mattezell

Project Glasswing found 10,000+ vulns; maintainers asked Anthropic to slow down

cDc will always hold a special nostalgic place with me. Takes me back to middle school and high school in the 90s, well before I knew that I was going to become a programmer - sharing software on floppies and later burnt CDs... Dialing up BBSes... Learning the way of the early web via Webcrawler, Infoseek, ICQ, Usenet, Gopher and the other long forgotten protocols and services. I was obsessed with the idea of hacking... Me and my fellow nerd friends were always coming up with sneaky new ways to infect each other's and the school's PCs with Netbus or Back Orifice... Spreading the good word of J. R. "Bob" Dobbs around town by way of home printed pamphlets so that all may know of Slack. I often miss that earlier time in technology - before the masses could easily "sign on", so long as they have a tablet or smartphone...

Fortunately for me, I didn't walk away from my last gig empty handed, and so have been afforded a bit of time to figure out what's next.

As others have said, hiring really slows down in Nov and Dec. You have quarter end, the year's budget is running low, project priorities are being shifted with anticipation of the new year, etc.,. Having been on the hiring end many times over the last several years, I know that higher ups often push you to fill a position - but just as soon as you settle on a candidate during this time of year, they almost always pump the brakes on actually hiring until new year.

Knowing this, I'd initially planned no not looking for a new gig until 2023, but once folks hear your back on the market, you basically can't avoid people trying to play matchmaker for your next job (which is a good problem to have, I suppose).

Not wanting to pass up a potential opportunity, I accepted a few interview requests that came about from my personal network in Nov. After going through 2-3 rounds of ultimately fruitless interviews with 3 different companies since mid-Nov, I've decided to just wait and enjoy the downtime. Each company I interviewed with essentially signaled "you're perfect for our needs and will be moving quickly with you" during the interview process, then would go radio silent - only to have them follow up a couple weeks later with "some of our internal needs have changed with the end of year approaching, but we'll be in touch".

So I figured for my sanity and so that I could enjoy a little bit of my funemployment, that I'd just be upfront with them and set some boundaries. Now, I've basically just been communicating "I appreciate your interest, but this is a bad time of year for bringing on new hires when considering year's end, so let's plan on touching base in January". We will see if this works out in my benefit or not - but if they can't respect that, and aren't capable of acknowledging the reality of things, I'd probably not want to work with them anyways.

Yup! Knowing this, I'd intended to put off seeking for a new gig, but once recruiters know you're on the market in any capacity, they start beating down the door - I assume to stay busy, meet their quotas/goals, and to build up a list of potentials for when hiring actually picks back up.

After going through 2-3 rounds of interviews with 3 different companies since mid-Nov, all of which signaled "we love you and will be moving quickly with you" during the interview process, only to have them finally follow up with "some of our internal needs have changed with the end of year approaching, but we'll be in touch", I figured for my sanity and so that I could enjoy a little bit of my funemployment, that I'd just be upfront with them and set some boundaries.

Now, I've basically just been communicating "I appreciate your interest, but this is a bad time of year for bringing on new hires when considering year's end, so let's plan on touching base in January". We will see if this works out in my benefit or not - but it quickly became clear that we were all just wasting each others time going through multiple rounds of calls and exercises during the end of Nov and Dec.

Got ya... As someone who's worked in hybrid since ~2014, I completely understand where you're coming from - we've come a long way. Hybrid is an interesting dev space currently - so much tooling (Ionic's Creator, View, Deploy products, for example), flexibility and near-native experience in most applications. Anywhos. Thanks again!

Thanks for the writeup, @EO-IO. As other have said, it's a 'skeezy model', but as you've said, you know this and were sharing for the lessons learned more than to promote this model - which I can certainly appreciate. All in all, I found it to be a pretty good read - and a peak into a world of generating revenue that I may have not otherwise been as aware of.

I do have a question. As I read, it does seem that you're driving the point of 'native app' pretty heavily without substantiating the emphasis; as if it's a large feature/benefit/sales-point. So, "Why native?" As primarily a hybrid developer currently (Angular 4 + Cordova / some Ionic), there have been leaps and bounds made in the arena of hybrid dev - and arguably the entry point for hybrid dev is much lower than it is for native. Of course you could still have created the same business with either stack, but since the article seems to be promoting 'native', I was hoping you could share some insight into what made native superior to hybrid here?

Thanks!

Perhaps I'm just lazy or missing something... While I don't often use it directly, I do find that adding a ref to it makes my life easier when I'm working in AngularJS.

