0x00cl

> At that time, Torvalds responded that SHA-1 is not the real security mechanism used in Git and, as a result, even a full compromise of the hash function would not necessarily be a problem.

It seems that the usage of SHA-1 is interpreted as a security mechanism while Linus used it mainly for other reasons, such as look up speed and deduplication of objects.

You can read the original README file when Linus created git[1]:

>+TRUST: The notion of "trust" is really outside the scope of "git", but

>+it's worth noting a few things. First off, since everything is hashed

>+with SHA1, you _can_ trust that an object is intact and has not been

>+messed with by external sources. So the name of an object uniquely

>+identifies a known state - just not a state that you may want to trust.

> ...

> +Another way of saying the same thing: "git" itself only handles content

> +integrity, the trust has to come from outside.

Yes if SHA-1 is broken, then content integrity can be broken but to me it looks like Linus at the time looked it from the point of view of corruption of files instead of "malicious" files.

[1]: https://git.kernel.org/pub/scm/git/git.git/diff/README?id=e8...

I think this change is more to do with politics rather than "security". Those kind of things where companies or gov, need to be certified with those super secure certificates and can't be using software that uses SHA-1. I don't have proof, but I'm not doubting it either.

This is what I saw in one of the mails. > > There are organizations where SHA-1 is blanket banned across the board - regardless of its use

And also on git 3.0 breaking changes. > > SHA-1 ... recommended against in FIPS 140-2 and similar certifications

Since SHA-1 isn't used for security in git, they should've instead moved to a non-cryptographic hash function such as MurmurHash3 and avoid all these problems, instead of moving to SHA-256 until SHA-256 is broken and need to move to the next cryptographic hash that is now incompatible with previous versions of git repositories.

I have tried En Croissant and its personally its a nice GUI and easy to use. It allows you to download stockfish and others right from their GUI.

Hey, I took a look at your project, I'm not someone who deals with schematics or KiCad but I'm still interested in these kind of things. I read the motivations in the docs and understood why would someone try to create a new language after looking at SKiDL, but still feels like it could've been simply a python library/package instead of having to do the work of creating a new language and having to deal with the language and interpreter/compiler. I'm sure a more object oriented approach would have made it a better experience to script schematics, specially with all the tooling Python has (such as `uv` to manage project, `ruff` to lint and format, etc). Regarding your language, just wondering why does led and supply need quotation marks but resistors and capacitors that some not only include numbers such as (10k) don't need to. It feels unnecessary to make that difference, specially for a script that tried to be simpler

This is just a false dichotomy. Sure researches want money, credit but not at the cost of harming users or doing illegal things.

You could run a DNS server and configure the server with a whitelist of allowed IPs on the network level, so connections are dropped before even reaching your DNS service.

For example, any red-hat based linux distro comes with Firewalld, you could set rules that by default will block all external connections and only allow your kids and their friends IP addresses to connect to your server (and only specifically on port 53). So your DNS server will only receive connections from the whitelisted IPs. Of course the only downside is that if their IP changes, you'll have to troubleshoot and whitelist the new IP, and there is the tiny possibility that they might be behind CGNAT where their IPv4 is shared with another random person, who is looking to exploit DNS servers.

But I'd say that is a pretty good solution, no one will know you are even running a DNS service except for the whitelisted IPs.

I'm not sure what you mean by Socrates was proven dead wrong.

The study you linked doesn't show that people are becoming dumber because of LLMs, its just showing that when you offload tasks to these tools your brain engages less in that specific task, just like you'd do with a calculator, instead of doing complex calculations on paper, the calculator will do them for you, or when writing and using a spell-checker or using a search engine, instead of opening a book and searching. The question is whether in the long-term cognitive capacity is reduced, and like I said before this argument predates LLMs (All the way back to Socrates)

Also, take the study with a grain of salt as this is a small sample with only 54 participants for a single task on a short term study.

Personally, I believe LLMs just allows us to have a higher level of abstraction.

> We should be very concerned for the next generation. When you have the constant temptation of digging yourself out of a problem just by asking an LLM how will you ever learn anything?

This is just the same concern whenever a new technology appears.

* Socrates argued that writing would weaken memory, that it would create only superficially knowledge but incapable of really understanding. But it didn't destroy it. It allowed to store information and share it with many others far away.

