Sophira

> if the firewall is misconfigued, then your NAT may not be working either.

But in that case, it's very obvious because your access to the WAN side of your router won't work from anywhere except the router itself.

I like this "fail-secure" nature of NAT. If your firewall fails on a network with globally-routable IPv6 addresses, it might not be so obvious as traffic might still flow through.

I'm curious now, did you develop the sending program at the same hotel, and if so, did it work?

(My guess is probably not, but you might DoS the other stream while you're sending your own.)

They did have a method to recover their account that they tried, though - they said that they used the account recovery codes, but that they were rejected. (Those would be the codes that Google gives you when you initially set up 2FA.)

If anybody is wondering, the music in this video appears to be "Alonia" by Valante. Very soothing.

They were making the comparison to HTML attributes for my benefit.

I haven't used Tailwind, but as someone who regularly has to deal with CSS created by Tailwind, I have to wonder why they're even using CSS at all. It feels like going back to HTML 3.2 attributes. How is 'class="bg-white"' any better than 'bgcolor="white"'?

There is one thing that Tailwind is good for, and that's for making sure people can't override your CSS easily. Anybody who's ever used Stylus to override Tailwind-created CSS will know this pain.

(That said, I think this site is rather... abrasive. That doesn't help anybody.)

[edit: Also, in case it's not obvious, I'm not actually advocating for making sure people can't override your CSS. Please, please let me override your CSS.]

Tom Scott did a video in 2020 on the exact same subject and premise[0], and it's super interesting. I'd recommend it to anybody who enjoyed this article, honestly.

[0] https://www.youtube.com/watch?v=V5u9JSnAAU4 - Tom Scott, 'I Asked 64,182 People About “Jingle Bells, Batman Smells”. Here's What I Found Out.'

I'm pretty sure the page itself has existed before then, just at a different location. For example, here's a page from 2000 that's in the Internet Archive that looks kind of similar: https://web.archive.org/web/20000115232652/http://www.shibum...

It probably won't work in new Chrome versions. I'm pretty sure it's a Manifest V2 extension (it would have to be in order to dynamically block requests in the way it does), and Chrome stopped supporting MV2 extensions this year[0].

[0] https://developer.chrome.com/docs/extensions/develop/migrate...

It somehow feels right to see what GPT-5 thinks of the article titled "Machine learning works spectacularly well, but mathematicians aren’t sure why" and its discussion: https://karpathy.ai/hncapsule/2015-12-04/index.html#article-...

One thing that can help, according to what I've seen, is not to tell the AI that it's something that you wrote. Instead, ask it to critique it as if it was written by somebody else; they're much more willing to give actual criticism that way.

Those still only work for text. What I'm trying to say is that it's possible Stallman was considering that "screenshot" means "dumping a graphics buffer to disk". In the case of text mode without the framebuffer, there is no graphics buffer to dump (at least, not one that's accessible on the computer), therefore the best you can do is dumping a text buffer instead.

You can of course synthesize a new image based on the contents of that text buffer (and that would almost certainly have been fine for the purposes of the question), but you can't dump a graphics buffer that doesn't exist.

He would absolutely have known about script(1).

He was using text mode at the time in 2002. The term has something of a technical meaning that he was likely referencing. To be precise:

1. He was using a virtual console (ie. what you get when you press Ctrl-Alt-F1 and similar if using X), not an X terminal.

2. The virtual console was very likely not using a framebuffer (which would be a graphics mode), but was in fact just the Linux kernel's standard text mode output for virtual consoles, using the BIOS font.

Making a screenshot of such a text mode as a graphics file is actually not really something you can do. For the most part, the best you can do is to synthesize an equivalent image from scratch by rendering the text using another program.

That's likely what he meant when he said that he didn't know how to do a screenshot. Yes, it's overly specific, and the person who asked was probably just wanting to see what he was looking at on the monitor, which wouldnt require an exact pixel-for-pixel copy, but there you go.

This, exactly.

I had heard before that Lisp had something called "macros", but I didn't know exactly what they were or how they differed from C macros. This blog post kind of explains that, but not in a way that couldn't also apply to C macros if you tried hard enough.

I want to know more, but I didn't have any examples here to look at. I may look them up now that I have an idea.

Just because most advertising is abusive doesn't mean that all of it is. The popups that Steam shows when you open it are definitely still advertising, as are the recommendations for other games and things like that.

