I don't see any clear evidence in this article that blogpost and PR was opened by openclaw agent and not simply by human puppeteer. How can the author know that PR was opened by agent and not by human? It is certainly possible someone set up this agent, and it's probably not that complex to set it up to simply create PR, react to merge/reject on blogposts, but how does author know this is what happened?
People in the west are so used to freedom of speech and so focused on problems with social media. They miss the fact, that many authoritarian governments in Asia see freedom of speech in social media as a threat. They are not banning Facebook to improve quality of life, they want to limit freedom of speech.
I don't think you read the post you are commenting about. Article says explicitly what is the problem with problematic content. It explicitly mentions rape and incest content.
Trade, education, health services and IT saw jobs losses. More jobs in leisure and hospitality. Impact of tariffs is still not clear, also not clear how the tariffs will look like. I suspect uncertainty plays a role. Employers reluctant to hire if they are uncertain about future. Good thing it may justify lowering interest rates
I’m 100% sure there are many badly written inefficient crawlers that are wasting server resources and resources where they run but I use feed readers a lot and it is very hard to find well maintained feeds. Many servers also use cache related headers incorrectly or don’t use them at all.
key piece of info at the end, looks like they are leaving the spending on datacenter to OpenAI
> Microsoft’s alliance with OpenAI may also be evolving in ways that mean the software giant won’t need the same kind of investments. In January, OpenAI and SoftBank Group Corp. announced a joint venture to spend at least $100 billion and perhaps $500 billion on data centers and other AI infrastructure.
IMF forced them to drop, but if they want to use crypto as legal tender, why use BTC which has high transaction fees? Why not something with low or zero fees and efficient chain? There is million of crypto out there and most open source, so govt could even launch their own coin on top of existing chains.
so this gives an average yearly salary of 230k. Very close to FAANG senior salary with much more risk, effort and (probably) worse life-work balance. OP quit from google in 2018 and ran some other business, and this is his biggest sale so far. I think it shows how hard it is to make better money outside FAANG even when extremely talented and lucky like OP. But it's probably more about lifestyle choices.
He used retrohunt service which is part of virustotal https://virustotal.readme.io/docs/searching a service that allows developers to scan files for vulnerability. Apparently, virus total stores files and allows third parties to rescan these files later. Sounds like a vulnerability of this service and terrible practice. How can you expose your user files to any arbitrary access? Of course you should not put your secrets into file you upload to some virus scan, but how many users know that file they upload will be accessible publicly?
> what could be considered ADHD/light asperbergers
could be considered, or did you get a diagnosis from a specialist? Self diagnosis is not reliable. If you don't have an official diagnosis you can't be certain you really have ADHD. There may be several differe tfactors relevant for YOU that make keto diet work for you. Same diet can be harmful for similar people who have ADHD.
there are other factors here. Children diagnosed with autism at the age of 5 must be adults now to determine if they can live alone. So they were diagnosed at minimum 13 years ago, with many diagnosed much earlier. Autism diagnostics is much more common now than it used to be, especially in families with higher economic status. Diagnostics tools evolved, more kids are tested and tests capture more kids. So I think this number will be completely different in 10-20 years from now. In my experience as a parent of ASD kid, many kids now considered ASD would not be considered ASD 20 or 30 years ago.
It is terrible decision by Nissan, but the article makes false clickbait claims about "disposable cars" when in reality all functionality prevoiously exposed via app will still be available via car touch screen.
It is complicated. Most people in Poland do consider themselves part of Europe, sometimes even part of the West. At the same time people in Poland often contrast the West (as in Western Europe and US) with Poland and perceive west as something different and better. It is sort of post colonial mentality but with a twist, because it is not tied to race. This idealised “West” is often very far from real situation in Western Europe. On the other part of the spectrum you got polish conservatives who see west as degraded and fallen. They used to say things like: France no longer exists. Meaning France is not what it used to be; it is not true west because they lost the spirit of real west.
Never noticed any issues with snap, but truth be told I seldom use it for installing anything. If someone is unhappy with snap why use it? There is no requirement to use snap, usually you can get .deb from somewhere, you can find ppa, or install from source.
biggest danger for advertising revenue is ChatGPT. I visit it much less often since GPT. ChatGPT is just so much better at answering questions. I feel like I'm 10 times more productive with GPT. No more searching 1000 duplicate stack oveflow questions to find this one answer that accidentally refers to your specific use case. Long time ago I also used to contribute to site, but this was really emotionally challenging because of so many noob questions and general toxic community.
I guess SO has really bleak future both because of competition from GPT and contributor burnout.
Wikipedia has protections against this. it is not trivial. Each change by random ip also has to be accepted by editor with permissions, and getting these permissions is not easy. It might be possible to bypass all abuse counter measures, but it takes a lot of effort and is not trivial
Regarding first vulnerability with gIt format, how can malicious party exploit it? Someone needs to convince you to run git log format with some unusual format specifier, right? And then they need to access some specific memory location this way so they still need to store something malicious elsewhere. Sounds like it would be really extremely hard for anyone to exploit this.
Overall fixing this it looks like routine house keeping and nothing major.
Large corporations will always win because they have the power and might. Remote work will just allow them to hire cheaply from low income locations and what employees are going to do about it.
how is git log -S more efficient? You have to write whole line, what if line is long? What if you need to look at several lines within some range. git blame is much better than your git log -S
it runs git rebase under the hood, in production environment with multiple people pushing to repo it will break things and it'll be spotted immediately. So this actually shows how hard it is to spoof commit author, you can't do it without leaving a trace, git is a solid system.
Great work finding this out, it was really fascinating read. Just wondering how do you publish compromised package to npm? CDN had to install some npm package right? Publishing some package is easy, but how do you publish something that is downloaded by Cloudflare? If it is so easy to publish compromised npm package and it ends up in cloudflare CDN it is quite scary, even if underlying security loophole related to overriding paths by tar is fixed.
Update from one of users in above thread, he got info from support
Update
Google support says this is a system issue they're having right now.
Anthony Price
8:36 AM
so it's a system issue, not a security issue?
Jessy R
8:36 AM
Absolutely, not.
Jessy R
8:36 AM
Not to worry! This is a bug and we are working to fix this so that our users do not receive such email and do not face any trouble.
The article doesn't present any sound evidence for hypothesis in the title. Manufacturing output has declined sure, but real gross domestic product grew and it is still growing. This means that maufacturing production is replaced by other sectors of economy: mostly services.
It seems logical to expect that in the future we'll have more jobs in services (e.g. tech) and less jobs in manufacturing. This is good for everybody, good for workers, because jobs in services are less dangerous, and good for economy too.
I think at this point it is clear that main problem with self-driving cars is not technology but social, psychological, political and legal challenges. People often forget that having good tech is just one step that does not guarantee any commercial success.
People dont change their habits just because new tech is available. People are not going to start buying or using self-driving cars just because tech is available. There is huge psychological and social environment around car driving - e.g. think about all legal paperwork you have to go through to start driving, learning how to drive, buying insurance, all traffic regulations. All this cultural/human factors are based on specific definition of what car is and they all rely there is human subject operating this car. If self-driving cars are really going to succeed all this huge extremely social framework would have to change. I don't think this will happen. I think there are simply too many strong human emotions and purely financial interests around cars.
Facebook IPO set target price to 38$. It went down immediately at extreme point falling down to 18$ a share. It only got back to 38$ after around one year. What is the price now? 137$ Not saying this will happen to Snap, just saying IPO-s usually show similar dynamics.