DetroitThrow

Yes, a huge part of why I bought Macs for my company is for some of this to be automatically handled. Only now are we getting any communication and still no date on when this will stop being rolled back on updates.

Please, Apple, break the process on getting a fix out for this. I want to stop doing a morning check in with my team about certs.

Yeah this reeks of never talking to the customers of these legaltech companies - on top of what you mentioned, it's also external integrations and downstream configurability for how those integrations behave.

If you view Harvey as Claude in a box for legal documents, then the Harvey/Legora competitor that will never have the "killer features" that larger firms receive from running Harvey/Legora.

These biglaw firms also have software engineering teams themselves. If Harvey was easy to remake as doing legal document RAG, why haven't they done it themselves?

This is not open source! Can we get an update to the title?

I ended up doing the opposite! After being on the go with 15, 16, and 17 inch laptops I've finally moved to smaller 13 and 14 inch screens.

It's much, much easier to transport even though I do miss the screen real estate.

Wow, that's amazing to try in casual visual editing workflows. Very great results as well for something free.

Several people found they can use a much simpler exploit chain to continuously DoS the website using the unpatched exploit, than put together one that gives RCE.

There's a lot of smoke being blown by companies with a financial stake in coming off as "security-minded" or something.

There's apparently _some_ exploit usage in the wild before the embargo breaking, but it very much looks like they didn't even achieve RCE, or if they did it was not widespread at all. It doesn't mean it wasn't possible by a group more sophisticated, it just didn't happen thankfully.

After the embargo was broken, RCEs were still not widespread, especially not before a huge number of sites patched themselves.

So, no, the narrative that skids with agents were busting down doors as soon as the embargo was broken is not accurate. But breaking the embargo before a patch was ready only hurt the situation for defenders.

The only reason Php2shell wasn't as bad as it could've been was because basically no malicious actors had exploits that were useful in time.

Whoever broke the embargo is a moron and it could have resulted in much more damage than was done.

This is the CEO of ToB. It makes total sense why he'd not want to share his proof of concept.

>It can often outperform hand-optimized Rust in worst-case parallel workloads (p99), despite Rust having a number of pretty huge advantages...

I will say this comes with the asterisk that it heavily depends on what your concurrent system/problems looks like!

...but more often than not when dealing with web problems and network IO, the shape of concurrency/parallelism I need looks exactly like Goroutines, and even as someone who uses Rust/tokio daily: the Go runtime is an incredibly engineered system that usually beats Rust in my experience for application dev tasks.

Anyways, I love Crystal's syntax around concurrency! I wish we lived in a world where it had tons of Google engineers optimizing the runtime :)

I don't think NCC is 2026 is anything like the NCC of yore. Some of the most incompetent assurance and security researchers I've ever met have come out of there more recently.

Hopefully this hack is a warning for anyone that might use NCC's services in the future.

Yes, not sure what the timeline was where trust was given to this company. Just horrible for the entire secure Internet. They've yet to answer many of the basic questions raised throughout this process too.

only a single tile in an unpopulated area reported a 9, I think is what he meant.

I can run OpenAI on AWS Bedrock and Azure. I cannot run Jev on those cloud providers. For the many companies locked behind cloud providers, we don't have the same options.

Should we compare Ellison to a lawnmower instead, as bcantrill so eloquently did?