Ironically, this is exactly the reason why most other ad networks go to such lengths to track you, because they think they want to show you ads you'd find relevant and thus worthwhile to click on.

Unfortunately, the way the ad networks go about doing this means that they're actually incentivising making money by any means necessary over actually showing relevant ads, so you get ads that are psychologically abusive, full-screen ads that pop up in the middle of a game, ad networks selling off the data they have on you, etc.

That is why I will permanently have an adblocker - since this is how things work now - but why I don't care nearly as strongly about the Steam ads.

I feel like many other companies would have bought out the technology and then applied for patents to stop anybody else from developing similar things.

This is what you get when you go completely the opposite direction, and it's wonderful.

People were probably already tricked into learning assembly when they played Human Resource Machine.

A lot of people think it's a "teaching programming" game, and it sorta is, but it's actually teaching assembly language skills!

At least in some circles, the real meaning of "end-to-end encryption" was being addressed. For example, in the field of credit card processing, here's an article from 2009 which talks about how people back then were misusing the term: https://web.archive.org/web/20090927092231/http://informatio...

Granted, it's a marketing piece trying to sell a product, but still.

Unfortunately, blindly installing dependencies at compile-time is something that many projects will do by default nowadays. It's not just "more amateur developers" who are at risk here.

I've even seen "setup scripts" for projects that will use root (with your permission) to install software. Such scripts are less common now with containers, but unfortunately containers aren't everything.

I understood what you were saying. I was continuing on from your point that the different SDK versions only support a limited range of devices, by noting that by updating the SDK, the range of devices that your app will work on will be, at a minimum, the minimum supported device for that SDK.

I'm sorry for being unclear.

It's also worth noting that app stores tend to have a range of SDK versions that they will accept for new uploads. (For iOS apps on the Apple App Store, the minimum is currently the SDK for iOS 18[0], and in April 2026, that will change to a minimum of the SDK for iOS 26[1]).

In some cases (such as with Google Play), app stores will even unpublish apps that were built with old versions of the SDK.

In other words, if you want to update your app at all, you have to stick to the rules that they provide regarding SDK versions.

[0] https://developer.apple.com/news/upcoming-requirements/?id=0...

[1] https://developer.apple.com/app-store/submitting/

Unfortunately, it appears to have been vandalised. Pretty much every post on the front page now is one with the same title of "{N-word} {gay slur}".

[Edit: Looks like it's been fixed.]

Did you have to supply your personal details to anybody in order to get that free number?

Phone numbers were never supposed to be secret.

Nor were social security numbers.

Where can I find more information about this? I had never heard that they use two computers like that before.

To be clear, it's not LLMs creating the captions. Whisper[0], one of the best of its kind currently, is a speech recognition model, not a large language model. It's trained on audio, not text, and it can run on your mobile phone.

It's still AI, of course. But there is distinction between it and an LLM.

[0] https://github.com/openai/whisper/blob/main/model-card.md

About 10 years ago, I got an email from Microsoft of all people(!) which to any reasonably security-trained person would look entirely like a phishing email:[0]

1. It said "Dear User" instead of a name/username;

2. It talked about how they were upgrading their forum software and as such would require me to re-login;

3. It gave me a link to click in the email without any stated alternative;

4. It warned me that if I didn't do this, I would no longer be able to access the forum;

5. The domain of the URL that the link went to was not microsoft.com, but a different domain that had "microsoft" in it.

It was a textbook example for how a phishing email would look, and yet it was actually a legitimate email from Microsoft!

I haven't had any others like it since, but that was an eye-opener for sure.

[0] https://reddit.com/r/facepalm/comments/32ou4z/microsoft_what...

[Edit: Fixed a detail I misremembered.]

> They broke down their attacks into small, seemingly innocent tasks that Claude would execute without being provided the full context of their malicious purpose.

This part, at least, sounds like what humans have been doing that to other humans for decades...

One thing worth noting, these checks and restrictions only apply if you're using the original F-Droid repository.

Many times I've seen the IzzyOnDroid repository recommended, but that repo explicitly gives you the APKs from the original developers, so you don't get these benefits.

Their hypothetical does have weight, though. Damn near every desktop/laptop computer does have "a hidden little core running a hidden little OS" nowadays, after all.[0]

Obviously this particular one isn't in non-Intel equipment, but...

[0] https://en.wikipedia.org/wiki/Intel_Management_Engine