trog

Would be keen to see a blog post on this topic that shows if/how the quality differs from the source fonts!

Sadly yes, it's a whole stack (built for her by a vaguely technical cofounder who has since left the business) with a bunch of business-critical plugins, including Woocommerce for handling credit card payments via Stripe and another plugin handling bookings. It's amazing for what it is but it is a bit of a nightmare to keep going.

Heh, but for better or for worse, a bunch of people have built businesses out of WordPress and its ecosystem. One of them is my aunt, which is why (as a designated family tech support person, though she does have a part time developer) I'm watching this thread closely!

But then WordPress stops working :)

I have one site on WPEngine and they haven't said anything [that I've seen]

Have you tested this against a POC to see if it actually mitigates? Seeing a lot of proposed mitigations but with very little detail about whether they worked or not.

Especially when the alternative so often is "I [vibe-]coded a TODO app, go look at it!"

Adding some narrative to it made it more interesting to me, not less. I actually saw the post because of the wall of text and enjoyed reading it!

I wonder how they account for free credits given in this spend. We got given US$5k free API credits from them a couple months ago and even accounting for our Claude Code subscription spend, I think we're still ahead overall - they haven't made any money from us! And they just gave us another few hundred bucks a month of API credit as part of our subscription.

Not like those genius Elon and American minds thinking "oh yeh rocket engines on cars makes a lot of sense", you're saying?

Feels kind of weird that Windows Defender doesn't have something that catches this kind of behaviour? I mean if you have the Defender settings jacked up you're not going to be able to run executables anyway without a bunch of mucking around which should at least stop accidental running, but feels like some heuristics to stop these kinds of stealers should be a high priority for the Defender team. Not sure how you'd go about it though?

The bosses desperately want you to use AI for Dev work but they want to watch you doing it in person for some reason

John Gruber from Daring Fireball wrote an explainer for this just today, which I think explains it for a lot of people that would otherwise prefer not to be there - they will hold their nose and visit because there are still a lot of big accounts that use it as a major channel for publishing information: https://daringfireball.net/2026/10/x_once_again_marks_the_sp...

That domain doesn't work for me so maybe they already blew it up?!

This just feels like more of the war on local models. I expect to see a lot more FUD about this as hyperscalers desperately try to push the message that local models are incapable to keep people on the teat.

Heh, I work for a freight forwarder and spent half the day yesterday explaining to customers that the margin of error on their containers is currently between 1 to 2 weeks.

Is that an old problem, or a problem that is still in this new v12?

Also can highly recommend the Dan Band version of Total Eclipse: https://www.youtube.com/watch?v=cIRiZsDObrU

Any idea if it's any good? I used the old Lucene implementation ages ago and thought it was OK, though wasn't using it in a big way.

I think part of the problem is that Google has conflated the "mark as spam" button with "unsubscribe" and people just mash it as a shortcut to "make this email go away".

Exactly my experience a few years ago (it not working is directly related to how little I use Facebook today). You might stop getting stuff from that specific page or account or whatever but you certainly continue to get related stuff.

+1. Bit nervous about their new pricing/licensing model but so far all the major stuff I use is in the OSS side.

Same! And I feel weird about it. The only issue I have is sometimes the task switcher hangs or fails and I can't easily switch tasks, but aside from that it ticks a lot of boxes.

Given how easy it seems to be to convince actual human beings to vote against their own interests when it comes for 'freedom', do you think it will be hard to convince some random AIs, when - based on this document - it seems like we can literally just reach in and insert words into their brains?

This is elitist nonsense. Maybe this user didn't do everything right but people are hacked regularly through zero fault of their own.

you can replace the word "PHP" in this post with any other language and it would still be true.

You can set this up in a non-production environment and realise a lot of the benefits. It would also help you figure out better ways to manage your logs such that you can improve signal-to-noise ratio in monitoring solutions and alarming.

Not convinced "AI" is needed for this sort of around the clock pen testing - a well-defined set of rules that is being actively maintained as the threat landscape changes, and I am pretty sure there are a bunch of businesses that offer this already - but I think constant attacking is the only way to really improve security posture.

To quote one of my favourite lines in Neal Stephenson's Anathem: "The only way to preserve the integrity of the defenses is to subject them to unceasing assault".

What actually happens in most (small) businesses is one person gets lumped with all these jobs and the business is regularly surprised they're constantly over-worked and under-delivering

Very curious what sort of workloads are being talked about here that have the intensity that have C or Rust or Go extensions are necessary? I can certainly believe they exist but I'd be really interested to find out more and why it makes sense to add this complexity into the stack and not solve in other ways.

My last two Pixel phones - 6a and 7a - were both "recalled" with battery issues. I got almost a complete refund for both, and got keep the phone (my 7a died a few months after the recall, 6a is still going strong).

I got a 9a to replace them just because I didn't want to have to deal with learning iPhone, but I'm fully expecting the 9a to fail with a similar issue so looking at buying an iPhone soon as a backup so I can get up to speed.

Would love some more info about how redaction works. We currently use Acrobat Pro for redaction mostly because of 'trust' issues, but I'd love to replace it with a web tool. I just need to convince our CFO that it's safe.