cuillevel3

"The vulnerable Github Agentic Workflow Noma Labs discovered was configured to:

* Trigger the workflow on issues.assigned events in GitHub * Read the issue Title and Body * Post a comment in response using the add-comment tool * Run with read access to other repositories (public and private) in the organization "

Self inflicted damage, I think. So what is their claim, that gh-aw's "Safe output gate" and "Threat detection" didn't stop the workflow?

Someone should try this 10 to a thousand times per model and compare the results . Then we could come up with an average of success/fail...

Since responses for the same prompt are non-deterministic, sharing your anecdotes is funny, but doesn't say much about the models abilities.

Totally agree there and they actually talk about that in the post:

> Finally: we’re painfully aware that none of the Matrix clients available today provide a full drop-in replacement for Discord yet. All the ingredients are there, and the initial goal for the project was always to provide a decentralised, secure, open platform where communities and organisations could communicate together. However, the reality is that the team at Element who originally created Matrix have had to focus on providing deployments for the public sector (see here or here) to be able to pay developers working on Matrix. Some of the key features expected by Discord users have yet to be prioritised (game streaming, push-to-talk, voice channels, custom emoji, extensible presence, richer hierarchical moderation, etc).

The IRC admins can read all your messages, be it to a channel or to another user.

Even without registering my nick, I would expect a modern protocol to keep my pm communication private by default.

For everyone not reading the post:

> Practically speaking, that means that people and organisations running a Matrix server with open registration must verify the ages of users in countries which require it. Last summer we announced a series of changes to the terms and conditions of the Matrix.org homeserver instance, to ensure UK-based users are handled in alignment with the UK’s Online Safety Act (OSA).

At least you can self-host matrix and messages are end to end encrypted, unlike IRC.

I had to look this up on Wikipedia and remembered this is the 19 year old UNHRC. They have never been objective in regards to the Middle East conflict.

Distros are struggling with the amount of packages they have to maintain and update regularly. That's one of the main reasons why languages built their own ecosystems in the first place. It became popular with CPAN and Maven and took off with Ruby gems.

Linux distros can't even provide all the apps users want, that's why freshmeat existed and we have linuxbrew, flatpak, Ubuntu multiverse, PPA, third party Debian repositories, the openSUSE Buildservice, the AUR, ...

There is no community that has the capacity to audit and support multiple branches of libraries.

The permanent library was strange. Not very transparent what happened there. I am still shocked they did not invest in the original idea (tag and archive web page), but instead tried to build another content stream with recommended articles and such.

I paid for Mozillla Pocket Premium and they canceled their product within a few months, did not properly open-source the server, did not export my "permanent library" and refunded 6$. As the websites in the "permanent library" are partially offline, that data is now lost. No thanks, not buying again.

Indeed:

  title,url,time_added,tags,status

I guess I'll have to write a scraper to download the permanent copies?

I totally agree.

  A forever home for your collection. Pocket becomes your permanent library—so even if a page you've saved is taken down, you'll still have a copy of it in Pocket

That's what I paid for. I trusted in Mozilla being open and allowing me to take my data with me. This is worse than Google?

These protests are organized by conservative organizations. They represent the big farms and the export industry. I'm not sure why the "World Socialist Website" thinks this is some grass root resistance to austerity politics.

> The coalition in Berlin will stop at nothing to suppress this movement and defend the bankrupt capitalist social system against any opposition.

Actually, the government already gave into some of the demands of the protesting, subsidies-receiving land owners.

But well, maybe that's because the "World Socialist Website" has their own Putin-politics to push:

> This is underlined by the brutality with which it is fuelling the punitive war against Russia in Ukraine, supporting the genocide against Palestinians in Gaza

RVM gemsets are used for the same reasons one would use venvs, no?

Isn't that identical to 'sudo -i'?