flumpcakes

You are of course correct. I completely forgot about him. Jeremy Corbyn could probably be lumped in as an elected official. There is a pretty virulent form of left wing in the UK who argue that Russia is good because it's imperialism is somehow justified (I think it boils down to anti-NATO sentiment.)

> obvious bias

The rise of a few right parties with sympathy to Russia was on my mind. Although that talk has seemed to have quieted with more national issues taking up breath.

The UK has allies in the region. Kuwait was bombed just yesterday. And a UK airbase was targeted.

Are you arguing that the entire world should never provide aid to other countries? Surely you're just calling for imperialist powers to gobble up the planet piece by piece.

Who "owned" it before? There were no people on that land before it was settled.

Context matters. Did the UK start a war with Iran? Or did the UK decide to hit surrounding countries (France, Norway, Netherlands, etc.) to destabilise the region and target an Iranian airbase in Spain?

I would assume there's a bunch of countries around Iran that appreciate UK's help in intercepting missiles.

I would assume there's a bunch of countries around Iran that don't appreciate the US starting a war of choice.

The UK has only allowed the US to use their air bases to strike Iranian offensive capability and intercept missiles launched towards middle eastern cities. Iran bombed an airport in Kuwait yesterday, for example.

It's pretty obvious how the the UK's actions vs. Iran's, or even the US's, are different.

Source? The UK has been extremely vocal about defending Ukraine's sovereign rights and has spent a lot of money supplying it with defensive equipment.

Russia despises the UK. The UK does have a few right wing pro Russia people, just like the US does. Just like most of Europe does. It is the fringe view and not reflected in state policy.

The UK doesn't have some imperialist policy of land grabs like Russia, or diplomacy through violence. In the current Iranian war the UK is only allowing it's bases to launch defensive missions, i.e. strike offensive capability or incoming missiles. So no, it is in fact the defense sector.

What countries have a defense sector, if the UK doesn't?

What has /etc/hosts got to do with valid TLS certificates? I think that’s a non-sequitur.

Thank you! This website is dreadful for accessibility and usability.

> I mean there's already a lot of hardware that has gotten more expensive in the last 5 years.

The vast majority of the price rise is mainly due to AI companies sucking all the air out of the room and everyone investing in "AI" regardless.

If China gets their process down to match US/Korea/Taiwan and they decide to flood the market to drown out competitors then hardware is going to be an order of magnitude (or two) cheaper than it is today.

One would assume that the "market cap" of the company is equivalent to it's *worth*. Asking how Anthropic is worth $1tn+ is a valid question when it doesn't do much, apart from the promise of making a large fraction of the world unemployed and the rest under the thumb of unethical American tech supremacy. It's arguably built on the largest intellectual property theft in the history of mankind. That's generally what people worry about. Whether that's "true" or not I guess is how you frame your world view.

This is a shocking mistake for a 'fintech' to make. This is supremely basic stuff.

Another blog post ignoring capitalisation making it difficult to read.

There's a lot of people writing bad code. With AI being forced top down (with the promise of turning people into 10x-ers), we're going to get a lot of people writing bad code 10x faster.

I really do worry - I especially worry about security. You thought supply chain security management was an impossible task with NPM? Let me introduce to AI - you can look forward to the days of AI poisoning where AIs will infiltrate, exfiltrate, or just destroy and there's no way of stopping it because you cannot examine the internals of the system.

AI has turbo charged people's lax attitude to security.

God help us.

The price of hardware (DELL, HP), and the price of enterprise software (VMWare, Nutanix, etc.) has increased an insane amount in the last 12 months. In our case some of the services it has been as much as 6x. Hardware quotes are rising 10-20% per week. Delivery dates are months out.

It has become so bad that we're considering moving to the cloud for our on-premise workloads. Only problem is some of the cloud providers in the areas we operate from have run out of compute.

I've tried many times to sign up but never got in/received an email - I'd like to join, even as a "lurker".

This is something I have struggled with:

How to deploy secrets during bootstrap to a new virtual machine running in the Cloud that does not leave a trace in the infrastructure. And in a way that I can completely automate the deployment.

One answer is providing the secrets in cloudinit - but this leaves a trail on the host/provider's infrastructure, I do not know if those configs I paste into the portal then get saved off somewhere.

The other option (more secure) is having the keys/secrets generated on the host itself at first boot. But then this is difficult to automate as I would need to scrap them (even just the public parts) in a secure way. One option would be to have the public keys printed to the terminal/VNC - but this is much more trouble than it is worth to automate.

I'm not sure on a good solution. This is taking quite an adversarial security model though, assuming the host/provider is not completely trustworthy. Of course not owning the hardware means that the host/provider could be performing other attacks without my knowledge (copying memory, etc.)

> Couldn’t the MITM ssh server just forward the client’s fingerprint to the legitimate server?

Fingerprints are derived from the certificates/private keys. Unless I don't understand some basic crypto, or SSH works in some obtuse way, I do not think it would be possible for the MITM attacker to present the server with the true client's fingerprint unless they also had had the client's private key.

Definitely not true in the UK. This is extremely rare for it's generosity. I've never seen anything like this in the UK.

7 days from disclosure to publishing a how-to guide to get root to the entire planet doesn't scream "responsible" disclosure to me.

How does Pi+Qwen (local) compare to Anthropic's offerings? Surely you're not getting the same breadth and quality of output using Qwen? How is the performance?

I managed to buy one, I also have no intention to sell it anytime soon. I do wish there were better protections against scalpers though, they are a blight.

This is hilarious!

Wow. I didn't realise how much I miss that era of web design. Reminds me of PhpNuke/game clan sites.

Seems like grandstanding bad faith to me. They didn't even bother to follow the established disclosure policy for this project because the author feels this quality of the code is so crap, so instead does this...

Did the author actually disclose this RCE or just open random PRs and claim there's an issue?

It doesn't appear like the author is acting in good faith, instead grandstanding in public because they feel superior.

I quite obviously don't. Please engage in good faith.

Why do you post the same anti-EU stuff on every thread about anything remotely related to Europe?

The more people boast about AI while delivering absolute garbage like in the example here, the more I feel happier toiling around in Nginx configurations and sysadmin busy work. Why worry about AI when it's the same old idiots using it as a crutch, like any new fad.

One of the biggest, I would assume in the current year, blockers to an IPv6 only world would be the fact that the major "cloud" vendors do not support it.