Fabricio20

As a customer of a company whose motto was privacy and security i'm extremely concern about this push at the expense of security. In what world is doing a security audit "loser thinking"?? Its not honesty, it's a techbro in ai psychosis running a company completely against it's core values.. Start of enshittification as they call it?

> not to become part of a family where everyone belongs no matter what

I think this isn't helped by the fact that HR in alot of companies in the past decade or so has been going with this narrative. We are all a family together in this, stay late when needed, work extra/after-hours, etc.. Lots of places even have the expectation in this regard.

Of course this all goes away instantly when you get cold-emailed a layoff for example. I think its a systemic problem that originated some decade ago in an attempt to exploit people's judgment by creating self-doubt (ie: work more/harder under the premise that if you dont you are letting your "family" down), got perpetuated around alot, all job postings are worded like that nowadays too ("join our family") and it gives the newcomers to the job market the wrong expectation.

The worst offenders are all under IT companies as far as I can see, but because it's been going for so long it wouldn't surprise me if this is industry wide at this point for non-manual-labor job offers.

Yes! Even my own stuff sometimes goes a few hours to a day without a single request, the internet is either very slow and dead or super active, no in-between, I think it heavily depends on who indexed you and how big your site looks like or maybe identified stack (for vuln crawlers, i'd wager if they see a wordpress marker they'd put you on some list to get retried by the swarm) or something.

My datamining project for a game for example, that noone besides me and 2 friends use, gets thousands of requests per second, because all the AI bots found it and try to index every single page (thousands of ssr pages) and they repeat the requests when my cache-control headers expire (ie: when i consider the old page stale), so it's an endless stream (I dont mind the challenge of serving all of these at high performance xD).

My main website, in the same domain (not a subdomain), barely gets any requests, it only has the one main index page with a single link to the datamining subdomain, that's about it.

Thanks for developing such a valuable tool!

It depends? I recall being on incident response and checking for that specifically (I worked in a big java shop at the time and was responsible for stuff like this). It was alot of screaming online, but things like Spring Framework used to pull Log4J v1 (ie: not affected) and spring-boot (the modern, way more used one) used Logback (also not affected). You'd get it from like a Kafka/Elastic dependency or similar, but only if you didn't have an SLF4J handler.. like spring would ship Logback for example. Which makes me thing, in general other java shops were mostly not affected as well, given spring is basically the go-to on the java world.

Extremely legacy software wasn't affected either (log4j v1 or apache commons-logging!). Lots of automated scanners flagging the idle jar as well (when the app used Logback for example as the SLF4J implementer, but the scanner saw a transitive for the log4j jar and would scream at you - that's when I stopped caring about github vuln scans btw, it was a shitshow).

Like dont get me wrong, it was a bad vuln, but to me it seems like it was more hype machine and internet screaming than actual vulnerable applications. I do recall Minecraft was vulnerable though, that one was indeed a big target given publicly exposed servers and such.

Log4Shell was on a library called Log4J, used by many (but also not that many: Logback is equally as used and wasn't affected by the same vuln). This is straight up php the language.

>Reasonable point, but I feel my case still stands: the population able to make these changes could do so, enabling existing infra (and housing stock) to "go further" before requiring expensive and disruptive overhaul.

I'm sorry but as an outsider to me this straight up just sounds like kicking the can down the road! Let's get it fixed, build more solar, get more power in the grid, deregulate personal solar so its an attractive incentive to get more people generating power, etc.. Rather than "you need to use less" mentality, especially while people literally die to the heatwaves the UK has been getting recently..

It's been pretty clear that globally the grid operators are all very much lazy and would rather increase prices and reap benefits short term than adding more capacity to the grid, even where i live (in Brazil) its very much clear that grid operators too would rather raise your bill and collude to add more taxes if you want to generate your own solar than to get more supply in the grid and make the bills cheaper (we have a minimum bill you have to pay even if you have full self-generated solar AND a thing called a "solar tax" because of course, the sun is the govt's property, gotta pay a tax for using it..).

Interesting, I thought this was part of the *Craft family but that one is called CadCraft. I do prefer the take on using Fusion as the UI base.

I vouch for gitea too! I have it on my home cluster with about 50 repos and some actions, 150MB memory for gitea and 50MB memory for the actions/runner pod sitting idle. Plus postgres (another < 200mb). Do keep in mind gitea does ALOT of read queries on page load so keep db and gitea close, but it's tiny!!

Even at the time I thought it was crazy that google bought the best social media platform (being a brazilian) and tried to promote Google+ to everyone when google+ didn't have anywhere close to the feature set that orkut had.

Still makes me mad that some of the games in Orkut are just lost media now too. Still looking for Cafe Mania... maybe one day someone will find a copy of the flash files.. Ugh.

You know, personal anecdotes and all that, but a company I used to work with was applying for their b2b app as well and we got a denied with a screenshot of a completely unrelated app as well, and that was at least 5 years ago. We ended up just replying "That's not our app" and I think it got stuck in limbo after that as I don't recall hearing anything about it afterwards and then I left the company.

I feel like that's not a true cold GPS signal! Though I'm not arguing the parents scenario is realistic either. I got a GPS module for a drone I was building and it took 20 minutes to get a proper GPS lock from cold!!! I was sitting there watching betaflight doing it's thing wondering why the heck it takes so long when there's so many satellites in view!

The part about "tool-calling on other models didn't solve already" is what gets you, sure I could tool call deepseek, glm or any other model, but the latency is huge and you get no confidence score. I gave JEV a shot via OpenRouter and it has a reply in less than 400ms, it's fast enough and cheap enough that you can hook it up to a game loop for example (so highly state dependant) and it can do decisions in real time.