JLO64
JLO64 on Hacker News
> Upgrading to GitLab 19.3.6 on October 22 didn’t fix the vulnerability. The fix isn’t in GitLab’s own code but in a patch to Ruby, which GitLab applies only in its official packages. Our image used standard Ruby, so it didn’t get the patch.
> The bug is in Ruby’s regular expression engine, so any program that compiles regular expressions from untrusted input is exposed, not only GitLab.
I feel like this era of constant exploits/patches is really bad for those who build from source or make their own images vs those who rely on the provided images and upgrade them often. I really can't think of a decent solution for those people other than being plugged in 24/7 to the latest news which is really unfortunate and must be exhausting...
> But we still have no self driving cars
While I agree with your statement overall, as someone who drives everyday in LA alongside Waymos without anyone inside of them I must disagree with this aspect of it.
I don’t know much about this so I’m curious. Is the reason why GPUs aren’t preferable for large scenes due to their limited VRAM or a different aspect of them?
Not in a serious manner but I created a testing harness for a Nintendo 3DS game I'm making that uses the OpenAI Decisions API. The main advantage is the speed (~2-300ms per input) which I really need for this purpose.
I just found out about this an hour ago while browsing the Pi docs. I'm really excited to use this as an alternative to the herdr pi extension as I prefer minimizing the number of extensions I have. Also, this could be great to use with a CI tracker (though I'd need one that works with Forgejo).
https://pi.dev/docs/latest/terminal-setup#program-status
> Are you in college?
Nah, I'm in my 20s but already graduated. That said, most of my friends are guys from a church group and are 40+. I take back what I said a bit though. I know two of them who like to read spiritual stuff, but the rest don't read books and do social media or TikTok only.
A follow-up if you don't mind.
I have a friend who did some time a decade or so ago (I'm uncertain if it was a federal or state prison) and one thing I've noted about him is how much he values books, even stuff like manuals and outdated reference material (we're in a volunteer group and we were cleaning up a room with a bunch of trash). His explanation to me was that in prison there wasn't much to do and so he spent his time reading as much stuff as he could get his hands on.
From your experience, would you say that the average rate of reading amongst inmates is higher than the general population? In person I've hardly met anyone who reads books other than for school assignments.
As someone who mails a bunch of letters (as a hobby) I'm surprised to hear stamps being used this much nowadays! Just out of curiosity, how often did inmates actually use them to mail letters, or was it predominantly used as a form of currency?
I see no reason why they can’t target both at the same time. Personally I know two people who never would’ve paid for ChatGPT a year ago but now do so. I think for the average person it’s going to be a slow and difficult conversion process to paying customers.
I strongly second this, although I must admit it loaded surprisingly fast for me as I'm on a mobile hotspot in the back of a car.
I don't mind that since it helps with legibility which I find some fonts with a hand drawn aspect to them have.
Personally I can understand why these instructions were added. Back in the GPT-5 days I tried using that model for a uv/Python project but it consistently ran the wrong commands or used pip despite my instructions within AGENTS.md . This was because whatever uv features/behavior I was using was added after that model’s cut off date. It got so bad that I switched to Claude which had a sooner knowledge cut-off.
That said, in the case that the author brought up here I agree that web searches shouldn’t be performed. I personally don’t like having my main agent search the web (mostly for preserving my context) so I’ve restricted the web search tool to a dedicated web search subagent.
I deliver packages for Amazon as an independent contractor (via Amazon Flex). While there are plenty of issues I have with it, I have an overall positive sentiment. For those who don’t want to work full time hours (you can schedule yourself in 1-5 hour blocks), immigrants, or are just in a bad spot it’s not a bad option. I’ve worked for food delivery apps as well and I think it’s a better gig compared to those other ones.
While I don’t have a positive opinion on the current attempts to use AI within education, I do question if a complete moratorium is the best way to go about it right now. Despite whatever the mayor says, students will use AI with or without express permission. Acting as if this isn’t the case might be detrimental towards educators trying to deal with it.
For a docker image of mine I was bundling the full version of LibreOffice as well but I managed to get some space savings by bundling just the no-gui version.
