aneutron

Either someone is stupid enough to make this argument which I don't think is the case (The NT teams are crazy good), or they just want to use this opportunity to divert the blame, which is pathetic at best.

UAC, virtualization, hybrid kernel/user-space shenanigans, all were not in the OS at some point, and research and development, listening to other parties and taking inspiration from other OSes brought these advancements in security.

If Microsoft thinks offering kernel drivers for security (antivirus or otherwise) is a bad thing for the 3rd party companies, then by extension it is bad for any antiviral product they offer and they should absolutely find a new paradigm to securely implement them (eBPF like as some other folks suggested).

But saying "but apple does it !" is not a reasonable demande when your software runs respirators and nuclear facilities. (Apple are still cunts for having everything locked down but that's another conversation)

Krebs can sometimes be ... less than delightful, shall we say. But by god I do trust his due diligence and absolutely love when he brings the receipts to a metaphorical cat fight.

If that's the case, then the Hotels have the court case against the developers spelled for them, because this is highly illegal.

My opinion is quite simpler: GPT got the 1st mover's advantage from a marketing perspective, and until Google, Anthropic or another proposes something VASTLY revolutionary for the layperson, then it's unlikely they'll "catch up" (which is only a percetion ofc, perhaps a wrong one at that)

That behavior is completely stupid. I agree with Daniel on this, because if I choose to give my own CAs, there are two reasons: Either I don't have my CA in the OS bundle, or I want to validate specifically against a certain CA.

That means that this "feature" by Apple either adds more computation for nothing, or breaks the verification model that is expected.

Neither of these are an expected result.

This clause would absolutely not fly in a French court, and IANAL but IIRC US case law does allow for reverse engineering for interoperability.

In software business maybe that makes sense. In the business these companies are dealing, 100M is chump change that wouldn't even cover the airplane fleet and its maintenance over 5 years.

Well they could, but retrofit your Honda Jazz all you want, you will be getting pulled over if you're watching a movie on the tablet you're hanging from the windshield.

We have rovers on Mars and satellites and probably nuclear warheads using RTOS of all kinds and in cases even Linux, but sure seL4 is the only OS conceivable for those cases, obviously !

This is a case of fraud, industrial malfeasance and just plain dishonesty. The software component of the story and its security measures are not even at play. Sure they are probably shit (given the date parsing ...) but even FreeRTOS would make an amazing OS *IF USED PROPERLY *.

While I haven't met the guys in this case, I am familiar with their work.

Additionally, I am fairly certain they are not stupid enough to not have kept detailed, forensic-quality records of their actions and whatever they dumped. Sure it may not stand up in court as evidence but it will be more than enough to show that they didn't pull this out of nowhere

Well, the same way a man with drive, discipline and money but very little in the way of technical expertise can build a company.

Sometimes you need someone who can drive a project and recruit the right people for the project. That person does not always need to be a subject matter expert.

Haven't worked at Microsoft, but usually, when folks up high have their balls at stake, resources and budgets magically start getting approved faster than the Concorde.

Maybe I'm reading too much into it, but for me it is us framed as if they won't be working on GPT-based products, but on research.

The whole thing reads like this to me: "In hindsight, we should've done more due diligence before developing a hard dependency on an organization and its product. We are aware that this was a mistake. To combat this, we will do damage control and continue to work with OpenAI, while developing our in-house solution and ditching this hard dependency. Sam & Co. will reproduce this and it will be fully under our control. So rest assured dear investors."

This a Linux thing.

Essentially, in an operating system you need a way to "draw" things on the screen. And a way to properly "move" the boxes "draw".

Previously, the usual* way to do that was using XServer (XOrg). Now you would imagine that the server would take commands from applications, and would draw them. But it was the inverse (for various historical reasons)! However, the most egregious thing was that it ALWAYS ran as root. And while tries had been made to reduce the attack surface, it had to fundamentally change (I am skipping over other parts related to performance, scalability, or future proofing).

And that's where Wayland comes in, and literally flips the whole thing on its head. Now the issue is XOrg has been around for maybe 40 years or more ! And that was not going to change easily. Distros did their absolute best to allow double use, but adoption grew very slowly. Eventually, supporting and testing for two envs will grow complicated.

