molf
Joined 14 years ago
Karma
1,840
Submissions
296
Member since
Mar 22
Recent submissions
Comment · 10 days ago
This seems super light on details and I had to dig to find more information. We don't use Gitlab, but we do use Ruby, so I was worried we might be impacted.
This is the best overview I found: https://lilting.ch/en/articles/gitlab-cve-2026-110264-org-mo...
The bottom line: this is an issue in Ruby's regex engine, which was fixed in April and backported recently. [1]
Everyone running applications where attacker-controlled input might find its way (unescaped) into Ruby regexes is vulnerable to remote code execution.
Comment · 2 months ago
> HOAs don't make neighbors co-owners of your own property, do they?
Home-owner associations in Europe are frequently set up for apartment buildings, in which case, yes, the roof, foundation, hallways, stairwells, main piping, electricity, etc are all legally co-owned. Primary purpose of HOAs is to save for & plan long-term maintenance on the entire building.
HOAs for neighbourhoods, or blocks with single-family homes or terraced houses are pretty rare in Europe.
Comment · 2 months ago
No it's not useful, no you don't know what you're doing, and no it is not 'proper'.
But you're learning.
Maybe just accept that not everyone starts from fundamental theory, and there are lots of people who start learning by fooling around.
Comment · 2 months ago
> unless you'd call cargo-cult chaining magic numpy incantations you've taken from Karpathy's tutorials "exploring"
That's what I would call exploring.
I too started exploring programming as a teen by cargo culting. Fooling around and getting results is what made it fun. Understanding came later.
Comment · 2 months ago
Why would you tell people that the correct order is to build foundational knowledge before exploring a subject? For some (many?) people, a 'proper' understanding develops _after_ the exploration.
Comment · 2 months ago
> What about the riders who are on the receiving end of fraudulent drivers in the best case, abusive or dangerous drivers in the worst case? It is possible to go to far in trying to protect workers for things that impact paying customers.
Not saying they shouldn't be banned. But a human should look into it. Seems reasonable?
Comment · 2 months ago
So according to the regulator Uber automatically suspended driver accounts that were flagged in decision of fraud or due to low ratings. They also failed to inform drivers about the automated decision making.
Here is the statement from the Dutch data protection authority:
Uber made fully automated decisions regarding drivers. In cases of suspected fraud or excessively low customer ratings, driver accounts were automatically temporarily deactivated or, in the case of persistently low ratings, permanently deactivated. As a result, their income from Uber ceased during the deactivation period.
Uber thereby violated the ban on fully automated decision-making under the General Data Protection Regulation (GDPR). The AP also found that Uber failed to adequately inform drivers about the automated decision-making. Uber has since ceased the violations.
Article 22.1: The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Article 13.2f: In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing: [...] the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Comment · 2 months ago
I agree.
But wouldn't you want a human to be involved in this process?
Let's say you run a legitimate SaaS company, and a cloud provider suspends your account due to an allegation of fraud. Wouldn't you prefer a human is involved?
To me that seems pretty reasonable when people's livelihood is at stake.
Comment · 2 months ago
That's irrelevant.
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
If Uber processes data, and makes decisions based on that data in a purely automated way that significantly affects people, it is not allowed. That's all there is to it.
Comment · 2 months ago
But it's not enterprise SaaS, is it? It's just a time tracking and invoicing tool. And it's not the only SaaS they will need?
Companies with 25 employees generally don't have money to pay a dozen SaaS vendors $2k each every month.
Maybe certain niche products that are critical to the business might be worth that much. But a time tracking & invoicing tool? Definitely not. Source: am actively moving away from Harvest due to this ridiculous price hike.
Comment · 2 months ago
I don't think the point is that PostgreSQL is great for everything.
But you may get by with a single piece of infrastructure instead of 7.
In most of the applications we build or maintain we use PostgreSQL + cloud storage. That's it. And it works very well, also for: storing JSON, full text search, as a queue, as a vector database. Other software may be better at providing those features, but I'm extremely happy we only need to understand & manage PostgreSQL.
Comment · 2 months ago
They're called Antilopen in Dutch too, so I think most people would just associate it with the animal?
Comment · 3 months ago
I believe such organisations tend to do such things very intentionally :-)
About ESO [1]
> We are an intergovernmental organisation established in 1962 supported by 16 Member States (Austria, Belgium, Czechia, Denmark, Finland, France, Germany, Ireland, Italy, the Netherlands, Poland, Portugal, Spain, Sweden, Switzerland and the United Kingdom), our host country Chile and strategic partners.
So Chile has a distinct status, hence the margin...?
Comment · 3 months ago
Double? Rookie numbers.
We went from $1k to $21k per year.
A few emails later and we have a hefty discount, but we will still move away.
Comment · 4 months ago
If you’re interested in what a specific piece of code compiles to, it’s worth checking out the online compiler playground [1]
https://zxcv.art