vitonsky
Joined 3 years ago
Joined 3 years ago
Yeah, we really live in age of Internet Explorer 6 yet.
We already have cool features in browsers, like transparent backgrounds, rounded borders, and even HTML 5 video elements, but we still cannot use VM intensively for any purpose with no hassle.
Maybe 10-50 years later we finally can use Linux laptop with RTX 5060, and just run a Call Of Duty multiplayer while a local LLM will fix bugs in our code.
Email is fine when it is an option. Mullvad have even option to pay with a credit card & PayPal. That's more sensitive data than Email.
Tomorrow they will do it again, and attackers will replace binary files that users download with this random script. Or this script will steal crypto/etc.
To make attack vector difficult for hackers, it's preferable to download any software as packages. On linux it looks like `apt install python3`.
The benefits is
1. Repositories are immutable, so attacker can't replace binary for specific version, even if they will hack all infrastructure of DuckDB. Remote script may be replaced anytime to run any code
2. Some repositories have strict review process, so there are external reviewers who will require to pass security processes to upload new version
The single one method how to install DuckDB on laptop is to run
`curl https://install.duckdb.org | sh`
I've requested to deliver CLI as standard package, they have ignored it. Here is the thread https://github.com/duckdb/duckdb/issues/17091
As you can see that it isn't single slip due to "human factor", but DuckDB management consistently puts users at risk.
Recently I've tried Baldur's Gate 3, gameplay looks nice, but options in dialogues written by 12 y.o. kid. It would be nice to talk via LLM that would have the described character personality.