It was a bit sad. Old man talks about existential risks of AI, gets scared, leans hard into "we'll use AI to save ourselves" as a gambit for hope.
932 karma · joined February 23, 2015
It was a bit sad. Old man talks about existential risks of AI, gets scared, leans hard into "we'll use AI to save ourselves" as a gambit for hope.
Security bug fixes
PR: Critical: fix: prevent template expansion from interfering with git repo initialization. When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized.I don't get the reference. Is this a startup origin story?
The self-hosted space is another headache. I wasted so much time trying to make smaller self-hosted auth solutions work, since Keycloak has a reputation for being heavyweight.
I looked into the Ory stack extensively trying to actually use it as advertised for self-hosted / open-source auth. It's aggressively gimped and its SSO features are emphatically _not_ open-source and are gated behind licensing, with no way to find out until you're actually running it.
It's also just unfinished. Their "stack" is a lot of cobbled-together Go mixed with incompletely rebranded acquisitions like SAML Jackson (now "Polis"), which they managed to gut so completely it went from a best-in-class OSS library to unusable.
The idiomatic way to do this would be to parse, don't validate [1] each string into a relevant type with a record or record struct. If you just wanted to return two results of the same type, you'd wrap them in a named tuple or a record that represented the actual meaning.
[1] https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...
[1] Pre-Teen Terrorists: FBI’s New Target: https://www.kenklippenstein.com/p/pre-teen-terrorists-fbis-n...
[2] FBI Echoes QAnon Pedophile Conspiracy: https://www.kenklippenstein.com/p/fbi-pushes-qanon-pedophile...
[3] What are "Nihilistic Violent Extremists"?: https://www.kenklippenstein.com/p/what-are-nihilist-violent-...
dav2d is the fastest AV2 decoder on all platforms :)
Targeted to be small, portable and very fast.
If you're out of the loop like me: AV2 is the next-generation video coding specification from the Alliance for Open Media (AOMedia). Building on the foundation of AV1, AV2 is engineered to provide superior compression efficiency, enabling high-quality video delivery at significantly lower bitrates. It is optimized for the evolving demands of streaming, broadcasting, and real-time video conferencing.
- from https://av2.aomedia.org/While we're barreling toward climate catastrophe? That's not the criticism you think it is.
From a quick look, it still requires all of the resource specification to be present in the AppConfiguration, and it's written in their own DSL called KCL. Is there more to the use case that I'm missing?
It seems like if I'm already specifying the details of the entire workload, I'd either use Terraform, where I probably already know the DSL, or Pulumi, where I could skip the DSLs entirely.
They do, it's called WinUI 3. It's barely used for all of the aforementioned.
> You can even find a letter where their lawyers send a refund request for the 2017 maintenance fee ($250) because Novo apparently wanted some more time to see if they wanted to pay it.
> On the same date in 2019, the office sent a letter saying that “The fee payable to maintain the rights accorded by the above patent was not received by the prescribed due date. . .”
> By that time it was $450 with the late fee added, but that was apparently too much for Novo. They had a one year grace period to make it up, and apparently never did, so their patent lapsed in Canada. And as the Canadian authorities remind them, “Once a patent has lapsed it cannot be revived”.
Impressive failure for "the second-largest semaglutide market in the world."
> The pope has condemned clickbait as a “degrading” part of journalism, at a private audience with global newswires.
> “Communication must be freed from the misguided thinking that corrupts it, from unfair competition and the degrading practice of so-called clickbait,” he said on Thursday.
My first impressions of it:
* The cloning was decent at imitating voices, but the prosody is quite bad
* There's noticeable crackling in the GGUF models and the quality drop from base model to Q8 was significant
* Q4 models are apparently bugged on platforms outside of Linux
* The speed is nowhere near realtime even using all the latency reductions (Q4 backbone, pre-encoding, ONNX codec decoder), it was still lucky to hit a real-time factor of 4x
> Optimised for on-device deployment - provided in GGML format, ready to run on phones, laptops, or even Raspberry Pis
All of this testing was on a beefy 24 core AMD with 64GiB of RAM. There's no way this model would even come close to realtime on any Pi I know.
> Business owners just couldn’t see the use case for changing stations. Hilger says he was trying to sell the device to “men in their 50s who never changed a diaper in their life.”
> A new brochure — this one depicting a woman on her hands and knees changing her baby’s diaper on a disgusting bathroom floor– did the trick. “We had to make them feel guilty,” Hilger says.