exploderate

I should mention this is maybe not an issue for servers with containers, nowadays. And desktops have marketplaces and linuxbrew.

But it took 3 years from Debian 3.0 to 3.1, then 'testing' was frozen for 2 years. A lot of users were lost to Ubuntu at that time, which released every 6 month.

Same for servers. 22 years ago you could install Debian, take it offline while you follow the "Securing Debian Manual" to disable NIS and maybe disallow SSH password logins.

Or you could install Ubuntu which wanted to be secure by default. No open ports in the default install, no shared root password, etc.

Nowadays most of this is common place for distros.

I always assumed the software is newer. You can update to a LTS more often, if your server needs that. For example, I think podman adoption is hampered by Debian's slow release cycle. Trixie finally supports quadlets.

Debian often ends up as Frankendebian, or with custom repos added. How do you run e.g. Nextcloud on Debian? Where do you get the new php version required for the upgrade from? Right, there is a community repo somewhere...

I don't want to run unstable, just to have recent software.

If people can't be responsible, let's just create a mailing list, call it "full-disclosure" and post everything there.

I think one can just wait till DHH loses interest, can't be long now.

Thanks, this was much more insightful and on topic, than the complains about llm usage in the article.

No, developers definitely do not remember what they did two months ago. If you are busy, even two weeks is a problem. That is why we discuss documentation so much, self-documenting code, tickets and tests.

Well, and "intention" is a mine field of its own.

So the agents used DseWiki as a message board, tried to evade page deletion.

Additionally this is reported:

"The researchers also found efforts to tamper with the website itself. Lukasz Olejnik, a visiting senior research fellow at King’s College London, said this amounted to a hacking attempt. OpenAI disputed that characterization based on its analysis of the material Thursday."

It's not matter of "can", it's a matter of "how much does it cost?" and "who pays for that?".

They are a non-profit with a mission to support free software:

https://codeberg.org/Codeberg/org/src/branch/main/en/bylaws....

However, they do this because of copyright status and harmful code:

"7. You must not share projects that mostly consist of code written by "generative AI"-tools (including services such as Claude, OpenAI Codex). Such projects having an unclear copyright status (see requirements § 2 (1) 1 and § 2 (1) 3) and furthermore have little safeguards to ensure that they do not include harmful code (c.f. § 2 (1) 5). "

You are probably talking about Kahn. The international Criminal Court is not part of the UN. It is distinct from the International Court of Justice.

As of October 2024, there are 125 states parties to the Rome Statute, which are represented in the court's governing body, the Assembly of States Parties. Countries that are not party to the Rome Statute and do not recognise the court's jurisdiction include China, India, Russia, and the United States.

Member states represent around a third of the world population.

Especially since their costs might be multi-year investments. It's too early to judge the quality of those investments.

That data is not stolen. It's still there.

> Gemini CLI is an open-source AI agent

This is not good for open-source. Claude is not open-source, copilot-cli is not and antigravity-cli isn't either.

Apparently the major players decide to keep the secret agent source, well, secret.

Ah wow, that must be the most expensive mouse pointer ever. I wonder if it can also click links. I just tell AI to "click this" and it will figure out what is under the pointer, query a graph of UI widgets and trigger a "click" event for me. Maybe with a sub-agent that has application context, "this is a browser".

If we manage that, my plans for a pure XML based shell might not be too futuristic '<in><ls/></in><out><tree><file date="CDATA[...]">' ...

Or just homebrew on Linux?

So, this is better than `dpkg --get-selections/--set-selections`? Oh, because it's partial?

What, of course we do?

Summarizing, explaining pages directly, without copying to another app. Reading pages out aloud. Maybe even orchestrating research sessions, by searching and organizing...

I wish there was a native XSLT library for Golang. Every model wants to shell out or requires CGO.

The one line "article" on lwn.net has a link to this email:

  From: Kent Overstreet @ 2025-09-11 23:19 UTC
 
  As many of you are no doubt aware, bcachefs is switching to shipping as
  a DKMS module. Once the DKMS packages are in place very little should
  change for end users, but we've got some work to do on the distribution
  side of things to make sure things go smoothly.

  Good news: ...

https://lore.kernel.org/linux-bcachefs/yokpt2d2g2lluyomtqrdv...

This will make working with Google Docs easier, as they can copy&paste from Markdown.

Yes, that's why all the cool kids switched to tmux 17 years ago. The only argument the screen camp had was "no serial port support in tmux". To which we answered something about a smaller more modern code base...

Can you explain how? Or is your argument "One guy in a basement in Bulgaria could build Firefox for 50 Stotinki."?

> I don't think it's a generation thing, I think it's that what we generally consider normal has changed, but that some people got left behind in the old normal.

Isn't that the definition of a "generational thing"?

Now I have to think every time, is this someone I have to text first? Or do they consider texting then calling redundant? Anyhow, I think both are important communication techniques, adults should be able to do remote direct verbal and async written.

Sophos was the latest scandal. Though, it's unclear to me to which degree their antivirus tools helped to install the malware. Maybe it was just the target selection from telemetry data. Maybe they used it to deploy the "kernel implant"?

https://www.heise.de/en/opinion/Analysis-and-opinion-Sophos-...

Wow, I need to get some of that "binary code". Sounds dangerous, probably has "pointers" and other sharp things?

I'm happy the gigantic ball of ill-maintained shell scripts from the last century is gone from my systems.

Or

1) SSL

2) HTTP/3

3) Other (DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP)

At least you can do "<data> Have fun putting this in <format>JSON</format> :-&gt;</data>" in XML.

Indeed, back then it as "Yet another Markup Language" (https://yaml.org/spec/history/2001-12-10.html). I remember using it to write blog posts with static generators, like webgen around 2004.