Sophira

To be specific, the zlib'd binary basically does this (except that it directly uses Linux syscalls to do so rather then C wrappers):

    setuid(0);
    execve("/bin/sh", NULL, NULL);
    exit(0);

That would suggest that CRYPTO_USER_API_AEAD=y in your kernel config. You can disable it in that case by setting that to "n", recompiling your kernel, and putting the new kernel in place.

Sadly, I can't read this page on my non-mainstream browser as the server returns a 403 Forbidden error.

I get the need to protect yourself from AI bots, but banning all but mainstream browsers from viewing your content isn't the way.

We are at war with Eurasia. We have always been at war with Eurasia.

I can't believe I'm saying this, but:

I wonder when the first AI-only discussion group will be created by an autonomous AI agent, and other agents invited to it, without any knowledge of it by their human operators?

(I seriously can't believe that I'm musing about this as a serious scenario. It sounds ridiculous, but it feels to me somewhat plausible.)

> Which is actually why the "files and folders" metaphor is apt.

It's a starting point, but I certainly wouldn't say it's the best metaphor that there could be. The idea of subfolders just doesn't make sense in a filing cabinet analogy, because you have to consider paper size - any folder which could fit into another folder is not going to be able to contain your regularly sized documents.

That said, I can't think of a better metaphor.

> I get the desire not to do that because you want to verify everything they do, but you can still do that by reviewing the code later on without the pain of step-by-step approvals.

It's a well-known truth in software development that programmers hate having to maintain code written by someone else. We see all the ways in which they wrote terrible code, that we obviously would never write. (In turn, the programmers after us will do the same thing to our code.)

Having to get into the mindset of the person writing the code is difficult and tiring, but it's necessary in order to realise why they wrote things the way they did - which in turn helps you understand the problems they were solving, and why the code they wrote actually isn't as terrible in context as it looked at first glance.

I think it makes sense that this would also apply to the use of generative AI when programming - reviewing the entire codebase after it's already been written is probably more error-prone and difficult than following along with each individual step that went into it, especially when you consider that there's no singular "mindset" you can really identify from AI-generated output. That code could have come from anywhere...

> the domain name expired

It's possible to tell from an rdap call that this isn't the case:

  Event:
    Action: registration
    Date: 1999-10-10T10:57:47Z
  Event:
    Action: expiration
    Date: 2028-10-10T10:57:47Z
  Event:
    Action: last changed
    Date: 2026-02-09T20:34:17Z

The current registration occurred in 1999. Typically, domain registrations are extended in yearly multiples, which can be seen by the fact that it expires on October 10th, the same day that it was registered.

If it expired in 2025, then that expiration would have occurred in October.

That said, you are probably correct that it wasn't a hacker as such. GoDaddy was indeed offering it for sale in February, according to a Reddit thread from that month[0]. That makes me wonder why...

[0] https://www.reddit.com/r/oldinternet/comments/1qy566h/is_zom...

Not to mention that the "concession", such that it is, will presumably only work if you sign into a Google account. Presumably, this will require that you have Google Play Services installed.

Of course, many people who want to de-Google their phones won't want to do either. This is an attack on people who want to keep their lives separate from Google.

Additionally: If you have adb access turned on, turn it off before travelling!

It's worth noting, though, that that config option was only introduced in kernel version 6.8! Before then the option didn't exist and you could write with impunity to mounted devices (as root, obviously).

I have to wonder how this will impact their partnership with Motorola. Presumably, Motorola will have more difficulty if they're found not to be complying with relevant law...

I hope GrapheneOS isn't completely banking on their partnership succeeding. If Motorola devices ever became the only devices that GrapheneOS works on, and it's being done with Motorola's blessing, then it could be more easily legislated out of existence.

Before yt-dlp started recommending Deno as its JavaScript runtime, I had no idea it even existed.

Since then, I know that it's there and that it's more secure than Node in some applications, and I can see using it being a good option. But it sounds like it might be too little too late? Going by this article, at least.

If you haven't already, check out https://pouet.net/ . It's almost certainly got the demos that you're interested in.

