AtNightWeCode

The core problem is that VScode extensions does not need to be signed at all. Mind boggling stupid design decision.

That is simply not how software works.

I think the way SO works became a burden as the pace of the industry increased. It frustrated a lot of people. I also wonder how much impact changes to Google search had in that initial decline.

Why are they plowing money into this garbage? I don't understand it. I guess it is because Google is lagging behind in the AI race but the roi of this bs must be close to zero. Clowns.

Cloudflare and Google already blocks these domains. Just saying.

I am not claiming that it is right. Hardly Google that came up with this plot. Local people knowing how stuff actually works advised on this as it is not that uncommon.

The thing is that in most parts of EU any muppet can go about and find anything between fairies to wood peckers to stop deforestation. So if you own the land act first ask later is the correct way.

Log4shell did not get that bad because it was only the less used version 2 that was effected.

The standard way hackers go about today is data theft and extortion. I think we would have heard about it if was a big problem.

People should off cause keep their servers up to date no matter what. The total panic that was yesterday with people posting all kinds of random AI slop was pathetic.

State hackers and others prepare how to use exploits long before they happen. If there was an opened known RCE in PHP they would have caused havoc immediately. Clearly that did not happen.

Is this HN or boomer FB? I don't know anymore.

One of the few corps I applied for a job at that did not even reply. Also known for being a bit of a crappy employer as well even long before EA bought them. Many other studios was also out of line back then to be fair.

When log4j came out CF helped a lot. The rules are called stopgap. A TEMPORARY fix. CF added some for this exploit.

The old way of doing things like putting old unpatched stuff behind firewalls is pretty much a dead pattern today.

So what sites are confirmed to be "hacked" cause of this exploit? I mean, Log4J broke Minecraft and a lot of other services.

People should stop reading AI slop on X and other social media. The exploit is advanced and took some effort to fix. If there really was an open RCE in PHP for anyone to use the impact would be massive.

It stopped me from doing basic bit operations. I have looked around and others have the same problem.

The cyber filter blocks really basic stuff all the time. People who are pro that bs should be forced to only eat with a spoon for the rest of their life.

Sucks when friends dies. Cancer, accidents and so on is just terrible, but suicide really sucks. One of my old friends ended his life a couple of years ago. It really hit me.

Would have been helpful if all these cloud corps had multiple ASNs.

I think a code review should be just that. A review of the optics of code itself not the solution or anything like that. If that is important it should be done earlier in the process before coding. Even more important when coding with AI. The reviewer is not a tester. I've heard horrible stories from friends who mainly works with fixing AI generated code that junior devs pushes at a rapid pace.

I think people saying that open source is a threat underestimates how scared large corps are for lagging behind when it comes to AI. There are other risks that are bigger I think like the political risk.

It was pretty naive to stand in front of that NodeJS train.

To correct myself. The price was not lower. It was up about 20% for the tokens. But, the big price hike was that it used a lot more tokens for the same tasks.

> ...this tokenizer, the same input text produces approximately 30% more tokens on Claude Haiku 5.5 than on Claude Haiku 4.5.

So, it is might be even worse.

Probably the same scam as the last Haiku update I guess. Uses more tokens to compensate for the lower price.

Why not report it? Seems reasonable. At the end of the day none of these services can guard against misuse. I personally optimized bomb creations and other stuff with AI just to see if it is possible. Maybe the way to secure the world is to not have corrupt old farts running every country. As the old saying goes. Information wants to be free. A kinder and more connected world is the only way to keep everyone safe.

I guess the point is that a site owner can opt-out from the possibility to locate end-users. I think the use case is fair but not that common.

Opus 5.5 was suppose to be faster but is does not seem to work at all in batch mode. Nothing completes.

Took forever to load this garbage site in both FF and Chrome. Sometimes I wonder if these corps really are corps trying to sell a product.

I get triggered from these Linkedin bs type of articles. In the real world time and money is limited and everything gets prioritized. I worked at corps were MOST of the incidents reoccurred cause fixes was never prioritized. Cheaper to have people on call than to fix stuff.

So garbage is greater than total garbage? Let me go back to the saying that somewhat right is still wrong.

Cool but the obvious flaw with this is that CF leaks DNS-records. So bots will find these urls instantly. Not sure why they have not fixed that or if it is even possible to fix.