JLO64

> Upgrading to GitLab 19.3.6 on October 22 didn’t fix the vulnerability. The fix isn’t in GitLab’s own code but in a patch to Ruby, which GitLab applies only in its official packages. Our image used standard Ruby, so it didn’t get the patch.

> The bug is in Ruby’s regular expression engine, so any program that compiles regular expressions from untrusted input is exposed, not only GitLab.

I feel like this era of constant exploits/patches is really bad for those who build from source or make their own images vs those who rely on provided images and upgrade them often. I really can't think of a decent solution for those people other than being plugged in 24/7 to the latest news which is really unfortunate and must be exhausting...

> But we still have no self driving cars

While I agree with your statement overall, as someone who drives everyday in LA alongside Waymos without anyone inside of them I must disagree with this aspect of it.

I don’t know much about this so I’m curious. Is the reason why GPUs aren’t preferable for large scenes due to their limited VRAM or a different aspect of them?

Not in a serious manner but I created a testing harness for a Nintendo 3DS game I'm making that uses the OpenAI Decisions API. The main advantage is the speed (~2-300ms per input) which I really need for this purpose.

> Are you in college?

Nah, I'm in my 20s but already graduated. That said, most of my friends are guys from a church group and are 40+. I take back what I said a bit though. I know two of them who like to read spiritual stuff, but the rest don't read books and do social media or TikTok only.

A follow-up if you don't mind.

I have a friend who did some time a decade or so ago (I'm uncertain if it was a federal or state prison) and one thing I've noted about him is how much he values books, even stuff like manuals and outdated reference material (we're in a volunteer group and we were cleaning up a room with a bunch of trash). His explanation to me was that in prison there wasn't much to do and so he spent his time reading as much stuff as he could get his hands on.

From your experience, would you say that the average rate of reading amongst inmates is higher than the general population? In person I've hardly met anyone who reads books other than for school assignments.

As someone who mails a bunch of letters (as a hobby) I'm surprised to hear stamps being used this much nowadays! Just out of curiosity, how often did inmates actually use them to mail letters, or was it predominantly used as a form of currency?

I see no reason why they can’t target both at the same time. Personally I know two people who never would’ve paid for ChatGPT a year ago but now do so. I think for the average person it’s going to be a slow and difficult conversion process to paying customers.

I strongly second this, although I must admit it loaded surprisingly fast for me as I'm on a mobile hotspot in the back of a car.

I don't mind that since it helps with legibility which I find some fonts with a hand drawn aspect to them have.

Personally I can understand why these instructions were added. Back in the GPT-5 days I tried using that model for a uv/Python project but it consistently ran the wrong commands or used pip despite my instructions within AGENTS.md . This was because whatever uv features/behavior I was using was added after that model’s cut off date. It got so bad that I switched to Claude which had a sooner knowledge cut-off.

That said, in the case that the author brought up here I agree that web searches shouldn’t be performed. I personally don’t like having my main agent search the web (mostly for preserving my context) so I’ve restricted the web search tool to a dedicated web search subagent.

I deliver packages for Amazon as an independent contractor (via Amazon Flex). While there are plenty of issues I have with it, I have an overall positive sentiment. For those who don’t want to work full time hours (you can schedule yourself in 1-5 hour blocks), immigrants, or are just in a bad spot it’s not a bad option. I’ve worked for food delivery apps as well and I think it’s a better gig compared to those other ones.