have to do with ImageMagick? They don't control the versions packaged by Canonical [0]. The bug you referenced is fixed in upstream, which you can access for free on GitHub.

Ubuntu users on 22.04 LTS or later are also unaffected, because the release came with a version that was already patched [1]. If you upgrade to a newer Ubuntu release, there is no need to pay for ESM.

Your comment makes it sound like the ImageMagick developers want money specifically from Ubuntu users to reveive security patches, which is not true.

[0] https://github.com/ImageMagick/ImageMagick/discussions/6805#...

[1] https://ubuntu.com/security/CVE-2022-48541

Edited to add some links.

As someone who played the "The Room" series, including the VR title, this looks really interesting to me. Could you maybe share if the game features any jumpscares?

All of the current methods to bypass internet access, account creation, CPU/TPM requirements, etc. (including the linked article) depend on the cooperation of the OS.

I'm sorry, a 10-stage application with at least 5 different interviews? How many weeks is this going to take? This feels like FAANG-level recruitment.

Am I so out of touch to expect an application, one interview and maybe a technical assessment for most IT/CompSci jobs? Wouldn't the probationary period be way more effective to see if you fit into the team/company/culture/etc.?

Not quite, docker-compose is shipped separately by Docker as docker-compose-plugin. The plugin can then be reached with the subcommand "docker compose".

However, I agree with your sentiment. It's basically a part of any modern Docker installation now. Calling it an external dependency "like watchtower" is not a fair comparison.

Adding 2FA codes to logins costs money

If you don't want to pay $10/year for Premium, you can still host Vaultwarden instead and get the features for free.

self-hosting is deliberately difficult so you'll be using the cloud

[citation needed] in my opinion. Yes, the current self-hosting method is rather complex, but still not that difficult to set up. Just follow their guide.

They are even working on a new "unified" deployment method [1] where you can choose your own DB and all the Bitwarden containers are merged into one. The resulting docker-compose.yml looks as simple as any other service I self-host. Why would they do this if what you said were true?

[1] https://bitwarden.com/help/install-and-deploy-unified-beta/

Probably not the point of your comment, but just for completeness, it stands for Hardware Security Module.

I never said that the issues are unique to the Flatpak. I said if they are, then you shouldn't blame Zoom.

The reason why I commented in the first place is because you explicitly mentioned the Flatpak of the Zoom client which stood out to me.

It is my understanding that Flatpak sandboxes apps [1], which could cause various issues if the app is not expecting to be run inside one or of the permissions are misconfigured.

But it certainly doesn't have to. Of course the app itself can be buggy. My point is that an official release should be checked before reporting bugs.

[1] https://docs.flatpak.org/en/latest/sandbox-permissions.html