asddubs

I got a lot of these as far as my logs go back (which is the 17th also). I don't really think it means anything, just scanning for other vulns, as happens all the time. My server did not get pwned.

There wasn't any info on the exploits beyond hearsay and the claim that they're very serious, so the risk assessment, sober or not, boils down to "do I trust the PHP people when they claim this is very serious"

I don't think this is right, I got requests like that from the 17th already (and that's just as far as my logs go back). And yes, with spoofed UAs to say grokbot, claudebot, etc., but I've been getting bot traffic like that for a while. I don't think these are really agents because the same ip will switch UAs between requests.

ease is somewhat relevant initially, since it determines how quickly you have to patch before exploits start popping up. I would be extremely curious to see if anyone has been pwned by this already, especially before the public release of the patches (not that I doubt it, but I heard some people saying they saw attempts in their logs, but not really enough information to tell whether they were understanding their logs correctly. The situation just seems a bit murky and unclear to me).

Do you have any links to a working PoC that appeared before the details were released? I'm seeing a lot of conflicting info, and I'm not really sure what to think. People saying they were seeing people trying to exploit this hours ahead of the patch release on their servers, yet no one who seemingly actually got pwned by it (were people just misreading their logs?)

doesn't fix the issue

I think the reason artists wouldn't like hobbyists doing it either is just that they've been soured on it by corporations. Artists didn't reject AI in its infancy, or things like deepdream. But AI as it stands very clearly is exploitative, and what's more, it's flooded spaces formerly for human art with low quality generic garbage. Having those experiences bleeds over into your feelings about things that don't match the exact definition of the reason you're upset to begin with.

well, lepton doesn't have browser support. I'm not married to jxl specifically, I just want something in the browser with those features, and jxl fills that niche

biggest advantage for me is file size and lossless conversion of existing jpg images. In a network scenario that can meaningfully impact load times. Others will care about e.g. bit depth

I run a non source code service and I also get these, also getting hit by literally millions of residential IPs being cycled after 1 - 2 hits. Ingesting thousands of copies of near identical pages. The bots seem to be programmed in an extremely simple manner, using non-obfuscated javascript to write the href attribute seems to stop them from seeing links, where previously they would endlessly crawl generated links. Unfortunately it also means noscript users get shafted.

and in latex too, not just monospace

I don't even really expect them to save to webp necessarily, but they should at least be able to open it. No matter what tool you use, opening an image you copied from the internet has got to be a common use case.

I guess even with the physical buttons you had to just learn that triangle means play and twin towers means pause

I've seen an SD card icon used for a save icon before. I think conveniently the shape is similar enough to a floppy that you find it while scanning for it as well

two thirds of graphics software doesn't even support webp yet. it doesn't look good

i only wish updates weren't tied to OS version

the shift managers are the ones under pressure, who are front line employees, they do the same work as the regular employees plus a bit extra and earn maybe $17 an hour instead of 15.

I think you are right that it's all gambling. Kalshi seems more predatory in how it targets people. Perhaps advertising gambling in any way should be outlawed.

Like I said, I also prefer the old.reddit UI, I was more speaking about the general case that user feedback isn't always a good indicator depending on what you're trying to do (especially early in a platforms life, when you'll have much more future users than current users)

My point is that it's not an objective measure of design quality, i.e. how well does a person who hasn't used the software before use it, or how quickly do they learn it. Whether that matters more than your existing users is up to you

While I do use old.reddit and genuinely think it's better UI-wise, in the general case users tend to be resistant to any UI change because it breaks their habits and muscle memory. This is valid but applies even if the new design is easier to use/better in one way or another.

That's reductive, how many other models had a mecha hitler incident? Or a "let's talk about white genocide in south africa" incident?

There is some truth to what you say, but most model providers I would say are engaged in CYA type shaping moreso than anything, grok is actively and openly being developed to spread a white nationalist agenda. There are levels to this.

One caveat is that the pico isn't so old that micro usb wasn't a weird choice even when it came out

You can at least buy USB-C boards from other vendors since they sell the rp2040/rp2350 separately. If you want wifi it gets a little more complicated unfortunately.

It's a bad thing if you want your language to be truly portable and be able to work on anything

It's surprisingly rare that it becomes a problem, but I've definitely been bit by it before when getting array keys, expecting them to be strings and doing === comparisons.

you do develop a tolerance to spiciness

appreciate the answer!

well, at least we know they're using their own product

Why is Lua 5.1 the most popular version?