"From that fateful day when stinking bits of slime first crawled from the sea and shouted to the cold stars, "I am man.", our greatest dread has always been the knowledge of our mortality. But tonight, we shall hurl the gauntlet of science into the frightful face of death itself. Tonight, we shall ascend into the heavens. We shall mock the earthquake. We shall command the thunders, and penetrate into the very womb of impervious nature herself." -Dr. Frederick Frankenstein, Young Frankenstein.

Does anyone ever actually experience greater emulator performance under Windows? Each time an update is pushed, I am excited to always see "XX faster emulator" listed as an improvement - but never do I see a notable improvement... So far, the only usable "emulator" that I've found is actually virtualization using Xamarin's Android Player...

Relative 'new comers' to the block, the Ionic Framework has an amazing hands on team behind it and the community as a whole is fantastic. http://ionicframework.com

"...and for being cheap."

Admittedly, I am ignorant to many of the TLDs available today... But having primarily dealt with .com and .net TDLs previously (and their <$20USD price tag), is there something else at play when considering the cost/value ratio of an .io domain? Something that would make sense to refer to it as 'being cheap', despite it's costing 100%+ more than a 'traditional' TLD?

I get that 'io' is two letters rather than three and so it's "cool"... And that an io domain has potential for "domain hacks" (I assume they are talking about a neat looking URL, where the 'io' has significance in the brand and URL)... But is 'cheap' accurate?

Just curious - honest question... When I read 'cheap' as one of the primary bullet points (of the few cited bullet points) for the io TLD, I thought "There must be a lot that I don't know about io TLDs - let's ask".

Thanks!

Agreed. This is picking up the shares on Facebook, that's for sure. I just don't belive the tech is here - yet. I don't think it's far off, but the biggest names in tech (largest R&D budgets on the planet) can't give me these features in a 3x5x.25 inch package that will last even a 24hr stint (ex:Samsung Galaxy S5)... so with that in mind (call my cynical),I just have a hard time believing the guys with a pulled indiegigo and a WordPress site asking for (free as in beer)donations are going to be the ones who bring the game changer to us. Here's to hoping I have to eat my hat.

I don't know if I was just lucky or what, but I've always had far worse experiences with Seagates than WDs.

I got into building PCs on the side in about '96 or so and did break/fix support through college - it always seemed (I didn't keep records - I can't quantify) that Seagates accounted for more than their share of the "it won't start and is making a clicking noise" cases. So much so, that I have recommended against Seagates and towards WDs for as long as I can remember (15+yrs).

I've only had a small amount of direct experience with Hitachi drives, so I can't speak to them too much.. Though I do have a Hitachi in an enclosure that's been kicking around since about 2004, so I guess that says something...

tree fiddy

Anecdotal 'me too' story:

I am 6'2" and on my last flight I had a not so friendly interaction with an older 'gentleman' in front of me - no tray or laptop involved.

This 'gentleman' quickly/forcefully reclined his seat, driving the supporting rail into my kneecap...

I immediately made an instinctive "Owww" sound/cry and moved my legs due to the pain of the impact - which could have been the end of it... Instead, he immediately turned around in an aggressive manner and demand I quit 'kicking' his seat.

When I retorted that I hadn't kicked his seat and that I merely was attempting to prevent my legs from being further banged against, he became irate, yelling to the attendant 1/2 a cabin away that I was kicking his seat - all the while, continuing to recline his seat in a bouncing manner (because we're in kindergarten?).

Fortunately, an attendant behind us witnessed the interaction from the start and intervened - offering the 'gentleman' flying solo a new seat with no one behind him or to not recline. After relocating the guy to his new seat, she came back to check on me and apologized, indicating that the seats were too cramped already (and indicating that the guy clearly had a bit of an attitude from the start of our interaction).

I agree with the popular sentiment expressed here and in the comments of the article - "just treat each other respectfully and you'll likely come to an amicable resolution"... This said, there are always those out there who really aren't concerned with an amicable and friendly resolution - those who are more concerned with just doing what they want without challenge or compromise, regardless of the impact to those around them.

In the end, this is a problem with the airlines and their ever obsessive pursuit of the bottom line - more sardines in the can... As someone who started flying as much as I could as a young man, I can say that in recent years the airlines have reduced my air travel to only required business travel where no suitable alternatives exist. Factor in the TSA with the hassle of dealing with the above and I'd rather just drive - even if it takes me 3 times as long to get to my destination.

I don't understand your argument. If I place my laptop on the tray, aren't I using the tray in a predictable way in line with its intended purpose (i.e. to hold things)? Does your assertion that the 'reclining chair being reclined is its intended use' not apply to 'the tray holding things is its intended use'?

I am guessing they are under a load or something currently?

I can't get this to work (Chrome and Firefox)... I get a lot of 404s, 'Image corrupt or truncated', and TypeError: document.GetElementById(...) is null errors in console in both browsers (wording differs, of course)...

