rikafurude21

This feels more like an old problem getting reframed as an AI problem.

people were already diffing kernel commits and figuring out which ones were security fixes long before llms. if a patch lands publicly, the race has basically already started.

also not sure shorter embargoes really help. the orgs that can patch in hours are already fine. everyone else still takes days or weeks.

if anything, cheaper exploit generation probably makes coordinated disclosure more important, not less.

Its still crazy to me that everyone has a pocket AI-hacker ready to inspect firmware and modify their devices now. You just put the agent on it and it gives you access in minutes. You would have to be a Hotz tier hacker if you wanted to do anything close to this only last year, or at the very least extremely patient for long hours.

alternatively, uv lets you do this:

  #!/usr/bin/env -S uv run --script
  #
  # /// script
  # requires-python = ">=3.12"
  # dependencies = ["foo"]
  # ///

Recently bought an apple watch for my mom and got it set up with her iphone. Almost instantly she notices that she cant accept WhatsApp calls on her watch, and after looking into it I found out that it was another one of those apple things where they assume youre obviously using facetime so that functionality isnt available for any other app. For context, in europe Whatsapp is the dominating messaging app and alot of people use it for calling as well as messaging. The apple watch is, as far as I can tell, a simple Bluetooth wearable with a speaker and a microphone, so the only reason its like this is that apple has a concept of how the device is "supposed" to be used and only lets you use it that way. After that experience I fully support all the regulations the EU is putting on apple to open up.

You seem insanely miscalibrated. $90 gets you a dedicated server that covers most projects' needs. data durability isnt some magic that only cloud providers can get you.

Isnt a sqldump just a text file? That should be easily shareable on Github

Im confused, did the update from last week for the RCE bug also include fixes for these new CVEs or will I need to update again? npm audit says theres no issues

Scolding your clients like theyre kids will definitely sour the relationship

Selfish how, because he clearly does not say that upgradability or customizability are bad things? Its also not like hes proposing something that isnt reality for most manufacturers, especially Apple.

Any chance there will be some kind of updating mechanism for 'compiled' bun executables?

Letting go of x86 was just one of the first steps on the road to a world completely dominated by mobile devices. Macs just caught up with all the progress that mobile devices had made when apple made the switch.

"training on our data" has turned into a catchphrase like "taking our guns" or "banning our books" - dumb propaganda for anti-AI crowd to enrage people. Whether personalized AI-based experience is useful can be debated but everything has to be twisted into culture wars, thats just how media is nowadays

thats not the confusing part, its rather confusing to threaten to sue for copyright because of mistaken attirbution

I'm more confused by the fact that the OP freely submits a PR into an open source repo but then wants to use "copyright" because the code he submitted ended up being used under the wrong name, which was then corrected.