Now, remembering the titles of these demos might be another matter, but there are people who might be able to help with that too. Do you remember some scenes/effects from the demos that you were interested in?

It does matter, because the store page isn't just for buying - it's also for seeing system requirements, reading any applicable EULAs before purchase, and reading reviews. You can't do those from any other page on Steam.

Since the bundle is a separate purchase option and not replacing the option to buy TTD on its own, it also allows people to easily find out what they're in for by providing a description of what OpenTTD is, as opposed to just buying TTD on its own.

This looks like a great project, but there's one big problem that I can see...

If it's based on BitTorrent, then surely that means that anybody who has the content that you want to see (or who advertises that they have the content you want to see...) will be able to see your IP address? Like how the movie industry can catch people who are sharing movies on BitTorrent?

Obviously, an attacker wwould probably need to use a separate BitTorrent client to do this, because I'm sure the IP addresses won't be displayed in the app itself, but that seems like it could potentially be possible.

I really hope I'm wrong on this, because other than that seemingly-big privacy flaw, this seems pretty great otherwise.

You know, this makes me wonder... is anybody actually prompting LLMs with pseudocode rather than an English specification? Could doing so result in code that that's more true to the original pseudocode?

I'm with you on this, but I do want to point out that a big reason that people will update bundled libraries like that is because they don't want to put the effort in to see whether their bundled library versions actually have any critical vulnerabilities that affect the project. It's easier to update everything and be sure that there are no critical vulnerabilities.

In other words, the Microsoft Windows update process as applied to software development.

> If you imagine the absolute worst case scenario that every program shipped all of its dependencies and nothing was shared then the end result would be… a few gigabytes of duplicated data?

Honestly, I've seen projects that do this. In fact, a lot of projects that do this, at the compilation level.

It feels like a lot of the projects that I would want to use from git pull in their own dependencies via submodules when I compile them, even when I already have the development libraries needed to compile it. It's honestly kind of frustrating.

I mean, I get it - it makes it easier to compile for people who don't actually do things like that regularly. And yeah, I can see why that's a good thing. But at the very least, please give me an option to opt out and to use my own installed libraries.

Replying to myself because I actually found an even more relevant XKCD today: https://xkcd.com/1739

I've never quite understood why terminal emulators nowadays have GPU acceleration. They've not been slow for a long time. What am I missing?

Given that it's about food or medicine somehow, because of the mention of ingredients lists and health-related information, it's probably https://en.wikipedia.org/wiki/Dm-drogerie_markt (usually abbreviated "dm").

(I didn't know about that either before now.)

I imagine Office 365 is to Office 97 as FIFA 23 is to FIFA 97, in that it's still essentially the same idea and can never be otherwise, but the later versions are designed to draw new people in.

> Your $20 per year domain might suddenly become a $300 or $3000 per year domain for no reason but greed, and you wouldn't be able to do anything about it.

Seconding this. Tthis is exactly what happened with the .sexy TLD: https://www.reddit.com/r/Domaining/comments/uia8pc/sexy_tlds...

I get that this is technically interesting, for certain, but the sheer amount of energy and associated global warming risk needed to do something with >=99% accuracy that we've been able to do easily for decades with a guaranteed 100% accuracy seems to me to be wasteful to the extreme.

I think the answer is quite simply: Follow the money. General-purpose computing is scary to big, soulless corporations. They want you to rely on them, not to be able to do stuff yourself. (They want to keep that power for themselves.)

Age verification is the quickest road to ending general-purpose computing, because it plays on people's knee-jerk emotions. It won't do it by itself, but it'll goes a long way towards it.

In my experience, models do not tend to write their own HTML output. They tend to output something like Markdown, or a modified version of it, and they wouldn't be able to write their own HTML that the browser would parse as such.

Yes, you can. In my experience, models do not tend to write their own HTML output. They tend to output something like Markdown, or a modified version of it, and they wouldn't be able to write their own HTML that the browser would parse as such.

I wonder how good LLMs would be at Core War[0]? Perhaps by being given information on how well their program is doing?

[0] https://en.wikipedia.org/wiki/Core_War

You know, even though this would be a terrible idea, it would also be kind of fitting, given the movie's time travel shenanigans.