Shank

For the record, those providers already charged a significant premium for the equivalent compute you could get at Hetzner and OVH. The margins have decreased but they've had a profit margin on compute for a long time.

> Have no clue what's going on in the back

Hetzner and OVH and other bare metal but low cost providers use commodity hardware. When that commodity hardware increases there is simply no other option. The secret to the success of these providers is using common off-the-shelf hardware instead of specialized server hardware, which is now being cannibalized.

> In one case, investigators in Kanagawa Prefecture found that a Sri Lankan national had set up roughly 600 shell companies. He also allegedly submitted business manager visa applications for at least six Sri Lankan nationals by listing them as company presidents on paper, even though they actually worked manual labor jobs.

It shouldn’t surprise anyone that the government has a problem with this practice. The problem is trying to create a system of requirements that is both feasible to put on paper and also testable. When the issue was raised, the income requirements were changed as an immediate reaction, but the ISA has broad authority to grant or deny based on many circumstances.

Put differently, acts like this were already illegal, but difficult for the ISA to catch. So they changed the base requirements which are theoretically much easier to catch than the actual illegal behavior.

Of course not. It is clearly a fun toy.

Liquidity has value too. Many FTX customers needed immediate liquidity. If you need immediate liquidity the value proposition years later is meaningless for most people because most people can’t get any bridge financing to cover the gap.

Mt. Gox also ran a fractional exchange for a long time until the bottom fell out. The trouble is that you simply can’t run an unannounced fractional exchange.

Is there any information on if this is the same attack vector (orphaned packages that were adopted)? I believe they already locked down adoption, but maybe also a combination of existing maintainers being taken over?

That's correct, orphaned packages could be adopted seemingly automatically, so someone did and then published malware in bulk.

Neither one of these did anything on Opus 4.8 / Max.

I’m on an M1 Max device and the GPU performance drops have not gotten back to Sequoia levels on Tahoe patches. Golden Gate hasn’t changed anything either.

Automated systems that don’t sleep and are often programmed to aggressively scrape and are limited only by compute capacity outstripped humanity? I am not surprised by this at all.

> But why is my business software doing the same?

Shopify runs a payment network called Shop Pay, and that network has relationships with the credit card companies like Visa. Honestly how do you expect to transact in goods that almost nobody will do business in? Even if you have the listing, what supported Shopify payment system will do the business?

For context, Japanese mobile lines for children include net filtering by default. Also, mobile lines require positive ID to get, so you can't simply get a burner mobile line. A phone number that can send or receive phone calls or SMS is tied to a real world identity, and transferring is illegal.

So, a neat way of requiring ID checks is to simply offload these things to carriers with phone number validation.

In contrast, the US is an example of a country where getting a phone number with no stringent ID check is trivial and it can easily do SMS and phone calls without a second glance.

*ID verification was recently tightened to require reading the IC card data from My Number Card (the national identity card) or in-person KYC for non-IC card users (like a copy of family registry).

I've tried Thunderbird, Kmail, and Apple's client, and maybe I just have too many emails, but these apps completely crumble under my inbox. I don't see any "shine" with these third-party clients. Mimestream, my favorite email client on macOS, "just works" because it uses the Gmail API. It seems like Fastmail made JMAP, but this doesn't seem widely supported.

Are there mail clients that actually support things like priority inbox and categorization that don't simply crumble for large inboxes?

When China mentioned this to Apple, Apple agreed, and “Everyone” is not the default and also not available for more than 10 minutes now.

I use a GPD Win Max 2 for this purpose (https://fluctlight.net/gpd_win_max_2) and while it has its quirks, the performance of a Ryzen APU is significantly better than the Chuwi Minibook X.

I think my desire for this kind of product is something lighter, but this set of notes on the Chuwi feels like the compromises GPD gives you but with less power.

It’s absolutely crazy that the land of GDPR can legally implement a tracking mechanism this invasive. I guess this is legal because it doesn’t use cookies, and they “obtain consent”?

The thing that made Nightmare think it was a backdoor is that the bug is only present in the recovery version of the DLLs, not the one built into the system, and not prior versions of Windows. It’s also for a file system feature that Microsoft hasn’t “touched” in ages and they consider fairly esoteric.

We’re already almost halfway through this year. A demo half a year ago isn’t shipped. This is like when Apple demos something at WWDC that doesn’t ship until 9 months later in spring the following year.

I feel like newest is almost always spam, or low quality things. I have showdead on, so I'm kind of biased though.

I personally don't find a need for "agents" to use my Desktop. If the agents need to access data, they seem to manage perfectly fine with other APIs. I'm not going to switch to macOS just so that agents can click buttons on a UI for me.

It's kind of like how if you owe the bank $1000, you have a problem, but if you owe a bank $100M, they have a problem. You just can't reasonably ignore a huge portion of the class as a professor without a serious amount of documentation, and proof that you've tried to escalate and solve the issue. Ultimately, people are paying for these courses, and it's probably better to teach something rather than nothing.

I’m a huge fan of fiber optic cables instead of DAC. For one thing, the distance you can run is far greater. For another, they don’t get as hot as metal cables, particularly at high speeds. OM3 and OM4 is actually quite affordable and SFP+ is nice.

Yes on an absolute sense, DAC can be cheaper, but for a homelab or something, it’s not that much different. Also, it’s much cooler to run fiber optic to things (imho).

> Does Cowork help with reading email?

Yes. It can read email.

I find it great for Japanese, provided you search in the Japanese language mode.

> Rockets failing in test flights isn't a bad thing.

I hate to be pedantic but for a whole host of environmental reasons, they are suboptimal, and it still incinerates money to lose a rocket during a flight test.

The problem that software engineers and product teams often face is that the time from roadmap to feature is quite long, and AI has offered a clear, meaningful speedup to some parts, like writing tests and boilerplate. In many cases, the same ticket flow can be managed much faster with AI. So, what? We're not quite at the point where people have transitioned this into demand for more product deliveries faster. As soon as that occurs, it doesn't matter how great the AI is, because the current pace will be slow. Why stop at what the current roadmap is? Why not ask for double the features? When we gave everyone power tools that didn't dramatically make construction easier, it just enabled more complex buildings.

You can leave via Strongbox (a KeePassXC client), which supports the new export system that includes Passkeys.

> As a former GCP consultant, I can share that these sort of shut downs aren't random and it's usually due to the customer not being compliant - that breaks cloud compliance requirements for the big clouds, so automated systems flag it. Eg. Someone serving CP on their CDN, for instance.

If this was the case it would obviously be horrific. I did check to see, and I noticed that Railway is not listed as an ESP who sent any reports to NCMEC / CyberTipline in 2025, which seems like the wrong number for a hosting provider. Maybe they just have absurdly good customers.

https://www.missingkids.org/content/dam/missingkids/pdfs/202...

> If the timestamps are accurate, what was causing the errors 10 minutes before the account was suspended?

Assuming the timestamps are accurate, Google probably started terminating resources while the account was not "suspended" and only completed that after all resources were disabled.

I would say, first and foremost, the era where a developer machine with source code access also has access to meaningful security systems should be over. Internal repository access should mean nothing. It's just text files. It does look like this is the case here, where there aren't actually meaningful outcomes from this, but this should be the case everywhere. Isolate these systems from each other. GitHub compromise could happen at any time, even from GitHub themselves.