codedokode

By the way, Soviet refrigerators are immune to this type of attacks.

What genius decided to connect a fridge to the Internet? Make him pay the losses.

By the way similar thing might happen to geniuses buying Internet-connected cars.

In 2023, the government told Prigozhin, a head of a private military company Wagner, that he must transfer the command of his units to the main army. This resulted in Prigozhin taking his army from the frontline, capturing the headquarters of Special Operation in Rostov, and marching on Moscow. During march, they shot down several planes and helicopters which were trying to stop them. At that night, several private jets were urgently leaving the capital.

So, mistreating veterans might not work out as expected.

More details: https://en.wikipedia.org/wiki/Wagner_Group_rebellion

The reason is easy to see: it would mean that Russia lost the war which is a disgrace. On the other hand, if the war is continued there is a chance that Ukraine will have to make a deal at Russian terms and remove its army from the disputed regions which would be a victory.

As I understand, Nebius is tiny compared to Yandex in Russia which has: a search engine, maps, an ad network, a taxi, a bank and contactless smartphone payment system, food delivery, with autonomous delivery robots actually operating in Moscow/SPb and not prototypes, a cloud, Amazon-like services, etc. Nebius has nothing of similar scale.

Kotlin the language is a clone of what? Clickhouse the database, Nginx the webserver are clones of what?

Those loopholes might be illegal. How do you pay taxes without specifying the source of funds?

> estimates that I've read couple of years ago put that Russian migration to 4 million

I think a realistic figure is several hundred thousands. There is not so many rich Russians that can afford living abroad, and not everyone is a software developer.

The US economy became so strong that it cannot do without Russian diesel?

I think proprietary software will move into cloud. For example, a photo editor will keep processing algorithms on the server and client will be just caching the results and displaying them.

If you make a program with a simple logic, anyone can vibe-copy it in a day. You cannot sell it.

If you make a program with advanced algorithms and complicated math, anyone can clean-room reverse-engineer it (by 2 different AIs) and vibe-copy. Furthermore, reverse-engineered data, such as algorithms and secrets, will be embedded into weights of a next LLM version.

Yes cloud won't work when you have unstable Internet due to certain events, but having a program sometimes not working is better than having a program anyone can copy. Am I wrong?

Also, vibe-copy is a made up word.

Russia exports diesel means Russia is getting money from US and can spend it however it wants. Also, it gets some political influence on Trump by doing a favor and helping Republicans win.

> And was Russia a manufacturing powerhouse?

Of drones and missiles? Yes.

Sadly if it ever gets manufactured it will use cloud and become just a better version of Flock. Even cat in the photo looks with obvious displeasure realizing this. Concept itself is novel and amazing though.

It seems that Trump is going to pay for a Russian diesel though. It's not 300 billions but as the proverb goes, Moscow was not built in a day.

But Matrix does not. I wish they removed email requirement too though.

Purchase can be done only through Apple/Google Pay which require a phone number and a bank card on top of that. Do not be deceived by marketing people.

Requires Apple or Google Pay, linked to a phone number and a bank card, crypto not accepted.

Matrix clients do not allow to even select several messages to delete them at once. Matrix is a superior concept to proprietary Signal, Whatsapp, Telegram etc but the implementation needs some help yet and UI is far behind.

Is "firejail" a white list (only these things allowed) or black list solution (everything not explicitly disallowed is allowed)? I glanced through the issues and it seemed to me it is very hacky and feels amateur-ish and doesn't make me trust it, so I am starting writing my own, white-list based sandboxes. For example, No-net Sandbox will not allow a single packet out, including DNS query, unless allowed, Proc Sandbox will restrict access to /proc etc.

Automatic updates should be read as "automatic backdoors".

Theoretically you can download a single HTML file and open it in the browser. However many web features require HTTPS (including JS Modules, yes) so this would be poor developer experience. I want to write simple apps and prototypes in local HTML files but W3C does not let me.

Flatpak has "classic mode" which means no sandbox, which you will never guess if you did not read the docs, because why tell the users the truth when you can use marketing speak. Also, Flatpak allows reading identifiers from /proc and /sys.

Is not Signal inferior? In Telegram you can communicate with strangers without disclosing a phone number, in Western messengers until recently you had to disclose it so that your contacts can conveniently find you and punch you in the face if you are a man or just annoy you with indecent messages if you are a woman (probably not scary in a country where everyone has a gun and every home is a castle, but not all world is like this). What Western genius thought of such a feature, displaying a phone number in a group chat?

Telegram also allows to delete any chat in one click. Telegram has support for HTTP, SOCKS, MTPROTO and WEB proxies to evade censorship, Western messengers do not. Telegram is written in C++. Although it is a piece of proprietary garbage and might be connected to the government, at least it is well made piece.

Also it became difficult to register in Telegram, it often asks for 1 euro when trying to register with a fake number. And with a real number the OTP code simply doesn't get delivered to Russia.

Signal requires a phone number and does not want anonymous users, so I do not want it too.

> The primitive stays the same throughout: arbitrary file read. What changes is what you read: an SSH private key, a browser password store, a cloud credentials file, or a configuration holding an API token.

So in the hindsight it was a right thing for me to put it into a sandbox without any SSH keys and tokens. Also, I didn't bother registering tg:// scheme in the OS which also turned out to be good - clicking such a link in the browser does nothing for me, and as a side effect, websites cannot detect presence of Telegram or send command to it though registered scheme handler.

Also, I was surprised that Telegram uses passcode (an on-device password that is required to access the app) to encrypt user data. I thought they just keep the hash of a passcode and check it.

Also I assume Telegram can block this attack on the server, as groups are not E2EE and the server can find and delete files needed for successful exploitation. And links too. If someone has a spare account they can check if posting such type of files or links works.

Maybe one should compare the slope of the line in 2010-2020 period vs 2022-2026 for Germany?

Yes I meant Russian decision to ban export of diesel abroad. Technically it can be considered a part of the counter-sanctions applied to "unfriendly" (official term) Western countries (other measures: taking over assets in Russia, such as factories, belonging to foreign companies etc).

> How is Russia in a winning position?

Because US is asking Russia to lift restrictions and not vice versa. If US is in a winning position why do they even need to ask anything from a "losing" side? Winner sets conditions, not asks.

I read today that US President temporarily lifted sanctions on Russia regarding diesel export. I hope it is just a part of a secret plan to persuade everyone that peace and trade is more profitable than war, and not US economy crumbling due to Russian sanctions against West. By the way, diesel in Russia is cheaper than in US, which means at least in diesel production Russian economy is more efficient (it makes more diesel per dollar spent).

Could not smart glasses with speech recognition help in such cases?

I am not an expert but it might be the problem with microphone or sound processing and not actual noise. For example, my smartphone mic picks up lot of noise from wind even if the wind is not strong, while human's ears somehow reduce or suppress the wind noise.

Also, modern smart speakers use arrays of microphones and medical devices might be using some outdated tech.

As I understand, the novelty is that they put external components, including a lithium battery, under the skin. Is that a good idea? You cannot easily replace them, and what if something happens to the battery?