e2le

>They replied within a few hours. The response was straightforward: the illegal content would be removed (and we verified that it was), and they had never received any previous notifications about those URLs.

They never notified archive.today of the illegal material, instead they chose to demand blocking actions of archive.today from a DNS provider. I would be interested to know whether any other DNS service providers have received similar such demands.

I would assume (like any normal individual), that you would notify the service first (archive.today) and if they've proven to be a non-responder to CSAM material then escalate to legal action.

If archive.today is honest about never receiving a prior notification, then the way in which they've decided to go about removing the illegal material is very suspicious.

I wonder if they are simply pasting your criticism into an AI prompt.

https://github.com/little-book-of/c/commit/349d475a5922cf005...

They fixed this "mistake" a few minutes ago.

https://github.com/little-book-of/c/commit/43b0a89852a507bdd...

I'm at the point now where I simply stop reading the article once it has too many red flags, something that is happening increasingly often.

I don't enjoy reading AI slop but it feels worse when users of AI tools have chosen not to disclose the authors of these articles as Claude/ChatGPT/etc. Rather than being honest upfront, they choose to hide this fact.

Although not what you asked for, the SQLite authors maintain a list of recommended compilation options that should be used where applicable.

https://sqlite.org/compile.html#recommended_compile_time_opt...

If it's not passing the test suite, then why is it even considered for inclusion in a distribution like Ubuntu?

Ubuntu is likely used by 10s of millions of servers and desktops. I'm not sure why this kind of breakage is considered acceptable. Very confusing.

I'm not convinced that this is the correct answer. These policies also affect wealthy individuals and wealthy individuals want to be healthy (I assume).

An examination of the individuals in the EPA pushing this change might reveal something. Perhaps it's ideological? I don't know, I'm at a complete loss.

The craziest thing I've discovered is that unattended-upgrades does not timeout after failing to download pkgs from security.ubuntu.com AND will NEVER release "dpkg/lock-frontend". It will happily keep failing to download new pkgs, NEVER printing any error messages that I could see to the journal or a log file ("/var/log/unattended-upgrades"), and preventing the user from using apt because it holds a lock that it refuses to give up.

The process doesn't even respond to "systemctl stop unattended-upgrades" or SIGTERM. Only "kill -9" ends the titan grip it has over my systems.

Edit:

Out of curiosity I ran a packet capture, during the 8 minutes it was running, unattended-upgrades (apt) received 4MB and sent 182KB of packets. Given the unattended-upgrades package is installed by default on Ubuntu and the "apt-daily-upgrade" timer will run every 24 hours ((archive|security).ubuntu.com has being down for longer), I can only imagine that there must be millions of machines reaching out, repeatedly and uselessly, attempting to download new pkgs without any timeout over and over again.

Seems sensible. Only 2.6% of users (with telemetry enabled) are using 32-bit Windows while 6.4% are using 32-bit Firefox on 64-bit Windows[0]. 32-bit Linux might see more use however isn't included in the stats, only 5.3% of users are running Linux[1] and I doubt many enable telemetry.

Maybe they could also drop support for older x86_64 CPU's, releasing more optimised builds. Most Linux distributions are increasing their baseline to x84-64-v2 or higher, most Firefox users (>90%)[0] seem to meet at least x84-64-v2 requirements.

[0]: https://firefoxgraphics.github.io/telemetry/#view=system

[1]: https://firefoxgraphics.github.io/telemetry/#view=general

> open source P2P chat messaging with encryption

Tox/aTox [0][1] fits that description and both continue to be developed.

> Empower criminals so that they cant use this excuse to target civilian infra.

According to one webinar from CSIAC (2023) [2], XMPP is popular with Tox slowly catching up.

[0]: https://github.com/TokTok/c-toxcore

[1]: https://github.com/evilcorpltd/aTox

[2]: https://csiac.dtic.mil/wp-content/uploads/2023/03/CSIAC-Webi...

> A pivot by Intel in 2021 resulted in the deprecation of SGX from the 11th and 12th generation Intel Core processors, but development continues on Intel Xeon for cloud and enterprise use.

https://en.wikipedia.org/wiki/Software_Guard_Extensions

I'm not so sure. Many people still ran Windows XP/7 long after the EOL date. Unless Chrome, Steam, etc drop support for Windows 10, I don't think many people will care.

