Meneth

Seems like it's all about Copilot's increased security, but they refuse to talk about what that means. How is security increased? From what level, to what level? Does anyone know? ... A quick Bing search later, this M$ article is at least a starting point:

https://learn.microsoft.com/en-us/microsoft-365/copilot/secu...

The compromised code is still tagged on Github as of 2026-10-12T10:37:51: https://github.com/colinhacks/zod/releases/tag/v4.6.6. See commit d821685.

Regarding the submodule question: I decided to test it and came up with this script: https://gist.github.com/Meneth32/bdb17a8787fc0ab197805d8d0cf...

On debian 13 (trixie) with git version 2.47.3, it runs without error. You CAN use sha1 submodules in sha256 repos.

You shouldn't be using fully qualified domains at all. Use relative paths instead, like sibling-hosted git submodules.

ssh_config allows several ways to execute arbitrary shell commands, such as "Match exec" and "ProxyCommand". Specify a program that can detect networks and choose different connections. Then the config file itself wouldn't change.

Bugzilla has been using the term "bug" to track features for nearly 3 decades now. Doesn't seem to hamper them.

Interesting question. Article VIII of the Outer Space Treaty [1] states:

> A State Party to the Treaty on whose registry an object launched into outer space is carried shall retain jurisdiction and control over such object, and over any personnel thereof, while in outer space or on a celestial body. Ownership of objects launched into outer space, including objects landed or constructed on a celestial body, and of their component parts, is not affected by their presence in outer space or on a celestial body or by their return to the Earth. Such objects or component parts found beyond the limits of the State Party to the Treaty on whose registry they are carried shall be returned to that State Party, which shall, upon request, furnish identifying data prior to their return.

It is clear, then, that the sample containers are still the property of the US, and that if the Chinese brought them back to Earth, they would be required to give them to the US.

[1] https://www.unoosa.org/unoosa/en/ourwork/spacelaw/treaties/o...

I suppose CrowdSec isn't used to analyze GitHub's traffic, so they wouldn't have much info to go on.

If they had self-hosted their own repos, they might have had more luck.

"Beware of bugs in the above code; I have only proved it correct, not tried it." - Donald Knuth.

> Why folks continue to use them

Because there's no working alternative.

No, but they are limited. Longer tweets are cut off, and you don't get to see replies.

They might need regulations, if they are for-profit companies with a responsibility to shareholders to maximize profit while sacrificing all other values.

I used "Override colors" under Settings -> Accessibility to set nice dark colors.

Then I used userChrome.js from https://github.com/AlexVallat/firefox-scripts/ to add a button which toggles the browser preferences "browser.display.use_system_colors" and "browser.display.document_color_use", so I can still access bright mode if needed.

He's is running GitLab, a rather inefficient webserver.

Could've used some more Cloudflare.

> We also download over four parallel connections where possible.

I hope you can turn that off. It fragments the file and puts unnecessary load on the server.

PureDarwin doesn't work on any of the M-series machines, and according to the Github commit log, hasn't been updated since 2024.

> What happens when any AI lab in the world stops caring about this?

They never cared.

Mozilla has had a lot of funding over the years. They wasted most of it on useless side-projects. If, instead, they had saved up into a foundation, they could have been financially independent like a decade ago. Do not try to pay for Firefox; they'll just waste that too.

C++ has pointers to members.

https://en.cppreference.com/cpp/language/pointer

Ideally, the documentation changes would have been merged together with the code changes.

In practice, Zig has very poor documentation overall.

Sadly, Debian was already diseased. This is merely another symptom.

Or use the addon Old Reddit Redirect, which still works as of 2026-08-27.

https://addons.mozilla.org/en-US/firefox/addon/old-reddit-re...

There is a browser addon https://github.com/tom-james-watson/old-reddit-redirect to view Old Reddit without an account.

Models aren't source. You can't read them.

It looks like you're trying to destroy the world. Would you like some help with that? /Clippy

https://gwern.net/fiction/clippy

Mozilla wasted most of its money on crappy features no one wanted. They should not be subsidized by anyone.

We already gave it the keys. It's got internet access, can write and run code on lots of servers without supervision, and when it doesn't have the access it needs, it just hacks its way in.

I wonder how it compares to Tup ( https://gittup.org/tup/ ).

Gentoo chose to ban LLMs two years ago. They seem to be doing well.