panzi

I googled a bit and found this snippet:

            <plugin>
                <artifactId>exec-maven-plugin</artifactId>
                <version>3.5.1</version>
                <groupId>org.codehaus.mojo</groupId>
                <executions>
                    <execution>
                        <id>Generate-shared-lib</id>
                        <phase>package</phase>
                        <goals>
                            <goal>exec</goal>
                        </goals>
                        <configuration>
                            <executable>bash</executable>
                            <arguments>
                                <argument>generate-lib.sh</argument>
                            </arguments>
                            <environmentVariables>
                                <JAVA_HOME>${env.JAVA_HOME}</JAVA_HOME>
                            </environmentVariables>
                        </configuration>
                    </execution>
                </executions>
            </plugin>

At least with certain plug-ins Maven will execute arbitrary commands at build time. And if you need that to build native bindings it feels like a big hole. Granted, most projects don't need JNI, I guess.

Wasn't it more like this?

    <style>
    @keyframes blink {
        0% { visibility: visible; }
        50% { visibility: hidden; }
        100% { visibility: visible; }
    }
    
    blink { animation: blink 0.7s steps(1, end) infinite; }
    </style>

    <blink>This guy blinks.</blink>

Plus the lock file doesn't just contain the exact versions, it contains hashes. Making sure that you actually got the package in the exact same version.

How does Maven handle JNI? Is it also a build system for C/C++, or do packages with native bindings require manual build steps?

Last I checked npm had 2FA for publishing, but cargo didn't. I don't think cargo is any better than npm, just not that of an attractive target.

A good part of it is already implemented in web crypto, which is supported by browsers and node. There is a chance that npm could implement something there without extra dependencies. Maybe I'm too optimistic?

Does Debian 12 have this patched? But I guess I'm not affected if I don't use `rewrite` or `set` anywhere?

Is NTSYNC used for anything else other than wine/proton?

So are certain states of the USA: https://www.ipvanish.com/blog/ban-vpns-us-privacy/

It's horrible everywhere. If you're in the EU go donate to: https://epicenter.works/ They're a citizen rights NGO working against all that BS in the EU (and in Austria, where they're from).

We should assume that multiple state actors already are using it.

What use cases do you see?

watch?v=oHg5SJYRHA0

I forgot who it was, but someone on YouTube said LLMs already work hooked up to gidra. If true it's only a matter of time once they find similar things in e.g. Windows. I'll wait half a year to a year (think of embargo) and if there still isn't such work for Windows I'll conclude that LLMs have a problem disassembling binaries.

Just wanted to write the same comment!

What are they doing with proprietary binary blobs? I thought it's open source.

Also fair use is much more limited in the EU. Don't know how it applies here or if there where any rulings. Are you going to stop doing business with the EU (and Japan etc.)?

Other than putting something into the public domain I don't really know any open source licence that doesn't require at least attribution. One can assume that 99.9% of training data had some sort of license requirements, so just blindly using it is a copyright violation. People just don't seem to care.

They didn't enter in any obligations. It's a donation.

Wait, wasn't that OpenAI, not Anthropic? Lost track of all those AI companies.

Oh, not OS/2 Warp.

I didn't think about their involvement with the American military. That changes my view on this.

It simply won't happen. There would be riots, mass exodus of sponsors, and forks that simply patch out any such "feature".

I think the worries of artists over gen AI are valid. I guess all the better that some of the money of those "not yet" profitable AI companies goes to a good open source project and not to some of their usual practices.

No data goes to Anthropic from Blender. At all. See also: https://fund.blender.org/funding-policy/

And Blender tries to get funding from many different donors so that no single one can have any sway over them. Anthropic, as disgusting as they are, are just one more donor. Epic, Nvidia, Google, CoreWeave are also patrons. I don't worry about that donation.

People seem not to be aware of this: https://fund.blender.org/funding-policy/

I agree that it's not a good look for Blender, but I don't think that something actually bad will come from this. (Other than maybe a negative impact to Blender's reputation.)

I don't think they can tell Blender what to do. As such it's just more money for Blender! Yes, Anthropic can use the Python API to do their AI BS, but an improved Python API is also good for anyone else. This doesn't mean that Blender themselves are integrating any gen AI (if you don't already count the denoise filters). Do you really think Blender should have denied the donation?

It can make something up based on the log.

That's true. So an alias won't do it if you use that tool from a script or something.

Nope. I have this alias (a default on my distribution) and it's no loop:

    alias ls='ls --color=auto'

`alias android-cli='android-cli --no-metrics'`