elpatokamo

I agree with your first sentence, but not the second. Let's remember Hanlon's Razor.

This would be a wild thing to do as a marketing stunt. They're essentially admitting to violations of the CFAA and are lucky Huggingface was sorta chill about the incident.

My assessment? They deprioritized good cybersecurity controls in the name of moving fast. They had a single Artifactory instance shared across many (or all?) their training environments. And then, after the agents found a way to exploit it, they rebuilt Artifactory again and still set it up with one shared instance. That was careless, perhaps even reckless.

I’ve been looking closely at this too. $75/month isn’t bad all things considered.

I’d love to hear more personal anecdotes from people who are active in CSPrimer. Downsides I could see (not having joined):

- Some parts of CSPrimer are not finished yet.

- How active is the community really? It’s hard to tell without joining and seeing for yourself.

- How much access to Oz do you really get (same as above)? - How much mentorship do you really get (again same as above).

This is fair. One example is the discrete math course (called Math for CS). The MIT course is widely agreed (in the Discord server anyway) to be harder to follow than even just a good discrete math textbook, but there are no high quality discrete math textbooks that are free and open source (as least that I know of).

I’m doing OSSU, and I went for “Discrete Mathematics with Applications” by Susanna Epps. Cost $50 for a used textbook. Technically I’m deviating from the curriculum but I’d say I’m still “doing OSSU”

I looked into this when I was trying to figure out how to round out my CS education. The lack of community is the primary reason I went with OSSU instead.

Genuine question: why do you believe Teach Yourself CS is superior to OSSU especially in light of the community aspect?

Full disclosure: I’m a “social organizer” for one of the cohorts in OSSU and blog OSSU sometimes

Yeah, the whole "maladjusted home school kid" is a thing we were cognizant of when making this decision.

To your second point: I think the best predictor of success in any education setting is intentionality and involvement from the parents. That said, with home school you get nights and weekends AND days to spend in whatever way is most optimal for your kids.

Our two kids are homeschooled and are generally equally excited to play with all their friends (some homeschooled, some in regular public school, some in private school).

I have yet to see or hear any "othering" of their friends. In fact, I'd say the breadth of different social situations they are exposed to makes the "othering" less likely.

I have a page in Notion called "Quick Notes". I have this page favorited and have a widget on the home screen of my phone where it shows up prominently. This makes it easy to get things out of my brain very quickly.

Every evening I journal about / document my day and set up basic todos for the next day (takes about 15 minutes). During this time I also review my Quick Notes page and file things away as necessary (e.g. Todos, notes about something I researched, calendar events, summary of an interesting conversation I had with a stranger, etc get put where they need to go).

As far as note-taking when I'm learning something, I do something like the Cornell method where I write notes as questions and then write the answers underneath or to the side. When I review the notes, I try to answer the question first and check my answer against my notes. This format also makes it really easy to throw things in Anki.

Same for me. Tried with and without uBlock turned on. Getting 404s for the css files

I'm not sure I follow - automatic autofill and manual autofill would both raise red flags by not automatically filling in credentials (automatic autofill) or not suggesting credentials (manual autofill).

edit: I think I understand. My first point doesn't show that automatic autofill is better than manual, because both methods will raise red flags. I.e. this isn't a reason to choose automatic over manual autofill. I think this is a fair point.

I do think that both autofill methods have an advantage over simple copy/paste, especially given the XSS discussion in other threads here.

Besides convenience, one of the benefits of autofill is that it offers some implicit feedback about potential phishing sites. For example, your O365 credentials shouldn't autofill on off1ce.com. If I was on a site and noticed that my credentials didn't autofill (or offer autofill) when they normally would, this would immediately raise some red flags for me.

The article does looks at how password managers autofill on different levels of subdomains, which is relevant to my point above - a hijacked subdomain would be a problem for many of the password managers he tested.

Seems people are taking issue with my gripe about the pricing. To be clear:

I bought the iOS app, was happy to do so, and got a lot more than $25 of value from it. In my opinion, the developer might be better off with a subscription model rather than a one-time purchase.

I agree with you - I definitely got more than $25 of value from the iOS app and was happy to pay the price. I guess my thing is that I wonder if the developer would be better off trying to solicit more users at a lower price (or a small, monthly/annual subscription) than a one-time purchase.