PaulCarrack

Based on the amount of modem CVEs posted in the monthly Android security bulletins, I think it's safe to assume that if you are no longer getting updates then there are unpatched vulnerabilities in them.

A 2% cash back card cancels this out, resulting in comparable interchange rates. In some cases, you can effectively make money by spending money.

Although he was known for being a fashion icon, he was also an actor. Most people probably recognize him as playing the antagonist "Walter Donovan" from Indiana Jones and the Last Crusade. He was the guy that "choose poorly".

> We need to start the long process of hard forking now or turn to alternatives like Firefox as a new foundation.

Loss of an absolute legend.

One of my favorite videos (and songs) sang by Bobby: https://www.youtube.com/watch?v=9w3yoIOK-9U (Eat Your Vegetables)

RIP. You will be missed Bobby.

I love Tesler!

I'm often stuck at my desk for long hours, which made it difficult to maintain a healthy weight. I started using Manjaro a few months ago, and it's had a significant impact. It helped control my appetite and reduced the constant cravings I'd usually get, making it easier to make healthier choices. I've lost around 15-20 lbs so far, and I feel much more in control of my eating habits. I know it's a bit anecdotal but it's been an important part of my weight loss journey

They want email addresses used. How does that work for people who use Mozilla Relay or Apple's HideMyEmail?

You can easily accumulate hundreds of unique email addresses this way.

Do they really expect you to input 500+ email addresses?

It's easier than that. You don't need two NICs to get a carrier, just use a fiber coupler. They are super cheap (< $30)

Just to be clear -- It's an aspirational research project, much like (Galen's) Azure Sphere from 8 or so years ago. This is NOT Microsoft's official stance.

Galen is a super smart guy, but he's not a decision maker. I have yet to hear that this is actually the official direction Microsoft as a whole is taking, across any of their business segments.

Most people I know who take on side projects do them because they enjoy solving problems. They find them enjoyable, and to many, side projects are like taking a vacation. I wouldn't pay someone to take a vacation for me, that's nonsensical and defeats the purpose of the vacation.

Why would you pay someone to do something you enjoy doing, so you don't have to do (any/some/all) of it? What kind of side projects are we talking about here?

Open source maintainers just ignore this kind of stuff until they actually have something to contribute.

The biggest issue are AI generated PR slop that takes time to process. Not this kind of "I'd like to make a PR in the future" kind of thing.

Thank you so much Brian, I'm so glad I got to read it again. Great slides, great content. You are an expert at your craft. I'll definitely share this with my teams!

It really is a tragedy. I can't find it anywhere and I really wanted to reference it for future meetings.

@spagoop can you reupload it?

I've searched everywhere and it seems gone forever. It was a hell of a slide deck and I wish I had downloaded it before it got taken down. I'd potentially pay money to see it again.

Link is dead. Did anyone make a copy that can reupload?

I don't know if OP is serious, but more than once, his name has come up on this topic in discussions in the past that I've had with people in my social circle who work at Apple. He obviously gets much respect and is considered an engineer's engineer.

I don't think anyone would be against Woz stepping into to revitalize Apple. The real question is whether Woz would do it.

Unfortunately that won't work. Most companies now have an arbitration clause meaning that you can't take them to small claims court.

Had a similar situation happen with another company. Went to take them to small claims but the judge threw it out because of the arbitration clause. We then spent months and many resources but were unable to continue because we couldn't successfully contact their arbitrator to proceed with the dispute. Long story short, we wrote it all off as it was becoming too expensive both with time and resources.

This is all by design, and admittedly, a clever way for companies to do what they do.

We've seen this with Python's CoC and Tim Peters as well. This timeline sucks.

What he said wasn't even nearly as bad as what I've seen Linus say in other threads over the years. Is / was Linus Torvalds ever subject to a "tribunal" like Kent just was?

In the end, it's the users that end up suffering. The guy (Hocko) kept making mistake after mistake and Kent struggled to get him to do anything remotely net positive with regard to the issues in that original thread.

I'm not arguing that what Kent did was right or wrong, but I would be curious to hear what other ways people work with remote developers who are awful, especially when they work for other companies. You can't just fire them, so I understand the frustration here.

Perhaps, but still an informative article. Historically, Rob Norris and Klara Systems have contribute a good deal of features and needed bug fixes into OpenZFS.

> There are thousands of watch shops that are not "official rolex" repair shops, but are very high quality and will never do a background check

How do they get official parts that need to be replaced on the watch? Rolex is super tight supply chain wise about their parts for this very reason that they want you to keep everything in house. So I suppose they are replacing parts on the watch with aftermarket?

> Rolex will not service anything bought through the gray market, rather than directly from an AD.

Do you have a source for this? I was not under the impression that this was the case. I know they won't service any watch that's been altered or modified from factory specs.

I would argue that a watch can also be tracked but not in the sense that a phone can.

Assuming a Rolex gets stolen and reported as stolen, it can never be serviced by any reputable watch repair shop because it will be confiscated once that happens. In the case of Rolex, they will get serviced BY Rolex. Mechanical watches do need servicing otherwise they wont function properly. So even though watches cannot be tracked to the same level of fidelity as say, a phone with an antenna, it will likely still pop up eventually.

You can also make the argument that "Find My" and "activation locks" type stuff just means that the parts are going to get scrapped and sold. That could likely happen in the watch case too, so those features were never a silver bullet.

You might enjoy this:

https://github.com/vitoplantamura/BugChecker

Right when I saw this post I immediately thought of your post from last year, some great discussion there.

These days on HN, anytime I see a post about Sourcegraph my knee jerk reaction is to whince because I know it's probably not a good thing.

It will be a sad day for tech when they get rid of the on prem free version. I feel like that's the next logical thing to cut given the direction and momentum they are heading.

> I never paid a cent for the product

I would love to contribute and pay, but, as a single personal / private onprem user, it's impossible. It's $49 per user with a 50 user minimum.

Sourcegraph doesn't make it possible to contribute in that circumstance.

I use Sourcegraph for personal use with my private repos.

In the past, I've found actual bugs that I reported to Justin Dorfman and worked with him to get those bugs assigned to the right engineers so they got fixed before your enterprise customers can experience them.

1. Is there still a path for reporting issues now that the repo has gone private? The Github issue tracker can no longer be accessed or searched through to report bugs or figure out if a bug is known or being worked on.

2. Do you plan to get rid of "Sourcegraph Free" for on premise personal use?

> Windows by default, un-firewalled, will announce its presence to a network, and in old versions, that could even be the internet at large

By announcements you are referring to broadcasts which are limited to the broadcast domain of whatever IP the ISP has assigned you. Plus those are largely blocked by the ISP beyond that.

So to say that you are broadcasting to the world that you have an SMB share available is not true. An attacker would have to scan for it (i.e. make an active connection to TCP port 445 on your machine).

> Without naming names

Cough VMware by Broadcom cough