I will check back later on as I LOVE the NOAA and use them as my goto for most things weather and environmentally related! I'd really love to play with this going forward!

If I am not mistaken, what jimmaswell is describing is the same mod that made my Gameboy Advance my most favorite of systems... Just google 'ds homebrew' and you will discover a wealth of information... For gbas and ds(es???), you could/can purchase a flash cart. There is a surprising amount of homebrew and software hacks available out there that this flashable cart brings to the table - not the least of which is the ability to load up emulators for everything 'equal to or less than' the gba/ds(in general regards to cpu/ram requirements) to play 'backups' of the games (which were also flashed onto the cart along side of the emulators). My former GBA (paired with 2 flash carts) was likely the third most used gaming system of my life to date(2600, NES, GBA). All the games you could want (or fit on 512MB (A LOT when the games are a few hundred k (nes) to a few mb (gba)) - 2600, NES, GBA, GEN and SNES - with few/no issues.

All of this said, the PSP (1001?) was/is an awesome emulator... Capable of playing everything up to PSP backups, you could play all of the above, with PS1, NeoGeo/Capcom, and PSP support... Definitely a very nice gaming system with a lot of power and capability... In the end, it was the GBAs battery life, wonderfully thought out screen and compact size that always made me come back to the gba. The PSP got a lot of play, but being able to stomp turtles and collect rubies while sitting on a beach without shade just made the gba the general purpose go-to for this casual gamer (as the PSP could serve as little more than a mirror and hand warmer in this setting).

While generally frowned on by gaming manufacturers for obvious and founded piracy concerns, there are some awesome hybrid systems that can be made out of existing on-market systems. While I am sure that there are many whose ultimate goal is piracy, there are a lot of people who enjoy modded systems for their flexibility and enhanced capabilities.

Happy to hear about the new opening, DO. Happy customer here - thanks for providing what has proven to be solid service and support for me (far better than my previous 'budget provider').

I am seeing a lot of complaints about DO that has nothing to do with this announcement... Traceroutes and ping times from the region - legit. Debate on the claim of 'opening a data center' (vs renting rack space) - legit (at least on topic). Complaining about lack of DO features - off topic and noise...

Let's be honest about what DigitalOcean is (and they may not like my categorization - I don't know, I'm just a customer) - they are a low price / budget hosting provider... I am not saying that people's complaints about lack of features or problems aren't legitimate complaints, but that they don't particularly belong here or add value to this discussion. DO has been on here a lot - whining about wants and complaints on every post is lame...

You want to voice your complaints? Write a post about why DO doesn't live up to your dream of all that a $5/mo VPS solution should live up to on your little blog and see if it makes it to the front page - then you can rightfully whine about lack of IPv6 all you want and know that you're not just thread dumping on a young small company's enthusiastic announcement about expanding their services. Or... Here's a thought for all of you super awesome critics who clearly know what's up way more than DO does - go make something superior and sell it for $4.50/mo!!!

"“So my best guess for this rock … is that it’s something that was nearby,” said Squyres. “I must stress that I’m guessing now, but I think it happened when the rover did a turn in place a meter or two from where this rock now lies.”

Opportunity’s front right steering actuator has stopped working, so Squyres identified that as the possible culprit behind the whole mystery."

Reading a lot of speculation, but this seems pretty plausible - without the need for anything crazy like aliens, subterranean oozing or a rock falling from space and just so happening to land in front of the rover... But, Hey! Perhaps it is martian-cow dung afterall!

Thanks for the link. Cloning appears to currently not be a problem.. Of course, for true fans just wanting a copy, hosting the cloned repo as a static site in Apache or IIS is super easy and a fully playable setup can be accomplished in just a few minutes...

Yeah, I am pretty sure that you're correct.. This was a new input to me (<input type=color />) - learn something new everyday.

This seems like a really neat idea.. One of the things that I loved about my Droid X and still miss terribly is a physical camera button - it's just so much easier to take my duckface selfies using a physical button!

I like the idea that this is so configurable also - I can think of many applications for something like this..

It's interesting that they have a hardware component, though this really seems to be a kickstarter for a button dedicated 'smart actions' application (in that it works without the button using mute button clicks on headsets) - not that this decreases my interest in it in the least.

Excited to see where this goes...

I think that you've misunderstood me.

Generally, the "I'm a patriot" line is utilized by the left/liberal - who is usually the more rights, humanitarian, privacy, social healthcare minded of our two parties.. It's used to preemptively dismantle a favored attack employed by "the right" - who are our conservatives, which favor fewer social services, lower taxes, security being valued over liberty/freedoms (generally, they supported the Patriot Act and similar such things)...

Consider this contrived example, as it clearly isn't evident from my previous anecdote...

