Liquid_Fire

It's not factually wrong, but it implies that this is something specific to Git, and possibly might even be interpreted that it is Git's fault.

In reality it's macOS shipping the outdated certificates, and it affects various other command-line tools, like Curl.

It's certainly possible, but I'd say the evidence fits the opposite explanation more: if it was not for business purposes, why do it on your work machine, during working hours, with your work email address in the User-agent?

> it seems plausible to hit by mistake

The report seems to claim the opposite:

> Looking at the bug itself, it is also very likely that this unsoundness has not caused memory unsafety by accident. While it looks easy to trigger, to exploit this you need an intentionally malicious Drop implementation.

I believe git has a setting to auto-convert to CRLF on checkout and back to LF on commit, so that could also be partially to blame.

I'm not sure I would call that "adoption", so much as "compatibility with", since the default line ending produced by Windows software is still almost always \r\n for files created from scratch.

Sorry, can you clarify about Microsoft having adopted \n? This is the first time I hear of it, and I can't find anything online about it.

That seems impossible (unless maybe you meant to write "predates", and even then it seems to only be about 3 years).

The comic was published on 9 February 2007 [0].

The PS3 was first released in November 2006. I haven't watched the video yet, but its description says "2010 saw the first hacks for the Playstation 3".

[0] https://xkcd.com/221/info.0.json

I believe this has been around for a while; it's probably just been rolled out to more regions (Germany, France, and Italy, according to the article).

It's annoying, but thankfully it's a single checkbox in the settings to disable it (uncheck "Suggestions from sponsors").

100 W sockets? All the flights I've been on that provided power have had a really low current USB A port that can barely keep my phone from discharging when the screen is on.

Try traveling abroad with a prepaid data SIM (or limited roaming data allowance).

Plenty of websites already have comically huge pointless images (often then scaled down to tiny sizes for display). No need to make the problem worse.

Even though it's called "T9 Speed Test", it seems to default to T9 being off, and you have to actually click on the T9 link at the top right to enable it. Really confusing at first!

It's not real Python. It's essentially a made-up language that resembles a subset of Python.

That said, if I was building a small ugly toy Python implementation, I would probably also not implement long integers. Or the power operator. At least not in the first iteration.

Ah I understand now, thank you, my mistake.

Where is that quote from? The OP literally says it's based on "annual global sales", and so does this:

"6 % of the annual worldwide turnover"

https://streamlex.eu/articles/dsa-en-art-52/

It doesn't matter if you're losing money on paper, since the fee is on sales, not profit.

OK, so the two options are:

A) Claude really produced this counterexample

B) A mathematician working for Anthropic solved a problem mathematicians have been working on for more than a century, and then credited it to Claude for PR purposes

If you believe B is more likely, why would you then believe a proof in the form of a chat log, when said chat log could itself have been faked by Anthropic way more easily than solving the mathematical problem in the first place?

True, but not sure how it's relevant - you don't need memory corruption for the test to perform arbitrary I/O. And even if you trust the tests to not do anything bad, you don't need memory corruption for this to be an issue - any bug in the code emitted by the compiler could cause bad things to happen.

But all of this is ultimately completely unrelated to the concept of "unsafe". You can delete your home directory just fine in safe Rust/Go/Python/etc. You can write a compiler that emits broken code in the same languages; even in a 100% pure functional language with 0 side effects and a perfect bug-free implementation.

> if rustc emits machine code and then cargo immediately executes it, there's the same opportunity for end user memory being corrupted (due to miscompilation) as if rustc and cargo shared a code base

Your tests run in an entirely separate process from the compiler (and from cargo). This makes it very different from memory corruption in the compiler:

- The test process can only corrupt its own memory.

- You don't need "unsafe" to run tests. Just the ability to start another process.

- If you're cross-compiling, you wouldn't even be able to run the tests on the same machine (without emulation/compatibility layers)

Does roc run tests in the same process as the compiler?

> apparently the very first person to encounter it

We don't really know that.

It may have been the first person able to complain - given you couldn't even file a support ticket without getting through this prompt!

Not sure how you came to that conclusion. An empty train would still exist in the live train data. It does not depend on mobile phones, but on rail signals and other such tracking built into the rail infrastructure.

You are giving it to them. That's why the demo asks for your location permission, and that's why the API expects location info.

"You" here means another app that integrates their API (or you as an individual using the demo on their website). How the other app gets it is up to the other app - ideally it also just queries it directly and requires location permission.

No, live train data in the UK is already publicly available, e.g. see https://www.opentraintimes.com/

This is matching your phone's location to the already public train data.

I think you're misunderstanding what they are saying. They don't use background location data, but they do use your current location data. Try the "Find My Train" demo on their site - it asks for location permission.

Or their API - it also expects device location data:

> At a minimum, requests to the detect endpoint _must_ contain a device's location measurement. Additional fields can be included where available to improve the accuracy of the returned results as outlined below.

https://docs.signalbox.io/docs#/operations/Detect_detect

Presumably you still need a C++ compiler for LLVM itself though. Or... a C++ to C translator.

Edit: On second thought, that's only needed if you want to run rustc itself on the old hardware, which is probably not super useful given the main reason you would need to do this is if LLVM can't target that hardware.

For building code written in Rust for such old hardware, this would be sufficient.

Fun! There are some combinations that don't seem to work though, e.g. "dG" and "dgg" do nothing.

> many stupid Apps check that developer mode is on and refuse to work

Do you have some examples? I have developer mode enabled and have never seen any apps complaining (and I have used a lot of different banking apps).

What you're referring to is not a cookie banner at all (I suppose you didn't read the text, only the buttons).

The actual cookie banner merely says "We use cookies to improve your user experience. Learn more" and has a close button.

In the UK, many banks disable the magnetic strip by default, and you have to temporarily enable it from the bank's app/website if you want to use it.

You'd struggle to find a POS terminal that even has a reader for them in the UK. I've only ever had to enable them in the US or Japan.

It says "determined by the closest capital city". The only area where Vatican City is closer than (some part of) Rome is within Vatican City.

Presumably you could trigger one of those onbeforeunload confirmation dialogs in that case.

I assume you would also have some sort of icon that indicates all of the changes you made have been synced (or the opposite, an icon for when they haven't yet).

Though of course, it doesn't help if the user outright kills the app or pulls the plug or whatever. But I think in that case they should expect to lose some data?