Aissen
Joined 16 years ago
Karma
16,068
Submissions
2,064
Member since
Jan 4
Recent submissions
Comment · 1 day ago
This saddens me since MPTCP is quite useful and not the cause of the bug, just a way to ease exploitation (probably simpler heap massaging? Way over my head). Anyway, upgrade, but don't block MPTCP; no exploit is available, and it's just as likely someone finds another path before Anthropic releases theirs.
Comment · 10 days ago
Note: this article is from last month predates the answer from Disney: https://thedesk.net/2026/09/sources-disney-wont-run-ads-in-a...
> two sources at Disney familiar with the change said the updated terms was intended to give Disney greater leeway to incorporate promotional spots for its other movies, TV shows and live events before and after content streams on Disney Plus, not traditional commercial spots.
> The use of the word “advertising” was intended to help its terms of service remain consistent across regions where the streaming platform is available, including countries where promotional spots for its own shows and other content might be legally considered an advertisement, even if the spots are not promoting third-party products or services.
> To that end, Disney’s plan is similar to what other streamers, including Paramount Plus, do with their platforms now. Paramount Plus has long streamed promotional spots for its own shows, movies and live events before content on its ad-free tier.
Now I'll let you decide if you trust more what the PR person says or what is written in T&C.
Comment · 10 days ago
> especially due to persistent attempts to use regexes to validate untrusted input
This is not the case here, it's an untrusted regex which can be the issue.
Comment · 13 days ago
No, that's open source and it will be an accelerator for everyone, instead of a small advantage kept by a few. Even the frontier labs benefit. I'd argue (like I did when the initial DeepSeek was released), that the AI market *needs* to those inference breakthrough.
Comment · 13 days ago
There are links to pretty readable changesets, so you can go read and understand exactly what's happening instead of speculating.
Comment · 13 days ago
It's basically an additional policy on top your OS's policy, while waiting for the stores to update, it protects the users.
Comment · 14 days ago
Comment · 14 days ago
Can we talk about how this particular CNA is abusing its power here ?
Comment · 21 days ago
And it was the same refrigeration vendor.
Comment · 21 days ago
> What’s the secret behind that Mario ‘feel’?
> I think that is fine-tuning. Many, many, many hours and days spent actually sitting down and playing the game.
Turns out quality takes time. Who would have thought. Very few games reach this level of fine-tuning, because it takes dedication (and budget).
Funnily, it's almost conflicting with this answer:
> Was much changed during development?
> Apart from the number of polygons use, the characters were first-off – once they were designed, they went straight into the game. There wasn’t really a lot of changing, artists just kept supplying stuff that just got put in the game, conveyor-belt style. That was more or less because of a very, very tight deadline – it had to be out right when the N64 came out.
So it's more nuanced. You fine-tune the fundamentals, but not necessarily everything.
Comment · 28 days ago
No, you can do bootstrapping and save binaries for reuse with hash verification. Android did that for its Rust toolchain: https://cs.android.com/android/platform/superproject/main/+/...
Bootstrapping at every build does not save you from the threat you think it does.
Comment · 28 days ago
I expected this to be a multi-months rewrite, not 3 weeks. I almost forgot we live in the agents era now.
Edit: this seems to have been cooking for a while when the first commit dropped: https://github.com/rui314/mold/commit/f41bfcd5c72ca30cce6498...
Comment · 28 days ago
> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness. I'm surprised that (particularly non-US) regulators are not investigating them yet.
You mean like the Skyhook vs Google 2014 lawsuit? (look it up) Settled before it could go any further.
contact at my-hn-username dot org