ljm

HN was my source of truth for mitigating this

exactly why I asked, because those builds for 8.5.12 are not available yet

So this only affects 8.2 are other patches coming?

The CVE wasn't clear about the impact and suggested every version after 5. That is going back over a fucking decade, almost two.

There's a lot of zombie software on the net that is ripe for the picking. More food for the botnet.

Wordpress in particular is a stupidly simple vector.

Do no evil, right?

I miss the old days of the PS1 where you got a chip fitted into the machine and then used a spring so it would still boot up when the lid was open.

And you could cheat with games by plugging Action Replay or Gameshark into the serial port which basically just fucked with the game's memory. I don't even know what the serial port was actually meant for.

I think this is one of the biggest missteps made in Go and in all honesty I don't think it was any more intuitive than going through a package manager. Probably less, looking back.

Everything else is fine. Generics, errors, whatever...

In the new world of AI and all the supply chain attacks on centralised package managers, I think circling back to vendoring probably makes more sense than depending on the network in your build step. Which in some ways is always great, as you mention, in terms of working offline. Using your own domain doesn't help there either, except exposing the package if the domain expires.

Even if you don't want to go as far as vendoring (which can get a bit out of hand with, say, NPM), a middle ground is using Artifactory or whatever as a proxy.

Then be more deliberate about when you update. AI may even help here where static analysis doesn't, because you might be able to use inference to see if a dep upgrade is even needed. Unless it has a severe vuln you probably don't need to track latest.

I was a victim of domestic violence, as a man, once a while ago. Ever since then I hate the feeling of things touching my neck - because he tried to strangle me - and my reaction to things rubbing my neck is a tic now.

I was taken seriously for about a week and then it dropped, because it was my sister's boyfriend who did it and he was already going to prison for something else. So why make it worse for him? I got sidelined in favour of that.

My own social connections dropped off at about that time because I became scared. The guy who attacked me was already due to be imprisoned.

So, I was well embedded in that dysfunctional family life, and at every step of the way I was 0 priority compared to the boyfriends of my sisters.

The reason I can't find a woman is not so much that I'm insecure or lonely, but that I need a bit of time to get trust. And besides, lonely people have been paying hookers and escorts forever.

I don't even know if they need an influencer army. I am seeing people out on the streets deferring to ChatGPT for even basic things in a way that Google never achieved.

I was at a hotel bar the other night and some guy kept bothering the bartender about what was on TV. Every time the bartender told him what they could do he went off for a few minutes, sent it to ChatGPT, and went back to the bar saying "well ChatGPT said this." I can't believe the bartender didn't lose his patience with it. The guy was fucking desperate to see some football on the telly and GPT kept telling him he was right to keep challenging the bartender.

Another guy looks lost with his family and he comes up to us and asks where a good restaurant is. We ask if he wants good local stuff or not and he says, he doesn't know, he just asked ChatGPT and felt like he got stranded. The restaurant it pointed out was like 2 minutes walk away. He was like the one guy in the family who seemed to speak english and was probably the one that was just dragging them around on a GPT adventure. The rest of them looked bored, like they were tired of his shit.

If it doesn't work out, it's not GPT that was wrong, it was everybody else. It pits technology against humanity again.

It's not a format though is it? it's literally just an extension to the system prompt in plain markdown.

There is no rhyme or reason to the structure of this file, just like with most things in AI. It's best effort human language.

I've only heard of "loneliness epidemic" in terms of "male loneliness epidemic" and it's framed entirely around young men not getting the attention they expect from women.

The male loneliness epidemic is also known as the growth of incel circles and the influence of supposedly masculine influencers who will do literally anything but treat women both as equals and with respect. And the way these groups work is that they need to keep their membership up, so it's in their interest to keep you away from women by turning you against them.

Whatever narrative there is about young men being left behind by progressiveness, it is a big lie over a smaller truth (the system fails everyone and now it is sometimes failing young white men, in terms of education). Not so different to the great replacement theory I would imagine, but based on gender not race/religion.

Disingenuous analogy, because you're taking the work of a carpenter and then jumping all the way to a Star Trek style replicator, which is daft.

The jump from writing code by hand to having a machine learning algorithm compute code for you is not the same as that. We had tags, syntax highlighting, auto-completion, word suggestion (via dictionary), intellisense, enhanced auto-completions via snippets, natural language processing, language servers, etc. etc. throughout the decades and an LLM is still not a Star Trek style replicator.

Now, it might have taken a blacksmith a hell of a long time to work various kinds of metal to order, but then someone got the idea of creating a mould so you could make more of them at once. Then later on technology advances and you can now machine it to ridiculously high precision with CNC. Now the person who writes CNC code for a high precision part might not be the same person who has to work another metal part manually.

Did the machines do that or did they? And why exactly does that distinction matter? Half the code I write depends on stuff hundreds or thousands of others have built before me.

I imagine that, if you're in the US, it is seriously scary. Nobody is safe, not even in FAANG. Probably FAANG is the worst place to be now if you care about stability but it was never great before that (stack ranking, firing quotas, etc.). At least you had the idea that performance would keep you safe, but now it doesn't.

I'm not sure how much that translates in other countries where protections for workers are stronger and companies have different operating models. Not to say it's without trade-offs, you might feel safer over in Europe but you're never gonna see US-style compensation, and the concept of becoming a millionaire (and a new startup founder with ex-FAANG credentials) because you joined a startup at the right time is practically non-existent.

Yeah, body shops existed before AI came around and your job in one of those is literally just to churn through tickets and get them across the board as fast as possible. Pure production line stuff. AI comes in and turns that to 11.

If you're looking for a decent job with even an ounce of creativity then an agency/consultancy shop is rarely the place you want to be and I can't see it getting any better.

We went heavy on AI at my place of work, like many did, but not really to the level of being AI-pilled and orchestrating dozens of agents and shit like that. It's still a force multiplier if you just use AI to walk through something one task at a time and use the spare time in between to collaborate on bigger picture stuff and think a bit beyond the code alone.