chx

If you are installing rogue code then you will have a bad time.

Modules/themes on drupal.org which show "Stable releases for this project are covered by the security advisory policy" are written by trusted users. There is no other protection from rogue code because they are inherently able to access the database. It utterly doesn't matter what extension points the code supports and how because of that. In very broad strokes, if you are using any CMS which a) accesses a database b) allows installing additional code and it runs that in the same process as the CMS code accessing the database -- then you are vulnerable to rogue code. Like, a headless CMS where the frontend only talks to it via an API is protected from rogue code in the frontend part but that's about it.

This means the Drupal ecosystem is vulnerable to a supply chain attack, yes but ... um ... that doesn't make Drupal design insecure, does it?

> the way plugins and themes work is insecure by design.

Tell us more. (A lot more. "Extraordinary claims require extraordinary proof".)

> because some new requirement came along that didn't fit our nice architecture.

This is the thing.

I was doing the event section of the website and it was the event. I mean, it was preposterous to even think of running multiple events. Fast forward a few years, the company is now many times the size after very rapid growth, has an office in the UK and now runs multiple events. Would you have made an architecture for multiple events back then? YAGNI whispers you not to...

This is bullshit.

Let's repeat the basic fact: every crypto which uses a transaction fee is inherently a scam because it's a negative sum game. Everything else is bait to get you involved in the scam. There's nothing else.

Really? really?

you think when the iPhone came out the space was not crowded? You think they defined the category? Jobs himself have put up a number of smartphones in his 2007 presentation. Yes, the iPhone was far, very far better but it was definitely not a first.

Same thing with the iPod vs Diamond Rio MP3 layers.

As for the Watch, gosh, I do not even know where to start. Pebble Kickstarter two years before that? Two generations of the Samsung Galaxy Gear came out well before the Apple Watch.

> Aerospace is all about process and safety so.

As an aside, this is so much so the often used phrase "aerospace grade" whatever, especially on Kickstarters is just bull. There's nothing special in the materials, what they are concerned about is the ability to track every piece to where it comes from.

> which a lot of hackers don't care about

Well, yeah, there was a time for that.

But, I can guess I can openly say this twenty years later, I was helping out one of the admins of the one of the largest warez sites in Central Europe and when that was raided (Operation Fastlink) -- police only found the proxies and couldn't find the owner so no one ever got indicted over this site -- I had a little chat with myself and, as I said above, closed that chapter of my life.

That server was really something else: imagine a normal mid tower chassis PC of the era but stuffed with IDE cards and next to it several piles of hard drives separated by little pieces of wood so they didn't overheat from touching. By the end, if memory serves, it was multiple terabytes.

Well yes Diablo 2 was $50 when released http://web.archive.org/web/20000815052708/http://www.gamesto... which would be like $90 today adjusted for inflation. Diablo IV is $70 and people were raging how expensive that is. And Last Epoch is $35 and it seems like more fun than D IV. And of course Path Of Exile is free to play but you need to consider the price of a math degree totes required for that thing :D https://www.reddit.com/r/pathofexile/comments/wydq91/my_frie... And before someone posts the obligatory "Still sane, Exile?" I would like point out two things: a) I do have a math degree b) my Last Epoch Falconer is called TrappedInWraeclast. Sanity left the building, long ago :D

I strongly suspect a lot of people who could crack Denuvo simply do not want to.

We've grown up. We got solid, well paying developer jobs. I do not want to even risk violating some law. It's been a hoot 1987-2004 but I have not opened IDA in two decades. That book is closed. I doubt I am alone.

Once... so long ago... I could disassemble Z80 in my head. Today? C9 was RET. The rest I forgot.

All three good candidates for Satoshi are beyond said cryptanalysis: Sassaman and Finney are dead, Paul Le Roux is in a federal prison and it is not known to the public where, even without Bitcoins, quite a few people want him dead so the feds are not going to make it easy to get access to him.

Tell me how that works. You add industrial strength gaslighting to your work and not afraid of being fired...?