Liberal: "It's our duty to ensure we don't do damage to human rights for a little temporary security via overreaching surveillance programs..."

Conservative: "You're a freaking liberal nutjob who would bring harm to America! YOU LOSE!"

Then...

Liberal: "I am a patriot and love 'Merica, but I feel that it's our duty to ensure we don't do damage to human rights for a little temporary security via overreaching surveillance programs..."

Conservative: "Ah. Well.. 'A patriot', you say? I can't argue with that.. [more 'civil' discussion may ensue]"

This has just been my experience.. The general 'caricatures' of our two main political mindsets could be summarized as: Conservative - Religion over Education, Christian Government, Guns, Moral Laws, Military, Exclusionary ("If you don't like it, you can get the hell out of MY country!") Liberal - Education over Religion, Separation of Church and state, More Restrictive Gun Laws, Support of Social Services (healthcare), Higher Taxes, Diplomacy over Military Aggression, Inclusionary ("While I may not see eye to eye with you, there is room here for us all... That's what makes America great - we don't have to be of the same faith or belief, yet we can both call this home...")

Again, these are the far ends of the spectrum.. These are stereotypes.. These are broad generalizations made for the purpose of demonstration - I don't mean to offend anyone who identifies with either side.

One final bit, using your rebuttal:

Person 1: "No. Really, I have absolutely no loyalty to America or any other country for that matter. I'm loyal to humanity, and you should be too."

Person 2: [Whips out knife and waves at you aggressively] "You're a communist puppy hating hippy! You lose! Get out of my country!"

This is just my opinion - purely conjecture based on my own experiences.. As someone who has done the very thing that you are questioning, I know that the following have somewhat been a motivation for me...

It is a very common tactic in interpersonal political debate/discussion in the U.S. for one side to discredit another's opinion by quickly painting their sentiments as "anti-American" or "anti-patriotic" - I've generally seen this tactic put into play by our right-leaning conservatives.

I think that the 'disclaimer' of stating that you are in fact a patriot is often merely an attempt to derail the oft-used "SEE - YOU'RE A FREAKING LIBERAL COMMUNIST WHO HATES PUPPIES, KITTENS AND AMERICA! YOUR OPINIONS ARE NOW INVALID!"

As sad as it is to say, political debates in the U.S. are rarely about what's ultimately right or wrong... It's a contest and it's about winning... Not for everyone, mind you - I'd far rather lose a debate than defend an incorrect point - but for a lot of people, it's about yelling louder and forcing the other to concede.

Case in point.. Years ago, I worked in a field that exposed me to A LOT of military - active and retired... In a "friendly" discussion regarding socialized healthcare with a person I admired and respected, I stated that I was 'ok with paying more taxes if it helped fix our healthcare system'. He quickly became heated, immediately turned aggressive - yelling something to the effect of "YOU WOULD STEAL MY MONEY AND GIVE IT TO A [racial derogatory term omitted?!"... He then proceeded to pull his knife off his belt and wave it towards me in a threatening manner while continuing to rant about me being a Nazi, before stabbing the knife into a counter and walking off in a huff as he continued to cuss me out...

We are an interesting and odd mix here in the states...

Great read. I could see incorporating this into my stack... In any case, I was happy to learn about each of the tools/projects mentioned within - especially stoked about Docker!

Yea.. Can't get this to work..

Q: Given 2 strings, a and b, return a string of the form short+long+short, with the shorter string on the outside and the longer string on the inside. The strings will not be the same length, but they may be empty (length0).

My Answer:

  function solution(a, b){
    if(typeof(undefined) == typeof(a))
      a = "";
    if(typeof(undefined) == typeof(b))
      b = "";

    if(a.length > b.length)
      return b + a + b;
    else
      return a + b + a;
  }

Result: "Unknown Error"

Of course my solution doesn't account for a.length == b.length, but the question is somewhat nonsensical in that it states '...strings will not be the same length, but they may be empty...' (2 empty strings would be the same length)...

I agree fully with this sentiment - this is the very concept that was intended to be encapsulated by the phase "organic link building"...

It's valid and valuable to have these sorts of links and they are very relevant when factoring SEO weight.

If a developer writes a web application for a client, links to the client's application from his portfolio page and then the client, so happy with his product, links back to the developer.. Well, this is exactly how the world should operate... and a large part of how SEO should be factored, imho. This didn't just magically happen - the developer and the client both had a role in the creation of these links, which will factor into their ranking... And while people 'had their hand in this creation' and despite the fact that this 'benefits' both parties, I consider this 'organic link building'...

But then again, it would appear that I am clearly spammer as has been demonstrated by the indisputable evidence presented in this thread and so am likely not to be trusted...