Disturbing that anyone would knowingly vote into power an individual who abused children.

Basic research is important science and is in societies best interest to support it.

A quote from Carl Sagan’s, Demon Haunted World.

> We are rarely smart enough to set about on purpose making the discoveries that will drive our economy and safeguard our lives. Often, we lack the fundamental research. Instead, we pursue a broad range of investigations of Nature, and applications we never dreamed of emerge. Not always, of course. But often enough.

https://archive.org/details/B-001-001-709

I don't believe a user lacking the ability to perform a microcode update impacts their freedom in any meaningful way. The CPU still executes whatever instructions it's given unless the user is deprived of that freedom.

What is the rationale for changing OpenSSH into a socket activated service? Given that it comes with issues, I assume the benefits outweigh the downsides.

>By all means, use AI to learn things and to figure out potential problems, but when you just blindly assume that a silly tool is automatically right just because it sounds plausible, then you're doing us all (the curl project, the world, the open source community) a huge disservice. You should have studied the claim and verified it before you reported it.

https://hackerone.com/reports/2887487

Given the limited resources available to many open source projects and the volume of fraudulent reports, they function similar to a DDOS attack.

NASA has a positive ROI for the American economy. Hastily making cuts into programmes that generate significant economic and scientific value for your nation is a losers strategy.

I'm sure it'll also have other deleterious effects on the economy such as brain drain which would be difficult to reverse.

https://www.space.com/nasa-economic-impact-us-2023-report

Not entirely related. Some scam health products are made with radioactive material[0,1] (thorium dioxide) and can be found in wands, baby clothing, pendents, cards, wristbands, face cream, toothbrushes, and more.

Even more concerning given that these products will shed that radioactive material into the environment and be ingested by humans. The "quantum wands" as shown in the YouTube video are filled with a sizeable quantity of thorium dioxide powder and is possible to forcibly open.

They are illegal but continue to be sold.

[0]: https://www.youtube.com/watch?v=C7TwBUxxIC0

[1]: https://www.youtube.com/watch?v=3BA5bw1EV5I

How will websites survive if they can't serve malvertisements to users?

>AI replacing CEOs seems straightforward as well.

I'm not sure I want AI replacing all CEO's, ideally it would raise the bar for quality and performance forcing human CEO's to compete.

Thunderbird is quite healthy and received $8.6M in donations in 2023[0] which is used to employ 24 people[1].

Unlike Firefox, donations are used to fund development.

[0]: https://blog.thunderbird.net/2024/10/thunderbird-annual-repo...

[1]: https://blog.thunderbird.net/2023/05/thunderbird-is-thriving...

I can't imagine why that would be reasonable for an environment that demands a higher degree of security.

I imagine the most ideal situation would be 1) minimising the number keys, 2) use hardware backed authentication or certificate based authentication, 3) lock up the private keys somewhere safe.

The idea of 41 points of failure that can SSH into any starlink terminal is not appealing.

It would've being interesting if they had published those public keys.

Perhaps I'm misunderstanding something but this could just mean their own equipment is compromised in some way. I wouldn't be surprised if they were using personal computers to conduct their work and downloading/executing any software they find on GitHub without regard for malicious code or supply chain attacks.

archive.today has a snapshot taken on 28 Feb 2025, although it doesn't show any repository with that name.

https://archive.ph/fUa5Q

I believe uBlock Origin can automatically do this by enabling "EasyList – Cookie Notices" in the extension settings. If you have this extension installed, there's no need to install another.

>At the minimum I'd hope they a) do away with the worthless cookie banners requirement b) cut some generous but reasonable slack to small organizations.

Cookie banners aren't a requirement unless you wish to store cookies that aren't strictly necessary (statistics, marketing, etc)[0]. Cookies that are essential for the user to browse the site (login tokens) don't require consent.

It doesn't help the situation that a large number of sites seem to maliciously comply with these regulations.

[0]: https://gdpr.eu/cookies/

> sudo apt update && sudo apt install extrepo -y sudo extrepo enable librewolf sudo apt update && sudo apt install librewolf -y

The problem, at least for me, is that it requires confidence and trust to give away what is root access to my system and my life and hope they don't intentionally or unintentionally abuse it (malware). I'm sure they are trustworthy people but I would be lying if I said it didn't fill me with anxiety.