> for what promises to be a very important class of tech

What I see here is the automated plagiarism machine can't give you the answer only what the answer would sound like. So you need to countercheck everything it gives you and if you need to do so then why bother using it at all? I am totally baffled by the hype.

No, the automated plagiarism machines have nothing and I am not obligated to cure your ignorance. Let's continue the conversation after you read an AI textbook, shall we?

If I do then it'll get gobbled up by fake AI and I won't make up one every time ignorant people who can't open an AI textbook demand one from me.

Apropos: https://existentialcomics.com/comic/289

You could use that comics to generate a few of these questions.

Sure thing.

People really don't learn the history of AI any more apparently or this question wouldn't come up all the time.

There is basically any number of questions you can ask a two year old human who have never encountered that question nor anything even remotely similar to it and yet they can answer without fail. Meanwhile absolutely no AI can answer these unless the specific question / the rules underlying the questions were previously fed into it. The textbook example is "If Susan goes shopping will her head go with her?" Of course, since this specific question is literally a textbook one, you can't fool an LLM with it but it's easy to come up with brand new ones.

In the early 1980s this stopped Douglas Lenat who has worked very successfully on discovery systems and made him turn to assembling these facts and rules into CyC.

I like being alive. Different people like different things.

The day I cancelled was May 19, 2020 and should've been yours too.

Yeah, well

It is, on paper a private company

But you need to understand this is China. BYD is extremely heavily subsidized by the Chinese government. For example, this 2016 article https://www.forbes.com/sites/mclifford/2016/07/26/with-a-lit... mentions

> In the five years ending December 31, 2015, the company reported receiving a total of 2.9 billion yuan ($435 million) in government support.

and that's just the reported support, there are tricks the government can play with for example labor costs, transferring R&D and so forth.

Forth?? Now, that's a name I haven't heard in a long time. A long time.

This is your regular reminder to read https://disconnect.blog/apples-vision-pro-headset-deserves/

> Tech companies want us isolated and constantly staring at screens because it drives profit

> the tech industry has been incentivized to push our society in the direction of isolation because it serves their business models.

Even The Verge admitted the Vision Pro is isolating

this is why you shouldn't buy one or if you did, you should return it.

Thanks, I knew about -committerdate but not that you can set it as default sort, super useful. A few notes...

1. git columns gets real confusing if you have more data than fits the screen and you need to scroll. Numbers would help...

2. git maintenance sounds great but since I do a lot of rebases and stuff, I am worried: does this lose loose objects faster than gc would? I see gc is disabled but it's not clear.

3. Regarding git blame a little known but super useful script is https://github.com/gnddev/git-blameall . (I mean, it's so little known I myself needed to port it to Python 3 and I am no Python developer by any stretch.)

The problem is if you are covid infected and not wearing a mask that creates a greater risk to the people around you even if they are wearing a mask.

The choice to put others at risk shouldn't be yours.

The Gauntlet readers unite!

Let me add a personal anecdote: my uncle has developed a better sprinkler head. Think of bearded inventor tinkering in his garage for a decade. This was late 80s /early 90s so not much CAD was involved.

This is where the patent system shines. Because he got a patent he could shop around, sell it to a company which made a tidy profit on it. He didn't need to raise capital to establish a factory and all that to bring it to market and the company buying it seriously got ahead without spending an inordinate amount of money and time inventing the thing.

Extremely, extremely bitter note: how much all the diversity&inclusion is all talk and no show was on clear display when FOSDEM didn't have a mask mandate.

But usually a movie is worked on by multiple VFX companies and whatnot.

I wonder, is it even possible to truly delete a movie?

I am surprised Batgirl didn't leak. How do you even prevent that?

It's just bits.

Dell and HP and Toshiba all had pointing sticks on their professional laptops even before the patents ran out. They were utter shit of course because it was negative inertia which made the TrackPoint usable and that was patented and by the time it expired everyone was high on trackpads which are , once again, obviously utter shit because they can not be as efficient as a TrackPoint which is where your fingers are compared to a trackpad where you need to move your hand to.