• 3 Posts
  • 108 Comments
Joined 1 year ago
cake
Cake day: June 23rd, 2023

help-circle








  • So if your Rust app is built against up to date libraries in Cargo, it’s going to be difficult to package those apps in Debian when they ship stable, out of date libraries since Debian’s policies don’t like the idea of using outside dependencies from Cargo.

    As they should. You don’t just auto-update every package to bleeding edge in a stable OS, and security goes out the window when you’re trusting a third-party’s third-party to monitor for dependency chain attacks (which they aren’t). This is how we get Crowdstrike global outages and Node.JS bitcoin miner injections.

    If some Rust tool is a critical part of the toolchain, they better be testing this shit against a wide array of dependency versions, and plan for a much older baseline. If not, then they don’t get to play ball with the big Linux distros.

    Debian is 100% in the right here, and I hope they continue hammering their standards into people.




  • With this change, extensions can “only” alter/inspect/redirect/block 30,000 domains if they use the webRequest API. That’s not enough to build uBlock Origin with, but at least there’s limit now.

    That seems like an arbitrary number. Why not 20,000? Or 300,000? What the hell is this limit even for? Even malware can still target 10 domains and do some significant damage. So, what the hell is the point?

    Remember, politicians don’t pass racist laws by directly saying they are excluding PoC into the law. They do it by targeting commonalities that happen to apply to PoC.

    Google isn’t going to flat-out say they are blocking uBlock Origin. They are going to do it by implementing “security features” that just so happen to target only uBlock Origin.





  • Yeah, it’s really tiring when there are so many good uses from both image LLMs and chat LLMs. They shouldn’t be used to produce a final product, but it can get 50-80% of the way there.

    Just their use as upscalers (which I know isn’t a LLM) are magical, and far far better than JPEG compression. With the right upscaler, you can double the size of an image and it looks just fine.

    Instead, we are far too engrossed in how “AI is taking our jobs” and shit. No, AI isn’t taking your jobs. The greedy corporate assholes are taking your jobs.