Illniyar
Joined 13 years ago
Joined 13 years ago
My money is that this is manufactured by some PR team.
Possibly the Ad's text was purposely inflammatory (something like "overthrow the patriarchy" or something) so that they can say it was banned.
Basically every week I take the top songs for every country and filter out artists from out of the country.
I've found some songs I really like. Thought it'll be nice to share. There's also spotify playlists there.
I think this is the most obviously AI designed website I have ever seen.
From the nonsensical logo, the bland generic design language, overlapping support chats to mix and match of different landing page patterns. Misaligned avatar circles.
Additional load reveals limits and breaklines that were never known before - your temporary integer IDs are suddenly too small, you reach the maximum file descriptors in a Linux distro, your hash function suddenly has repeating conflicts, your DB index is suddenly oversaturated.
Having massive exponential growth of your traffic would probably require constant refactoring to meet the ever changing system limits.
Don't skimp on maintenance, make sure you have planes that can do divert in time.
If there was engine troubles in the middle of the ocean would it still be okay?
And if production is down even if there is just one user, it is all hands on deck.
You should have a method to deploy hotfixes to code that bypasses your development pipeline though, in case the development pipeline breaks while you need to fix production- because you must be able to fix PRODUCTION even if your dev pipeline is broken ( because again your dev pipeline, while important, is not production)
And you can host for a static site for free in a million places. CDNs free tiers are enough for individuals.
I don't get the preoccupation with hosting your own server, what matters is that you own your own identifier (in this case a domain name) whatever it points is vastly less important.
But the example with calculator is a bit misleading I think, you'll have to have a malicious exe already in the system and downloaded, and if cursor tried to run my understanding is that ACL should immediately kick in and you'll be asked for permission to run a new, unsigned app for the first time.
You'll have to have ACL disabled completely for this to be exploitable.
But further down it says that the cost was double and factories couldn't get buyers.
These are very different failure modes, and speak to very different solutions.
That is exactly what I would want from a junior developer - make sure the bug exists, find a way to fix it, verify the bug is fixed.
The problem, as was correctly identified in the blog post - is that instead of stopping and asking for elevated permission it relentlessly tries to find a hack on it's own. (An equivalent situation for a human developer would be needing some access to a third-party sandbox, and instead of asking a senior for credentials, tries to setup his own sandbox from scratch)