dvdkon

I'd still rather have the software crash and alert a human that to continue in a faulty state. The way to add robustness in this case is to add backup systems, not "ON ERROR RESUME NEXT".

Sure, when I last wrote a sizeable chunk of C, I wrote those macros and with a bit of help from new-ish compiler warnings, I got a reasonable error handling system in C. But whenever I interacted with anyone else's code, they apparently didn't get the memo that this is possible and desirable.

A language should encourage writing robust/secure code, not just make it possible.

I certainly know people who run NixOS in commercial production. It's hardly "clownware".

> I suspect that hardware without an MMU is not super likely to be able to support XIP.

This seems strange to me. Don't most microcontrollers support executing directly from flash? Some even can't execute from RAM.

Though I agree with the main point, you can compile code as "PIC" - position independent code, and not bother with (ELF) relocations except for linking.

Sorry, it's you. You basically told people that they should expect bugs in old code and shot down the proposed fix without offering any other solution; that's non-constructive by definition.

Sure, I don't want to take their right to appeal, and I only make that comment as a neutral observer. This is my smallest issue with the process, the discriminatory requirements are a bigger problem.

It should be about features and price, but those only matter after you clear the bar. At least in the Czech Republic, you can't bullshit your way through the requirements like you can with job interviews, these things are actually checked.

Also here you can't sue directly, you can file a complaint with the oversight bureau, which regularly happens just because a competitor is mad at not being selected, but that's a different problem...

I'd sign up for tenders, but they all seem to require a company with "1 million EUR revenue in public sector <whatever> projects" and 5 people with various roles, degrees and X years of experience in <whatever>.

I'm just a freelancer with FLOSS experience and some commercial experience, and so are plenty other FLOSS contributors. Nobody's going to create a company and hire staff just to have a chance at getting selected in the one tender a year that allows outsiders in.

The idea might be that only companies which have already proven themselves elsewhere can enter, but 1) then why the "public sector work revenue" requirement? And 2) that's not going to work for industries where government interest is much larger than private interest, like FLOSS.

But I suppose governments prefer the certainty that Accenture or local equivalents bring - a price an order of magnitude too high for a mediocre result and a 25% chance that the project will be fucked up and shelved, over the uncertainty of a small startup, who could either deliver something great, or overexert themselves and not finish at all...

As far as I can tell, it requires forcing GitLab to render a malicious org-mode file. I don't really see a way to do that without authenticating and uploading one. Am I missing something?

Nextcloud, the mentioned Roundcube, plenty non-Wordpress CMSs, many internal tools I work with daily...

There's also this writeup: https://www.wiz.io/blog/php2shell-php-rce

It seems to have a few more technical details.

I tried it too in a clean Debian Trixie container and got no crash.

You don't need formal education to have agreeable political opinions and write good polemics.

The GPL is the only reason they even get that. More enforcement would certainly be good, but it's not like the GPL is worthless without a legal team backing you up.

It's really cool what can be done today with just an MCU that has sufficiently flexible IO. What's the performance like?

I'm not too concerned about my place of residence, since the state already publishes my full address online. But OSM edit history also shows the various places you visit, with timestamps too. I still haven't decided if I want to do something about that or not. It's certainly something new contributors should be aware of.

If you're making a commercial SaaS, that's probably the way to go. For individual users like me, with a coding harness and some extra BYOK tools, OpenRouter is convenient and the few extra percent don't hurt much. I appreciate being able to try out any new model with just an ID swap, same with inference providers when they prices change. I know I wouldn't enjoy managing 5+ accounts, each with their own balance, in 3+ tools, so this is one thing I'm happy to outsource.

From my understanding what's keeping us from this kind of dystopia are restrictions on shrinkwrap agreements, general restrictions on one-sided contracts, and the fact that breach of contract "only" creates civil and not criminal (like copyright) liability.

I don't have any numbers on fan art vs original works floating around the web, but even those original works aren't being monetised via copyright. They would be created even if copyright was abolished or significantly weakened.

