sbx320
Critical: fix: prevent template expansion from interfering with git repo initialization. When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized.Quick Summary from the Heise article: Axel Springer tried to claim that the website itself is a copyrighted work and therefore an adblocker would not be allowed to modify it. However the court decided:
1) Removing elements (ads) from being displayed does not modify the originally transferred HTML, but only the data structures as generated by the browser, which is allowed to be modified by the user. Otherwise using a browser without images would also be in breach of copyright.
2) The website in itself is not a copyrighted work, as there's no original creative effort involved in generating the HTML.
[0] (in German) https://www.heise.de/news/Landgericht-Hamburg-Adblocker-vers...
This case however brings two new (as far as I'm aware) questions to the table:
- Whether the permanent license revocation clause holds up
- Whether the neural networks is considered a part of the covered work (and must therefore be provided in "source" form, rather than just a trained network)
The second one is especially interesting, since the court will likely have to go into how far the GPLs coverage extends into other parts of a covered work.
Your account is unable to access _any_ private repository after being flagged as being from a sanctioned country. That's regardless of where you're actually accessing your account from.
While you could create a new account, you still couldn't grant that new account access (since you can no longer access private repositories from your primary account). Also a new account still runs the risk of getting flagged if you accidentally access the account without a VPN enabled just once.
As you mentioned, the quality of those rips is a bit worse than a blu-ray rip, but if the blu-ray isn't available there's not much you can do. People will just enjoy a slightly worse quality version (just like they did with shaky cam rips).
The spam I've received on my catchall is either based on previously breached sites (which I once signed up to) or to very common mailbox names (e.g. postmaster@, info@). I just add those to an auto-reject postfix filter based on the intended recipient, which keeps my inbox very clean.
Had. The VirtualLink standard (for which the ports were supposed to be used), was never wildly adopted and is pretty much dead. AMD never introduced Type C ports and Nvidia removed them from their newer graphics cards as well.
Sadly this also means there's practically no direct support for the DisplayPort alternate mode on Desktops anymore, assuming you want a dedicated GPU.
I wonder how the ergonomics on the production Pinecil will end up. I never ended up liking the TS100s feel for soldering, which made the TS80 my go-to iron. The wide tip availability is great, but I'd rather take a limited tip selection and better ergonomics.
Manufacturers have slowly started realizing this circumstance and are obviously able to exploit it by making products cheaper to manufacture down the line.
There have been a few court rulings in Germany that go into that direction. Facebook for example was disallowed to delete some posts/sites which violated Facebooks "standards", but were permissible under the freedom of speech clause of the German basic law. However thus far courts haven't really formed a consistent opinion and also ruled the opposite. As Facebook didn't appeal the courts rulings, it hasn't gone to the federal or constitutional court level yet.
Electricity also costs a lot in Germany (for consumers at least), which offsets the savings on gas. Currently I'm paying about 30ct/kWh (Euro, so about 33.5ct/kWh in $) plus a 15€ monthly base fee. Gas is at 1.45€/l (or ~$6.14 per Gallon) right now. Last time I ran the numbers I ended up with a slightly higher cost per km with an EV compared to a normal car - before even factoring in the purchase price.
If you want to charge at a public charging prices sometimes go up 55ct/kwH, due to them having rather significant fixed costs for measuring power (each station needs to have a certified meter). This gets even more significant if you consider the fact that most people in urban environments won't have a house with a garage, which forces them to use public chargers.
> For security reasons and in accordance with the legal requirements of the German National Research and Education Network (DFN), there is no alternative to this procedure.
I'd assume the DFN requires all users to be personally identifiable for liability reasons. Although requiring all users to show up in person is still a bit odd. I just received a letter with a one time password by regular old mail back when I entered university.
[1] https://www.uni-giessen.de - English version of the second article is available by scrolling down a bit.
- Serving different content on IPv4 vs. IPv6, e.g. just showing Apache2's "It Works" page
- Serving some subresources behind a reverse proxy on IPv4 only (and 404ing on IPv6)
- Forgetting IPv6 AAAA Records after a server change
Trying to debug this as a user is annoying and even if I identified the issue before leaving the site, working with sites to get it fixed has been an issue. I quickly ran into the "Works for me" issue, when the administrators (and a majority of their users) ran on IPv4 only networks.
Ultimately I just disabled IPv6 on all my systems because it ends being more trouble than it's worth.
[1] https://perens.com/2017/06/28/warning-grsecurity-potential-c...
The big question is whether punishing users by no longer providing any updates after asking for sources is a GPL violation in itself.
From the GPL FAQ [1]:
> If I distribute GPLed software for a fee, am I required to also make it available to the public without a charge?
> No. However, if someone pays your fee and gets a copy, the GPL gives them the freedom to release it to the public, with or without a fee. For example, someone could pay your fee, and then put her copy on a web site for the general public.
[1] https://www.gnu.org/licenses/gpl-faq.en.html#DoesTheGPLRequi...
As you'd no longer receive the new binaries, you'd also no longer be entitled to the new sources per the GPL. This would leave Tesla with a large deterrent against people asking for sources.
Were they? From the data I found for a very similar law in Germany the opposite seems to be true.
Axel Springer AG (biggest publisher, also primary lobbyist for the law) gave Google a free license two weeks after Google removed the snippets for all their sites. They noted a 40% drop in clicks coming from Google and an 80% drop from Google News. With estimates from statistics collectors putting users coming from Google anywhere between 15% and 35% (depending on the individual site) that's a massive reduction in users and ad revenue.
The end result is that the law meant to work against Google actually benefited them. News sites cannot afford to not give Google a free license, but smaller search engines face a big issue.
I highly expect it to pan out the same way again.
This is more common the other way around, where a government wants a specific company to do a job, but is required to issue a public call for bids. In that case the requirements are just written exactly for that specific company.
If you have no conflicts, it makes the history much cleaner without losing relevant history.
You actually can (partially) do that by simply disabling the Windows Update service. The only downside I've experienced thus far is that it also breaks the Windows Store. Apart from that you obviously need to reenable the service when you want to apply the updates. It's not quite ideal since you cannot apply individual (e.g. security) updates, but it works very well to avoid the random updates & included reboots.
The only way to get a EULA to work in Germany would be to include it into the sale contract between the consumer and the vendor at the point of sale.