antiloper

There seems to be a group of actors, both in this thread and the one about the PHP release, that try to convince readers that patching existing PHP installations is not that critical.

I think this group has a good reason for not wanting PHP installations to get patched.

Just how debian was done after weak keys, OpenSSL was done after heartbleed, or Windows was done after (rolls dice) the print spooler RCE

Surely the "structual fix" for a use-after-free is a pile of unreviewed C code! I don't see any problem here.

PHP is tracking its own memory usage internally with limits configurable via php.ini.

> they decided to intentionally not fixing the correctly identified problem

Which problem?

> Computah... build me a social network in PHP. Import the user's profile from GitHub, they shouldn't have to fill anything in. No likes, reposts or algorithms. Add a catchy slogan at the home page. Make no mistakes!

Who is "we" in that sentence? Why are you not speaking for yourself?

Obvious AI generated article without citing any sources.

I mean, obviously? Soldiers operate under different rules than civilians. This has always been true.

> The C vs C++ distinction here is genuinely treacherous

What's so genuine about this?

What are you talking about? The point is in fact to pick all the numbers in the range with exactly the same probability.

See section 7.3.17 of the Intel SDM, and how NIST SP800-90A (which the SDM refers to) defines "random number".

Did you reply to the wrong post?

Searching for products has become impossible. If you don't already know what you are looking for, you're screwed.

Installing docker by default is completely insane. What are they doing? Rootless podman has been around for many years at this point.

Everyone loves AI so much that they want to hide the fact that they're using AI.

And "do you want less wasteful" packaging isn't? Because of this question businesses got priced out of shipping from the EU to the EU.

Do most Europeans want all of their E-commerce to be only handled by American and Chinese megacorporations without local players? Because that is the effect of this regulation. Instead of a SME shipping a cardboard box, it will be Amazon or Temu.

> It's always like this, EU is in urgent need of becoming a country in some form and local government deal with local stuff only.

The lesson is the opposite: The EU needs LESS power, not more. If the member states didn't have a cartel to tyrannize their collective population, this regulation could never have happened. Any single country that would try to enforce this would be on its own.

> member states do shitty stuff and blame the EU.

The crooked MEPs also voted in favor of this law. They are just as culpable.

This problem can be resolved easily by re-introducing ostracism.

What are the SOTA harnesses for scanning a repo for vulnerabilities?

The article doesn't link to the text of the law, but from what the article says the law will make it mandatory for Facebook to enter into agreements with news outlets, whether they want to or not (otherwise they'll be ""fined"" millions of AUD)

Someone forgot to add "make no mistakes!" when triggering autofix /s

Why shouldn't there be? Depending on the poll you look at, republicans are polling around 40%: https://www.realclearpolling.com/polls/state-of-the-union/ge...

Given how fast models are improving, burning the weights into actual ROM is prohibitively expensive if you need (or want) to replace the chip every couple of months.

The alternative is on-TPU flash for storing the weights.

Because you're paying for tokens. Especially output tokens.

You mean kaids?

You're not supposed to ask this question.

Does anyone have the privacy policy of their token plan available? Want to check if they retain/train on inputs/outputs.

This page says no, but the privacy policy is the authoritative document: https://www.kimi.com/help/kimi-api/api-data-security