cleansy

That’s already the case. Same question is why guns are regulated when killing someone is already illegal.

Published CVSS is a base score that gives you a hint of how important the analysis of a vulnerability is to prioritise the patching or mitigation. What you see on websites is only ever the base spiciness so to speak. If you have for example wordpress only running in an isolated environment behind internal firewall rules you‘d downgrade it accordingly. It’s a imperfect metric but so far the best we have to signal priorities. It’s all described in its spec that no one seems to read and websites also communicate it badly.

I have neither a positive nor negative stance towards that practice. At least the Thai government used Thai restaurants and Muay Thai as a softpower booster. It would not surprise me when China does the same. To (assumingly) spend a lot of money to get Havard of all places to advertise for something that you can also get for free on youtube is a clue in my book.

I saw ads for tai chi for a long time and thought of a Chinese hearts and minds campaign. That article reads like it was sponsored as well. Anyone else with the same impression?

All organisations also have exceptions to policies. This one would be one

Google, Apple and co are free not to do business in the EU. There is no "overreach". It's a 450M pop market with a high median per-capita income. There are many reasons why the EU has a rather small tech industry of its own, high up among them that the EU does comparatively little to protect its market compared to China where most US tech companies don't even bother to enter anymore. In China, if a fine like this hits you, you are not allowed to do business anymore until it's either paid or revoked in court. So yeah, the EU is very lenient on all accounts.

> so I don’t even know at this point what the EU is trying to defend here.

Says it right there: "Apple was simply unable to develop interoperability solutions that meet essential EU privacy and security standards," Regnier said. "Instead of trying to find a suitable compliance solution, Apple simply made a request to the European Commission to be exempted from their interoperability obligations under the DMA - and this for at least 18 months. That's not an option."

Yeah, highly inaccurate data. Shows Auth0 with an uptime of 0.6% over 24h. Smells like a slop project.

I worked as a tech in porn in my very early 20s. My experience was the opposite, interviewers later on remembered my CV because I was transparent about it. In 2009-2011 weren’t many places where a junior developer could work on code that served 100M ad impressions /month and 3-5M requests on the pages. Gambling and porn both hook into your dopamine systems, but mixing them together does not make sense at all. The consequences of watching pornography are two orders of magnitude milder than a gambling addiction.

Fake it til you make it [into the news for fraud allegations].

No, I think about it all the time. It’s just baffling that this kind of attack is still a thing, after a decade+ of this happening over and over again.

To have an initial smoke test, why not run a diff between version upgrades, and potentially let an llm summarise the changes? It’s a baffling practice that a lot of developers are just blindly trusting code repos to keep the security standards. Last time I installed some npm package (in a container) it loaded 521 dependencies and my heart rate jumped a bit

Sure thing! Here: (ffmpeg). Ffmpeg wrapped in simple yet elegant parens. Or fancier: {ffmpeg}, or more brutalistic: [ffmpeg]. Do you want to try a cookie recipe ingredienting ffmpeg?