* The internet and web indexers made information instantly accessible, allowing you to search for the information you just need, the fear is that people would just copy from the internet, yet researching information became way faster, any one with Internet access could access this information and learn themselves, just look at the amount of educational websites with courses to learn.

Each time a new technology came and people feared that it could degrade knowledge, the tools only helped us to increase our knowledge.

Just like with books and the internet, people could simply copy and not learn anything, its not exclusive to LLMs. The issue isn't in the tool itself, but how we use it. The new generation will probably instead of learning how to search, they will need to learn how to prompt, ask and evaluate whether the LLM isn't hallucinating or not.

Maybe here you'll find what you are looking for: https://www.w3.org/Daemon/

Though you can browse and download the latest version 3.0A (1996), there is a directory where they have older versions, but its a bunch of files mixed up with different versions. https://www.w3.org/Daemon/old/

Ladybird as a project is not that old, and it's still in pre-alpha, if they are going to make important changes then it's better now than later.

Well, Google has marketed Android as an open source operating system (AOSP) and openness about the system [1] and encouraged manufacturers and developers to build on it based on the premise of openness and of course being "free". People advocated for Android because it was open source compared to other alternatives. But with this change they are simply ending that openness. People that have developed F-Droid and other alternative stores have contributed to the platform value (such as not being able to de-google their phone), the same goes for many other developers who have spent countless of hours developing for Android.

To say they don't owe you nothing seems like a betrayal on the promise that Android was an open platform (and open source).

> You are free to not use their products or start a company to compete

That's not an option as you are making it out to be. For a user switching means buying a new phone, repurchasing apps (if you bought) and maybe apps won't be even available to the new system, for developers that means all their knowledge about the system gone. Building a mobile operating system requires millions if not billions of dollars, years of work and convincing developers and businesses (hardware makers) to use your operating system. The barrier to enter is so high that telling people to just compete with Google is not a realistic solution.

[1] https://blog.google/company-news/inside-google/around-the-gl...

There is a big collection here: https://cyber.dabamos.de/88x31/

How are you making money on this side project?

I love Kingly. I've been playing it everyday.

This is what DeepSeek said:

> 1. Existing guidelines already handle low-value content. If an AI reply is shallow or off-topic, it gets downvoted or flagged. > > 2. Transparency is good. Explicitly citing an AI is better than users passing off its output as their own, which a ban might encourage. > > 3. The community can self-regulate. We don't need a new rule for every type of low-effort content. > > The issue is low effort, not the tool used. Let downvotes handle it.

My best guess would be that plugins are limited into what they can do within VSCode, and rewriting a whole IDE/Text editor just for AI Agent seems a lot of work.

For example a while back vscode-pets[1] plugin became popular and tried it and noticed that the pet can only live within a window, whether its the explorer section or in its own panel, I thought it'd be more of a desktop pet that could be anywhere within VSCode but apparently there are limitations (https://github.com/tonybaloney/vscode-pets/issues/4).

So my guess is that forking VSCode and customizing it that way is much easier to do things that you can't with a plugin while also not having to maintain an IDE/Text editor.

[1] https://github.com/tonybaloney/vscode-pets

> cheap SCART to HDMI convertor

From my understanding this is the "bottleneck" in quality for older systems (at least in gaming consoles), converting Analogue to Digital. Which is why "RetroTink" sells different converters from ~$100 up to $750 (RetroTINK-4K Pro). I've seen a few videos comparing cheap generic USB converters with more expensive upscalers and there is a noticeable difference in image quality

I played it, and it was fun. Some feedback (I'm on mobile) is that it needs UX improvement.

At first I wasn't sure what I had to do, it simply throws you into the game, and it's easy to get confused with the numbers around it, because usually if there are numbers, there is going to be somewhere (usually at the bottom) the numbers and the clue for each of them.

It took me a bit to find how to get the clues from the vertical words (double tapping).

The onscreen keyboard isn't very responsive in the sense that I had to tap several times the backspace to delete a letter.

It doesn't allow to play again :(

Hey Jordan,

I gave it a try and look for the locations, specially the 3rd one that does indeed look like it could be in Chile.