Anyway long story short, almost everything about Wayland is better IMO, actively supported and is the future. But migrating to it has been complicated because they were undoing 40 years of habits, hardcoded bugs that grew into features, and had to come up with new testing.

This is something I typed up rather quickly so please take a peek at the Wiki page for Wayland you will find a much more complete history

It's like using 'to google' instead of 'to search'. I was attempting to reference the DMCA-class of regulations about copyright protections

While I admire the valor in trying to get it undone under the privacy umbrella, Youtube can easily state that it is not a matter of privacy but a matter of DMCA (anti-circumvention mechanism) and at that point it a whole can of worm.

I genuinely believe this game of whack-a-mole would end if Youtube stopped being greedy and offered a simple plan, than offered ONLY no ads. No stuffing of other products like Youtube Premium or whatever the case may be. You can keep static ads like they used to be, but let me pay 6 or 7€ per month and just not have intrusive video ads.

Youtube, I don't want Youtube Music or Youtube Shitnuggets. Give me a plan where I pay 5€ a month just to watch youtube with no fucking ads. Is that not enough ?

I can't really blame them. The essence of it is "if you see hooves think horses not zebras".

The human body is usualy one resilient bastard, so the ol' "tylenol and come back if it gets worse" is a good tactic for 95% of the cases.

But detecting those 5% cases probably takes A LOT of dedicated bandwidth from the whole medical process, so unless there is some clear manifestation that it's not horses but something else, I think it is reasonable that some will not investigate further.

You are right, I was thinking of stapling but wrote HSTS. Thanks

While if possible, it's the best course of action, the truth is these days additions like HSTS make it extremely difficult to MITM.

Additionally, MITM and trying things out on a toaster are one thing, doing the same on a 40k$ machine that can potentially make it impossible to do your commute is another.

This is IMO a prime example where the double team rev eng is key to success: one documents the API, the other uses it without having access to code (whiteroom)

Part of me thinks the world would be better if Apple bought Kagi and pumped enough money and talent into them to make them the next Google Search

If this is true, this has to be one of the most epic greed and ignorance fueled fails I have heard of in this industry.

The surprising bit is not one of the execs thought about consulting with the tecchies probably ...

Not sure the linked project is the up to date one.

I regularly use the 'cryptography' package that has a 'Fernet' object in 'cryptography.fernet'.

And it is in cryptography so I trust they maintain it at least a bare minimum.

It is an amazing blackbox that assures me I can just provide a key and a ciphertext and rest easy that my data is correctly decrypted and autehnticated !

I completely agree with your assessment and I was in the same boat where I wanted to live there despite all of that.

And while I do believe that having a more open immigration policy may be beneficial (it's practically the cheat code for declining populations), I genuinely believe they would do much more if they focused on strengthening their social safety net (unemployment, parental leaves), cracking down on the toxic work cultures (much more aggressively, not in the current way, where they favor employers over employees and use social shame for everything, although that's Japanese culture in a sense ...), and making family minded policies (massive tax breaks or direct aid for children)

So this URL just jumped to me opened by the extension. I instantly uninstalled it, and reported it to Mozilla.

I hate that I have to, but I have to.

Thank you so much for that link. I have been wondering for a long time why OpenGL was relegated to the graveyard, and that post has painted the picture for me.

Oh man, my memory must be bad. I remember the conhost.exe and the whole PTY stuff being closed source for some reason. Either way it will make for a very nice rabbit hole for one of those week-ends :D

Thank you and every one of your team members for the excellent work you guys have been doing on this. You have brought so much joy to working and living w/ Windows.

There's an excellent blog post by the product manager I believe that explains the history of the CMD command, how terminal emulation works in Windows, and the work they were doing.

The way I understand this project is essentially "an interface" to the new ConPTY they developed (which IIRC is closed source, naturally).

That doesn't make it any lesser. I've used it since a build was available, 4 years ago or something. I love it.

EDIT: Found it ! https://devblogs.microsoft.com/commandline/windows-command-l...

They "tricked" my little sibling into upgrading, by essentially threatening that "this message will keep popping up until you upgrade".

I was about to comment the exact same thing. This book's bottom upwards approach is something that gave amazing insight on how well designed the Internet and computer networks are. I will forever be grateful to these guys for making free so a broke student like I was could afford that knowledge.