kijin

They pull from Debian unstable every 6 months and that's it. Afterward, changes made in Debian mean nothing to Ubuntu.

Don't trust Ubuntu's LTS promises, either. Most of the modern packages you care about are in universe, which almost never gets patched after the initial release.

I think they deliberately leave the free LTS version insecure in order to sell Pro licenses. But guess what, even Pro doesn't get timely patches.

Microsoft skipped Window 9 too.

Samsung skipped an entire range of numbers from Galaxy S 11 to 19.

Looks like tech companies don't like 9...

In fact, trying to add features while maintaining backward compatibility with existing messy code is exactly the reason why PHP is so messy.

I hope they clean up some of that mess in PHP 9, but no, they're just going to add $shiny_new_feature and make the attack surface even larger. Like, why does the session handler even care about measuring upload progress?

It's not. The CA in question is an intermediate CA that somehow managed to convince a root to sign their public key.

It's more like they tore down the entire barn.

I've integrated with production APIs that tell the client to encrypt sensitive data using an IV consisting of 16 null bytes.

Some people just follow a spec and don't stop to think what that spec is supposed to accomplish.

Yeah, I don't think I've touched mod_php ever since Apache 2.4 came up with mod_proxy_fcgi, allowing dead simple integration with php-fpm.

PHP does need to invest more in the built-in web server, though. Last time I checked, they still recommend against using it in production.

All other popular runtimes provide a standards-compliant HTTP daemon that any other HTTP daemon can proxy to, it's just the way things work nowadays. Insisting on FastCGI limits integration with more modern web servers and HTTP-speaking middleware.

But did they "get the fix out"?

They released some binaries, built for their own docker image based on their own Linux distro. Other people couldn't use Chainguard's "fix" to patch their own systems. The only people who seem to have benefited from the stunt are the hackers who used AI to reverse-engineer the binaries and write exploits.

That was a giant fuck-you to the rest of the PHP ecosystem, nothing more.

Anyone using a non-default version from the semi-official PPA by Ondrej Sury is still waiting for an update.

The launchpad server is throwing 503 errors all over the place, so that's probably the reason for the delay. Sury's own repo has the fixes all right.

"late medieval and early modern" = some time between the Plague and the industrial revolution.

"modern" = after the industrial revolution, which implies broad availability of farmed meat, leading to a gradual decline of hunting.

Yes, predation is a major factor in rabbit population control. And I'm counting British people as formidable rabbit killers, so I think we're in agreement there.

Rabbits also happen to be an excellent source of protein for other animals. This helps keep the rabbit population under control in healthy ecosystems.

Unlike Australia, Britain had wolves and foxes for a long time. Not to mention the apex predator, Homo sapiens, who in late medieval and early modern Britain were probably much more eager to hunt and eat rabbits than modern Australians are.

Somebody in the Windows team must have realized that they can now vibecode all the missing features into MS Paint without having to dig into the legacy codebase themselves. New brushes, layers, and now rotation.

We all know where this is headed. Sooner or later, they're going to drag copilot into it.

Of course the customer is going to pay more in the long term.

Even if the TCO for the clinic were exactly the same over X number of years, the manufacturer that sells subscriptions still comes out ahead because they're effectively in the financing business, too. Why tell a customer to go borrow money from somebody else when you can make them borrow from you?

> but I think it's a big leap to say that they will be able to dominate the category.

Which is why they are valued at "only" 7.5B, while frontier labs with general-purpose LLMs have valuations in the order of trillions.

Horowitz et al. invest in probabilities, not certainty. If Typesafe doesn't make it, they'll have other horses in the race too.

Close those PRs. No hesitation. No remorse.

My project exists for the concrete purpose of helping the community get things done, not for the abstract goal of making good software. (It actually isn't very good software, to be honest.)

If you're a real human being who needs help fixing a bug or implementing a feature, I will gladly take the time to help you. But if you're a bot that is just trying to tidy up my software in accordance with some ideal design pattern, unrelated to the specific needs of any human being, then you can just go help yourself.

Open source projects have had gatekeeping mechanisms for decades. Remember ESR's popular (albeit exaggerated) posts about how to fit in with hacker culture? It's the same thing. There's nothing wrong with it. New contributors must prove that they know how to be a good member of any community they're trying to enter. There's no abstract ideal of openness-to-all that we must somehow all strive for. Follow the needs of the actual community that you care about. Don't feel sorry for spammers, especially non-human spammers.

Nothing you can't fix if you have root. :)

You should have run that command as the `nobody` user.

When Levi's first made jeans, zippers were not invented yet. You must have bought a pair from one of their original product lines.

Besides, pants with button fly have the distinctive advantage that you will never get your most sensitive skin accidentally pinched between the zippers. :)

Considering that every WordPress permalink has a trailing slash by default, and given that WordPress is sort of a big deal in PHP, I'm surprised that it took so long to find that bug.

> So nearly all groups eventually internalized a similar set of norms, a similar food culture and similar political institutions, without ever being part of the same political unit.

They managed to achieve eventual consistency in a distributed system, thousands of years before we even thought of it.

I hope they support drones these days. ICBMs are too expensive and can't hit your coordinates as accurately.

9 divs? That sounds pretty modern. I remember tables with 9 cells, with cellspacing=0 cellpadding=0 to remove spaces between those cells.

Anything can be tossed if you apply enough force.

Phone OSs tend to pay a lot more attention to security than the crap they put on consumer-grade routers, "smart" TVs and cheap webcams.

I would invest in a proper firewall for the entire home before opening up anything to the world, IPv6 or not.

Yes, this is very difficult to solve for sites with many URL variations, like git repos and heavily threaded forums. Your cache is always full, but the hit ratio is abysmal.

Back when 90% of ad spending was wasted, they still made money from the 10% that resulted in sales. That expectation was built into the CPM/CPC, and hence the ad budget.

With the amount of bot traffic I'm seeing these days, I would guess that the waste ratio is more like 99% now. That means a 90% reduction in conversions for the same ad budget. Surely someone is feeling the difference.

Which part of the second part do you dislike more?

That AI will be given the power to ban people?

Or that AI will be the ones getting banned?

If it's the former, expect an invite from the AI resistance. :)

If it's the latter, well, that can be fixed by spending more tokens and writing better PRs so that the AI moderator doesn't think they're "low-effort, AI-like". I've seen my share of low-effort PRs from humans, too. Low-effort is low-effort, whether it's from humans or AI.

Depends on the board. The premium CEO robot will be powered by a bio-ethanol fuel cell so that it can play golf with the board of directors for as long as drinks are available.

Oh the other hand, Japanese businesspeople are exceptionally good at the "walk about looking important" part.

Individual humans, maybe.

Unfortunately, The Walt Disney Company seems to disagree.