Gigachad

My coworkers seem to

Which just highlights the issue. People largely don’t care how letters show up. Emojis changing form entirely changes the message.

I feel like it would have been better to just allow embedding a small arbitrary bitmap or vector image in text. No one likes the current state where you send an emoji that looks one way on your system and then looks different on the receiving end. And it would have avoided all the conflict over which emojis get added and which don't.

Asahi is patches on top of the linux kernel. If you independently get your drivers in to the kernel which does allow LLMs, the drivers will end up on Asahi too.

How it works in Victoria, Australia is for renewing an existing lease is you must provide examples of comparable rentals in the area at or above the price you are proposing. And the tenant can dispute with their own comparable if they believe the price is wrong. New listings can be listed at any price.

There is enough turnover with new listings to find the market rate while preventing existing tenants from being screwed over by unreasonable prices.

Australia also almost entirely works off rentals owned by individuals who own 1-3 properties rather than corporate owners so no one landlord has any sway over the market.

More it was the banks were made liable for stolen funds. So they responded by making funds harder to steal.

Do you really think banks care about you installing custom themes or whatever? They only care because the cracked Spotify app also has malware bundled on the side which uses the new root access to break the app sandboxes.

Then we need to audit the spec for malicious instructions.

Lake Intelligence

The stuff we have seen so far feels less like super human hacking skills and more human skills at superhuman scale.

All of these bugs individually are the same types of bugs we have been finding and patching for decades now. But we found a way to scale that far beyond what we had before.

This is what the Rust advocates have been trying to say for a decade now. But C enthusiasts would always chime in that those bugs were just caused by careless devs and a real C programmer is fine.

Traditional finance can freeze and reverse funds though. North Korea can hack a bank but they can’t get that money out of the country.

In that case you’d just block the whole subnet that the TV is using.

I have a non “new” 3DS XL which ive had since 2013 but I never really played it much back in the day. I’d been increasingly bothered by how large the steamdeck is making it difficult to travel with so I pulled the 3DS out.

Now many years later with how easy it is to hack them I’m having a lot more fun with my 3DS than I did back in the day.

The “new” model is a lot more desirable though since with homebrew you can unlock the extra performance in some games and fix fps drops.

We are in a retro gaming golden age right now with all the hacks and mods you can run. The Nintendo 3DS is another great space to watch, people are porting games to native 3DS titles currently.

The blocking of residential proxies might be the thing that moves the world to ipv6. These days what we need is a dynamic map of all the IPs running proxies so servers can block them. If every device gets it's own v6 address, you could block just the TV running the proxy. Modern crowd sourced security products could identify the proxies and share their IP live so you can ban and unban addresses as the device moves.

That's assuming the current models are able to find all the bugs, and that we won't have a better model out every few months that will be able to find even more obscure bugs.

We would also have to burn a trillion tokens a day verifying all the C code the hard way forever going forward. It would be cheaper to rewrite the kernel in Rust, subsystem and driver by driver at a time.

It also used to just be fine patching the bugs as they were found. Its only recently where that model has fallen apart and we now need to prevent the bugs from existing in the first place.

The situation we are talking about here is someone with no fixed home or insecure housing. That kind of person likely isn’t even paying for cloud AI, let alone buying massively overpriced hardware to run it locally.

The market for someone who wants local AI in a laptop for $10k has to be tiny.

And those people are buying $10k laptops to run local AI?

Ubuntu made more sense when you installed end user apps from the apt repos and wanted updates more than every 2 years. These days with Flatpak you are better off on Debian.

I agree, with a big tech deployment process this would be less impactful. But getting from a company used to manual testing and weekly deployments to a fully automated CD pipeline is more work than a single Claude prompt.

Unfortunately I work with users who get upset when the app goes down or features break.

We are capped by testing and PR review. The junior devs can spam out a million PRs a day but we keep having production incidents from not carefully scrutinising the changes. So the speed of code generation is limited by how fast we can actually accept those diffs.

Avoiding 3rd party libraries seems like a false sense of security. You’ll stop seeing CVEs on the scanner reports, but the bugs are still there, just in your own code that is less well audited than public libraries.

The upper management and security team came knocking and told us all of the CVEs from the scanner need to be addressed right now. And the only way to deploy without having to wait for QA approval is to not merge feature changes.

The physical world comparison is interesting. In the real world we have a small amount of security, but most things could be broken in to. Instead of fortifying everything, we just imprison the people breaking stuff.

Obviously this doesn't work on the internet since most hacking comes from overseas out of our control. Which makes me wonder if there is a possible future where we just block packets coming from countries that don't lock up the hackers.

At work we have put a full halt on feature work because the number of security related tasks has become staggering and urgent.

We will hopefully get over this wave and be able to move forward with much more secure software, but it's crazy right now.

I wouldn't be surprised if Google is experimenting with exactly that right now.

I’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.

It’s also never been easier to replace C programs with safe alternatives.