profmonocle

> we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so

"Extraordinary" is a funny word choice. It was completely ordinary for most of the history of personal computing that any app you ran under your normal user account could see everything you had.

(I'm not saying this is a bad thing. As long as they allow informed users to continue to do whatever they please, I'm all for it.)

The federal renamings of the Gulf of Mexico and Lake Ontario are absolutely dumb culture war moves.

But referring to the US simply as "America" domestically isn't - politicians across the political spectrum do that. If a democratic administration had launched a chatbot, I would be unsurprised to see it called America.gov

Does this actually cause any meaningful confusion?

In English there isn't a singular place called "America". As you mention, there's North/South/Cebtral, and together they're referred to as "the Americas". When someone refers simply "America" with no other qualifier, it's clear what they mean.

(Of course in Spanish "America" refers to the whole thing because North and South America aren't considered separate continents. But they have a different demonym for the US in Spanish)

A federal court, sure. But this was a state court ruling on a state law.

Replace "climb the social ladder and have power and influence" with "be able to afford a home, have kids, and go on vacation occasionally."

It's become very difficult to have even a middle class lifestyle without a college degree. Obviously a huge percentage of people there don't want to be.

Even if example.com is unsigned, the delegation from .com to example.com will still be signed (including an attestation that example.com is unsigned). So lack of DNSSEC adoption by users of the TLD wouldn't save them here.

It's not like the long-haul fiber not owned by FAANG is a public utility, at least not in most places.

Traffic that goes over "the Internet" traverses some mix of your ISP's fiber, fiber belonging to some other ISP they have a deal with, then fiber belong to some ISP they have a deal with, etc.

All those ISPs are being paid to provide service, they can invest in their own networks.

Possibly naive question, why should Wikimedia do anything at all? Do they have a legal presence in the UK?

If not, why not just say "we aren't a UK based organization so we have no obligations under this law"

Let the UK block Wikipedia.

Assuming that RFC1918 addresses mean "local" network is wrong. It means "private". Many large enterprises use RFC1918 for private, internal web sites.

One internal site I spend hours a day using has a 10.x.x.x IP address. The servers for that site are on the other side of the country and are many network hops away. It's a big company, our corporate network is very very large.

A better definition of "local IP" would be whether the IP is in the same subnet as the client, i.e. look up the client's own IP and subnet mask and determine if a packet to a given IP would need to be routed through the default gateway.

I don't think OP was specifically stating we need to save these specific jobs, rather they were pointing out the interconnected nature of the economy. Less importing hurts the workers in those industries. Taking that further, it will hurt businesses near the ports where the workers may have gotten lunch, etc. etc. etc. That's how recessions look at a microeconomic scale.

I'm fine with this as long as they include the tariff in the listed price.

I'm worried businesses are going to use tariffs as an excuse to have a fake list price, then hit you with massive hidden fees at the point of sale. Some sectors have been doing this for years - "service fees" at restaurants, "regulatory response fees" in the telecom industry, all sorts of nonsense in event ticketing.

Physical goods have mostly been spared this type of fake pricing - aside from sales tax not being included, but that's been universally true in the US forever so everyone is used to it.

Tariffs could be the end of that if businesses see sales plummet. Especially because these scams actually work - the reason restaurants give for not just increasing their menu prices is because higher listed prices drive people away.

> 4Chan's "Not your personal army" mentality vs. the widespread doxxing/"call their place of employment!" witch hunts

That's too generous. "Not your personal army" started because 4chan had a well-earned reputation for harassment - usually raiding other web sites, but often targeting individual people who caught their attention for one reason or another.

The "not your personal army" slogan came about because people who were very aware of this reputation were showing up, hoping to make a web site or person they disliked the next target. That got annoying fast, hence they told those people to go away.

It wasn't a moral stance against target harassment - far from it. It was a stance that the group mind will choose the next target when they feel like it - not because some rando is mad at their ex or something

When the first-gen iPhone was out there was a TIFF vulnerability so bad that you could jailbreak an iPhone just by visiting a specific web site. I remember going to Best Buy and seeing all of the display phones had been jailbroken. (It was easy to tell - this was before the App Store, so having extra app icons on the home screen wasn't normal.)

This was a user-empowering application of the vulnerability. Obviously, a bug that allows root-level arbitrary code execution just by getting the user to load a single image could be used for some pretty bad stuff. (And perhaps was.)

I would also say don't run ghostscript with the same permissions as the web server, especially not if you can just hand it your PDF through stdin and take a PNG through stdout. Sandbox it as much as possible. PDF is a really complex format which means lots of opportunities for buffer overruns and the like. (Edit: Actually, reading through Arch-TK's post above, it sounds like it was much dummer than something like a buffer overrun.)