> There are murders so why make it illegal.....

The downsides of murder clearly outweigh the upsides. The fact that we're debating here shows that's not the case for copyright.

> ...somebody having the rights to a cartoon mouse in perpetuity isn't actually holding society back is it?

People want to adapt that mouse into their own works, as they have done with stories since stories started being told. They do so even if they know they're breaking the law. That alone should be reason to reconsider copyright.

We all stand on the shoulders of giants, and reusing facets of modern stories isn't somehow less creative than reusing old stories or reusing lived experiences. You can take the general story beats of a popular work, strip out all copyrightable elements, and end up with something wholly derivative. You can also build on a known work and end up with something that's fresh, creative, maybe something that engages readers/watchers/listeners of the base work in a way that nothing fully original could. Take Harry Potter and the Methods of Rationality; it clearly reuses another work's characters and setting, but it would be worse off without it.

> You're free to buy or not buy any creative work.

You also don't have to rent/buy a place to live, but I wouldn't want to live a life without a roof over my head or access to creative works of my culture. When you accept that access to media is a necessity (and people today do treat it as such, just try finding someone who doesn't listen to music, watch videos, read books...), you clearly see that having copyright is a decision made by the state that results in wealth transfer from every citizen to authors and publishers.

Those authors/publishers do provide value, so it's not necessarily a bad thing, but as with every market intervention, the specifics need to be carefully considered.

You could establish contracts with publishers outside of copyright, which is how NDAs work today. It's probably a reasonable thing to do anyway, otherwise there's nothing stopping a publisher from telling everyone the plot summary of your newest novel.

As others have pointed out, piracy is already easy for anything remotely popular, yet people still buy books. We could assume that it's not because they fear breaking the law, but because they want to support the author and have an "authentic" copy.

There are also other models than creating a work without any income, then recouping that cost by a state-granted monopoly. You can release preview chapters and then solicit donations from interested readers. You can build on your reputation and then promise to finish the book later for some up-front payment. These might not work for everyone, but they are in wide use today. One could argue that removing options for those authors that depend on copyright today is still a reasonable price to pay for removing all the abuses of copyright.

Most of that art is being created irrespective of copyright, though. Much of it uses exceptions to copyright and some is straight up in violation (most "fan art"/fanfiction). It's either not monetised or monetised through things like Patreon.

I wouldn't say we have more "traditional" art that an author spends time creating with the vision of selling copies for years to come, than we did when copyright terms were shorter.

Theoretical aphorisms can't override the facts of recorded history. If the harsh border control and cultural isolation of the East Bloc ran counter to Marxist principles, then you can complain to the dead leaders of the USSR, but that's about it.

It is strange. I certainly wouldn't think your house, having been isolated from western society over decades by a communist regime and heavily-patrolled borders, would respond to social activism in foreign countries. But maybe there's just some secret house mycelium for sharing progressive ideas that I don't know about.

I don't remember any LGBTQI+ wars here in the Czech Republic, so "blood free" actually seems like a good characterisation. Sometimes the system just works.

See also the Velvet Revolution for a pretty large shift away from totalitarianism without any deaths.

Not always. Consider an SPA that connects via WebSockets and streams in data, adding points to a chart. The JS-less alternative would be refreshing an SVG or even the whole page once a second. The SPA is clearly more efficient here (unless someone screws it up badly).

Sadly complexity is unavoidable for most real-world usecases. Just see how so many people interested in de-Googled phones balk at the prospect of losing access to banking apps. Telling them to go use an OS that doesn't support Bluetooth isn't going to work, but hopefully you wouldn't say that means they should give up all hope of security.

Abstraction has served us well in managing complexity before. I wouldn't abandon it out of misplaced idealism.

> pay bureaucrats with your consumer's money

Once the consumer has paid, it's your money now. The incentive is clear, less packaging means more money you keep. That only big producers will actually see the per-ton payments as significant instead of just having to pay absurd registration fees is a separate issue.