HackerThemAll

When speaking about Tom Sawyer, it's hard to not have the piece of the same title by Rush playing in your head.

Agreed.

Those are not the "software engineers" but coders, those who like to say that the university degree doesn't add anything in programming.

It's possible it's a deliberate project decision to support very old CPUs. But it could be multi-targetting different CPUs and using SIMD whenever available.

Would a modern tiny MCU survive the space conditions, such as high energy radiation blasting its transistors? I seriously doubt it. The original Apollo computer was so big that nothing could break it.

> The answer was to add as many features to the language as possible.

Because Java is losing market to languages with many features. Which is good. Given history of Java under Oracle supervision, and the availability of Rust, Go and C#, I won't ever touch any JRE-based language.

That's why the world looks more favorably at Rust than C++ now.

Samsung what? Fridge? Air conditioning? Dishwasher? Excavator? A single more word of explanation would make it crystal clear, whereas now I need to wonder whether it is about TV, computer monitor, smartphone or who knows what.

I’ll sit out this drama until pgrust 0.5.

> I take full responsibility for my actions.

I would like this to materialize, but that's just empty words.

> It was not remotely my intention to cause any of the subsequent side effects.

What were your intentions, then?

> my intention was to alert others in a similar position to be aware of the importance/urgency of the updates.

Have you lived under the stone for the past few years with respect to cybersecurity? Yes you have. All of you ignore security as in "it doesn't apply to me", "they won't break into my software because I'm truly the best 10x developer in the world" etc.

> I have learned my lesson.

I certainly doubt that. A person with IQ only a tiny bit bigger than Trump's wouldn't seek public attention so badly to disclose a security hole in a public forum.

When such praise-seeking habits have stopped being embarrassing?

Yeah to me it's the wolf in grandma’s clothing.

I found it funny that people use Chromium-based browsers and pretend they're unique.

If you want freedom, features and manifest v2 then just use and support Firefox.

What exactly are you trying to convey here? That this penalty is not an issue? Would you be willing to pay it from your pocket then? Quad9 is not Cloudflare nor Google. It's a nonprofit, in case you blinked right at the sentence that mentioned this.

3k comments loaded quite a while.

> applied to 2,300 jobs

This is precisely the problem. Until people were applying manually, the amount of resumes to read was manageable. But if 2300 people apply each to 2300 jobs, then every company receives 2300 candidates, presumably for one position.

How would a company manage this other than blindly discarding 2290 and interview 10 people?

Prompt it to create a bash script that will clean those directories and schedule it every few minutes.

Apparently OpenAI is unable to fix this properly, even using its state of the art AI.

Then Linux kernel should be rewritten in FreePascal now.

It just means that we should use cryptographically-secure PRNG for EVERYTHING even remotely related to crypto, and even for low priority systems. Everything, including passwords that we routinely generate and store in vaults/password managers.

And you need to SUM them to get the actual disk consumption. Add every 54 MB or so to get 489 megabytes (466 MiB) in total.

  26.09.2026  11:44        55 325 476 SGr-Iosevka-Bold.ttc
  26.09.2026  11:44        55 529 052 SGr-Iosevka-ExtraBold.ttc
  26.09.2026  11:44        52 411 832 SGr-Iosevka-ExtraLight.ttc
  26.09.2026  11:44        55 813 148 SGr-Iosevka-Heavy.ttc
  26.09.2026  11:44        54 856 068 SGr-Iosevka-Light.ttc
  26.09.2026  11:44        53 842 504 SGr-Iosevka-Medium.ttc
  26.09.2026  11:44        54 954 816 SGr-Iosevka-Regular.ttc
  26.09.2026  11:44        55 088 816 SGr-Iosevka-SemiBold.ttc
  26.09.2026  11:44        51 327 812 SGr-Iosevka-Thin.ttc
               9 File(s)    489 149 524 bytes

In contrast - NotoSansMono-VariableFont_wdth,wght.ttf - 1.7MB, gives me all the variants Iosevka needs half a gig for.

download the zip file from github and unpack it.

No, Meta, really? Who would have thought?

10% of their global income is from scam, In Poland reportedly 37%. Do you think they'll stop faking reality, and dividing and deceiving people when they make money out of that?

Half a gig for a single variant of this font? No, thank you. That just doesn't make any sense. Perform some minification and/or publish just TTF or OTF.

Let's continue that a year from now.

It's an alpha phase. Why you people consider a project that is being actively developed for only couple of weeks a finished product? It's improving on a daily basis. Adobe and Microsoft had several decades. You're asking for the same in order of weeks? And for free? Is it me who is unreasonable here?

> We see nothing.

Clear your glasses. For example - https://getartcraft.com/apps Thanks to those people we may soon have great alternatives to monopolies.

> there's no way a C web server will be free of RCEs in today's world.

That's a bold claim not supported by facts. The following one had not had any RCE for 27 years, since its inception, and counting. I am certain there are more C web servers written securely.

https://cr.yp.to/publicfile.html

I like everything about it EXCEPT the Apache HTTP Server (if I understood the article correctly). It should be discouraged nowadays. Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.

To give you more context. I recently closed a security gap in a customer's web server that most likely resulted in a data leak. That web server stored (of course) database backups and other personal data. The directory listing was visible and accessible from the open internet, because - note that - the .htaccess file where the access was disabled had INVALID END OF LINE CHARACTERS according to Apache (and it wasn't me who prepared it in the first place). Therefore - note - the server IGNORED that file and its default setting was OPEN ACCESS and enabled directory index. It's wrong on so many fronts. The Apache's philosophy is not "I cannot parse the config file, therefore I disable access to the directory tree until administrator notices and fixes it". It was not logged in the server logs as "invalid EOL detected". Apache after over 30 years of development cannot parse all 3 end of line sequences - the process which is TRIVIAL to the point of being ridiculous. Deciding not to include CRLF or bare CR is not about performance. It's just the decision of its makers, there's no justification these days. It violates "be liberal in what you accept and conservative in what you send". In 2026, when the cybercriminals are everywhere, just waiting for the data, scraping it all over, the server's default should be "close everything until it's explicitly open" and "if the config is broken, disable access and/or fail".

Yeah, and for the contrary I spotted Claude app being ugly. When I turned off Claude, then put my computer to sleep and later woke it up, it made my fans spin loudly, and after I checked, there were like 2 dozen Claude processes and a lot of Python. What was it doing - I have no idea, but it was crazy. I'm setting up a VM with nothing but Claude and necessary tools. I feel Claude is not honest with everything it is doing.

That's not how it worked in the past. There was no notion of "CI" and usually you installed software by downloading the source .tar.gz to your target server, then doing:

  tar x
  cd <source dir>
  ./configure <options>
  make
  make install
  make clean

Yeah maybe it's less visible nowadays, but in the past the world was not just Linux and FreeBSD. There were many commercial Unixes which differed from each other and from Linux. And to be portable to such systems you needed to check everything. So autoconf was a crucial tool, not just a fancy noop.