jzebedee

I just watched him present it at Cloudflare Connect. He's quite serious.

It was a bit sad. Old man talks about existential risks of AI, gets scared, leans hard into "we'll use AI to save ourselves" as a gambit for hope.

Relevant change:

   Security bug fixes

    PR: Critical: fix: prevent template expansion from interfering with git repo initialization. When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized.

I'm always curious where these moments of serendipity get their start. How'd you come to read Omar Khayyám's 11th-century poetry?

> Then that crazy bastard started taking photos of people's menus.

I don't get the reference. Is this a startup origin story?

The whole article is satire, parodying the overwrought ad copy designed to sell a simple appliance (electric kettle) to different marketing segments.

I think you can realize how ludicrous it is to invoke 80 year old copyrights for a product whose main use case is coding. How much code from 1946 was it lawfully ingesting?

No, of course not. They have zero domestic police authority for US citizens.

I was interested in the approach as a way to reduce DOM bloat, but it's clearly Claude's writing and visualizations.

Which is a competitive success story. It's much more profitable to avoid competition with abusive dynamic pricing and punish users for price-shopping.

It's a good reminder, because in the auth landscape I wish I had just picked up Keycloak and stuck with it. Commercial auth is a bad value proposition and not the kind of infrastructure where you want to have acquisition churn happening often.

The self-hosted space is another headache. I wasted so much time trying to make smaller self-hosted auth solutions work, since Keycloak has a reputation for being heavyweight.

I looked into the Ory stack extensively trying to actually use it as advertised for self-hosted / open-source auth. It's aggressively gimped and its SSO features are emphatically _not_ open-source and are gated behind licensing, with no way to find out until you're actually running it.

It's also just unfinished. Their "stack" is a lot of cobbled-together Go mixed with incompletely rebranded acquisitions like SAML Jackson (now "Polis"), which they managed to gut so completely it went from a best-in-class OSS library to unusable.

C# is strongly-typed, not stringly-typed. The point of the union is to list possible outcomes as defined through their respective types.

The idiomatic way to do this would be to parse, don't validate [1] each string into a relevant type with a record or record struct. If you just wanted to return two results of the same type, you'd wrap them in a named tuple or a record that represented the actual meaning.

[1] https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...

Previously covered by Ken Klippenstein:

[1] Pre-Teen Terrorists: FBI’s New Target: https://www.kenklippenstein.com/p/pre-teen-terrorists-fbis-n...

[2] FBI Echoes QAnon Pedophile Conspiracy: https://www.kenklippenstein.com/p/fbi-pushes-qanon-pedophile...

[3] What are "Nihilistic Violent Extremists"?: https://www.kenklippenstein.com/p/what-are-nihilist-violent-...

Project description:

  dav2d is the fastest AV2 decoder on all platforms :)
  Targeted to be small, portable and very fast.

If you're out of the loop like me:

  AV2 is the next-generation video coding specification from the Alliance for Open Media (AOMedia). Building on the foundation of AV1, AV2 is engineered to provide superior compression efficiency, enabling high-quality video delivery at significantly lower bitrates. It is optimized for the evolving demands of streaming, broadcasting, and real-time video conferencing. 

- from https://av2.aomedia.org/

Mins here being short for minutes, not minis.

This is highly location dependent with how unequal the US transit infrastructure is. It'd help to add your city for anecdotes to mean much.

If it surprises you, then you haven't paid attention to the blatantly unconstitutional actions of DHS in this administration. The purpose is terror and filling deportation quotas, not enforcing immigration law.

It's covered in the article. The full SQLite test suite isn't open source, so you (the third party) don't have the same confidence in your modifications as the SQLite team does.

> Right now french people are obsessed with ecology and egalitarianism. Those who don't are not well seen in society, or left the country already.

While we're barreling toward climate catastrophe? That's not the criticism you think it is.

That's amazing. I just assumed the ad lists were volunteer maintained like a wiki. I'll be sure to use Easylist now that I know they're also advocating for users while punishing bad advertisers.

Interesting. I've used Pulumi but this is the first I've heard of Kusion.

From a quick look, it still requires all of the resource specification to be present in the AppConfiguration, and it's written in their own DSL called KCL. Is there more to the use case that I'm missing?

It seems like if I'm already specifying the details of the entire workload, I'd either use Terraform, where I probably already know the DSL, or Pulumi, where I could skip the DSLs entirely.

"Mostly" is doing some heavy lifting there. Even if you don't see a problem with reams of copyleft code being ingested, you're not seeing the connection? Trusting the companies that happily pirated as many books as they could pull from Anna's Archive and as much art as they could slurp from DeviantArt, pixiv, and imageboards? The GP had the insight that this doesn't get called out when it's hidden, but that's the whole point. Laundering of other people's work at such a scale that it feels inevitable or impossible to stop is the tacit goal of the AI industry. We don't need to trip over ourselves glorifying the 'business model' of rampant illegality in the name of monopoly before regulations can catch up.

> As far as I can tell, Windows 11 doesn't even have a toolkit with platform UI elements.

They do, it's called WinUI 3. It's barely used for all of the aforementioned.

Actually, that doesn't clear it up for me at all. The age of useless invasive advertising is over because, why?

It's an article that unintentionally reinforces the position it criticizes. Yes, knowledge is worth your time. But the author continuously conflates it with academia, before listing many, many reasons why that model is failing.