For my tutoring job one of the things I teach is Scratch but I do so very rarely (most of my lessons are for Python). So far, I’ve had two Scratch students that have stuck out to me:
- Student A started with Scratch, but within 2-3 lessons I convinced his mother to switch him over to Python. He wasn’t my best student, but he was very open to trying things and had a fun time coding. Plus it was really great to see him go from zero to competent within a short period of time. Personally I think it’s 50/50 that he continues coding on his own, but I hope the skills I taught him (not the exact syntax) will stick with in some form or another
- Student J is far more interesting to me as he’s not interested in making games or coding. Rather, he prefers making animations and really likes the Scratch interface. While his animations aren’t the highest quality stuff I’ve come across, I really admire his attitude of making one animation per lesson and trying all kinds of stuff vs sticking to just one thing.
Personally I think scratch is a decent start for teaching kids to code, but I wouldn’t recommend it for that purpose. If you want to teach your kids to code, I think it’s best to start with a “real” language. That said, I think it’s a very good introduction for animation and graphical projects without all the complexity of a game engine.
I already knew what Warp is (I switched to Ghostty and haven't looked back), but I find it odd that the "The quick pitch" card at the top of this article makes no mention of what the company actually does. Who cares more about their founder/growth/age over that?
I'm in the middle of a Forgejo migration myself for similar reasons. What finally pushed me over the edge was a hour long Actions outage that prevented me from pushing a hot fix for a bug to my webapp. (I relied on GH Actions to build and push an ARM Docker image.) For work that a business depends on, I can't recommend GitHub Actions. It's not just the outages that personally annoyed me, but the fact that I'm paying for it as well. So far I'm loving Forgejo and have no regrets!
> In a listening session with instructors, we learned that some were considering using AI agents as research assistants instead of hiring undergraduates as UROPs.
If researchers at a well funded institution like MIT are seriously considering replacing hiring undergrads with LLMs, I can just imagine how researchers at schools with less funding are open to it. I never did research as part of my undergrad (something I regret, but I likely wasn’t in the headspace for it back then) but my friends who did view it as a core part of their education and deeply helpful for future opportunities. I really hope schools come up with a policy to help discourage this.
> One small but useful improvement was to give every task an explicit deadline and expose that deadline to the agent.
I’m really curious about trying this myself. Recently I’ve been handing off tasks for agents to complete on their own more and more. While their work is acceptable I’ve found them to not only take a long time to complete it, but they often add too much complexity and tests.
This exactly sums up my long term feelings. Even now I’m annoyed by all the background bloat/tasks that are running on it, and I’d prefer being able to have more control over what runs on it for battery/performance reasons. Additionally, even though I’ve had it for years at this point, I think I’d still be more comfortable if I could use i3 with it.
I actually didn’t buy it! It was a gift from a friend who really likes splurging at Micro Center. If it were my money, I probably would’ve gotten an Air.
> Thanks to the combined efforts of mildsunrise and chaos_princess, we discovered that ACE3 has pretty much the same register set as CD3217, only wrapped in a SPMI interface instead of addressed over I2C. Both the SPMI interface and ACE3 itself are now working in Asahi Linux, bringing USB 3.0 and Thunderbolt support to all M3 series devices.
When I got my M3 Pro MBP, I got it with the intention of eventually installing Linux on it. In hindsight I seriously underestimated the amount of effort needed for even partial Linux compatibility, which makes me all the more grateful for the work Asahi contributors have put in! I'll still be keeping macOS installed for iOS dev work(which I plan on doing soonish), but other than that all I really need is a web browser and Ghostty with good battery life.
As mentioned in another comment, I don't think I'm allowed to distribute my modified EPUB as per the repo's license (nor do I really know the best way to do so, I don't use cloud storage). That said, I have written an Issue suggesting making an Action to build EPUBs and place them in the repo's releases:
https://github.com/BruceEckel/ThinkingInPython/issues/12If the people here comment on it, the author might be inclined to add this.
> ND (NoDerivatives). If you remix, transform, or build upon the material, you may not distribute the modified material.
Unfortunately since I modified the cover image (I ended up resizing it) I don't think I'd be allowed to distribute my EPUB file.
While the web version of this book looks fine, I only read books on my Kindle (with KOReader). Thankfully all I had to do was clone the source repo (
https://github.com/BruceEckel/ThinkingInPython) and run `make epub` to get a nicely formatted file! It is a bit on the larger side at 7.4MB, but beggars can't be choosers... (On second thought, I'm gonna submit a PR to shrink it as it's mostly from the cover image being 6MB!)
Likely because they had the capacity to spare. Prior to Grok 4.5, I doubt there was much demand for their models.