For the 2nd picture I found an island in the French Polynesia that has very similar colors and characteristics, might be its around that area, 8°56'10.8"S 139°34'41.2"W (-8.936304553977038, -139.57811272908305)

For the 3rd picture I found many locations that look like your picture but really couldn't find one. The first one is around Mexico, though it probably isn't 27°32'39.0"N 114°45'00.5"W (27.544166, -114.750130). And the second one are islands close to Morocco 28°01'54.4"N 17°16'22.9"W (28.03198233652239, -17.27306308433365) though the angle is not the same... As a bonus for the 3rd picture, I did find in the Andes mountain something that looks like your picture: 33°38'11.7"S 70°07'01.4"W (-33.636446, -70.116968). So maybe you should also look around mountains.

At least from what I've seen in Chile the coast is usually very rocky and the water is usually lot of waves, and in the picture it looks really smooth. (Though I don't know how zoomed out the picture is)

Wow, that looks fun and probably get to learn a lot about algorithms.

I don't have any feedback, but rather a question, as I've seen many repositories with people sharing their algorithms, at least on GitHub for many different languages (e.g. https://github.com/TheAlgorithms), what did you find that was missing from those repositories that you wanted to write a book and implement hundreds of algorithms, what did you find that was lacking?

So...

* Nvidia invests 5 billion in Intel * Nvidia and OpenAI announce partnership to deploy 10 gigawatts of NVIDIA systems (Investment of upto 100 billion) * This indirectly benefits TSMC (which implies they'll be investing more in the US)

Looks like the US is cooking something...

YouTube has been pushing for longer videos for a while now. I believe it has to do with getting more money for ads. I remember YouTube updated their guidelines suggesting creators to create longer videos (10+ minutes for better monetization)

I couldn't find a source (other than my memory) though, the earliest I could find is a reddit post from 2016 https://www.reddit.com/r/PartneredYoutube/comments/4v6bmy/wh...

I see you are using ollamas ggufs. By default it will download Q4_0 quantization. Try `gemma3:270m-it-bf16` instead or you can also use unsloth ggufs `hf.co/unsloth/gemma-3-270m-it-GGUF:16`

You'll get better results.

Maybe the need/want data.

This is such a weird take. This is not a problem per se on the technical level.

> Perhaps we need to rethink discoverability and identity on the internet in ways that are more intuitive for ordinary users

Isn't this why search engines became popular in the first place? Because they "solved" discoverability? And before Instagram and WhatsApp existed, they worked fine.

Isn't the reason businesses moved to Instagram and WhatsApp is because people moved to those services? and not the other way around.

> Every single one was moved offshore by an American business looking to reduce costs and increase the quarterly bottom line.

> This time, it's by adding a new tax on Americans on what they buy from overseas.

If adding/increasing tax on product oversees increases the costs of said products, wouldn't American business look to reduce cost by moving back to America?

If I understand correctly that's what Trump is trying to do.

New recycling discoveries for plastics is good news, but at the same time I feel that people and specially governments should be promoting the old 3R or the 9R framework (Refuse, Rethink, Reduce, Reuse, Repair, Refurbish, Remanufacture, Repurpose, Recycle and Recover)

It seems people forget that _recycling is and should be the last thing_ we do with objects/materials that we don't use anymore, it requires energy to create a new object and at the same time recycling materials doesn't always recover 100% of the original materials.

Lets get creative

- There will be a "Predictions for 2026" thread. (Hehehe)

- OpenAI announces GPT-5 will be the last model of the GPT-n series (As in they won't release a GPT-6)

- Apple will sell a backpack (With some sort of technology included of course)

- Magnus Carlsen will lose his 1st place in the FIDE top ranking. ("He has held the No. 1 position in the FIDE world chess rankings since 1 July 2011")

- E.T. will get a sequel

I think he might be talking about the "relations" tab. You can see the "Contacted IP addresses" section that claims to be "contacted IPs by the file uploaded to virus total". If you click the IP some will have detections and flagged as bad or criminal.

https://www.virustotal.com/gui/file/dcca6afb6ac9770d4d3425c3...

Says it contacted 45.66.35.11 and you can see its a tor relay https://metrics.torproject.org/rs.html#details/7EA6EAD6FD830...

Though haven't looked at how yt-dlp works, I'd guess yt-dlp might attempt to use tor network in case some IP or network is blocked and can't reach a server.

If you are bored you can read the discussion when _mnot_ tried removing 418 status code from different languages and implementations because it wasn't technically correct.

https://github.com/nodejs/node/issues/14644

https://github.com/golang/go/issues/21326

And someone even ended up making a website http://save418.com/