> This would have been possible since the certificates were created in April 2025. ... CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.
Not trying to throw shade at curl, although I don’t think this feature can realistically be done by a drive-by contributor.
No, the article listed some apps that were not vulnerable, and the first question to me is “so what is vulnerable?” And the answer is “every curl | sh installer on the internet since April 2025” (among assuredly many other less prolific apps).
I don't really know why it's important to "provide a durable record of a decision made during the implementation of a feature", but other than that I do something similar. I have the agent write a PLAN.md which looks just like this IDR template. It's written before implementation begins, and I approve it before the agent goes. I don't save them after the session ends.
For each project, I define "review surfaces": parts of the code that I have a strong opinion about. These get resolved in detail before implementation begins; the LLM can do whatever it wants to other parts of the code, but the parts I list can't change without another review. Typically, these are things like the public API or database schema.
> I don't really know why it's important to "provide a durable record of a decision made during the implementation of a feature"
How often have you looked back and said, "Why the hell are we using/doing X?" and it turns out, the obvious natural choice (now), Y, did not yet exist at the time the decision was made. Recording the why and attempting to capture some of the diligence performed before the decision is critical in understanding when decisions are worth re-evaluating in the future.
Georgian is really easy. Each of its 33 letters makes one and only one sound, words are spaced, and there's no capital/lowercase. The most difficult part of reading it is pronouncing: the language does not care about syllables. Example: a popular Georgian band is მგზავრები ("Mgzavrebi" / Passengers).
Georgian does have a well-defined notion of ‘syllable’, it’s just that it allows an unusually wide range of consonant clusters in those syllables [0]. If you want a language which really doesn’t care about syllables there are better examples, e.g. Gokana [1,2]
Can confirm: I was on a holiday there and took reading it as a "side quest." Within a week I was fairly proficient. Note: this says nothing about understanding what you read, of which I had none!
I don't' know what "that" you're referring to, but in the USA it is against the payment processor agreement to give a discount for cash. So not illegal, but a contract breach.
> ...but in the USA it is against the payment processor agreement to give a discount for cash. So not illegal, but a contract breach.
This may be true, but State and Federal law prevail. In California, this [0] looks to be the relevant regulation:
1748.1. (a) No retailer in any sales, service, or lease transaction with a consumer may impose a surcharge on a cardholder who elects to use a credit card in lieu of payment by cash, check, or similar means. A retailer may, however, offer discounts for the purpose of inducing payment by cash, check, or other means not involving the use of a credit card, provided that the discount is offered to all prospective buyers.
Most mom-and-pop places I shop at here in San Francisco either offer discounts for paying in cash or have signs up suggesting that folks pay in cash so the business keeps more of the transaction.
The gas stations doing it have large, permanent roadside signage displaying the different prices for "Cash" vs. "Credit". So there may be exceptions in the fine print of those payment processor agreements. Or the gas stations all know the laws giving them such rights, which the agreements can't override. Or something.
I think it’s just for consistency. A fork and a tree navigation are the same operation conceptually. Now, unlike older Pi, a fork is not a copy of the session, it just has a pointer to the older session. The only losses that I can see are: now /resume shows every conversation rewind; and /tree is harder to implement. Neither of those is provided by Durable, so the gap is left to the implementor.
In all of the cases that people are referring to in this thread: HuggingFace, that german wiki, Ruby Gems, the Australian statistics page, this UN statistics page... those two parties are OpenAI. OpenAI running their own agents on their own instructions committing crimes with their own computers. This is cut and dry.
When the CEO of OpenAI says that he expects at least 40% of all jobs to be eliminated by 2030 by the tool that's also making personal computing -whether PC or smartphone-, video gaming, and on-prem business computing somewhere between incredibly expensive and unaffordable, and driving up the price for just about everything else substantially -because just about everything has a computer in it or depends on computer-controlled processes these days-, you don't need some boogyman theory to understand why people are angry about the thing that's making the already-rich far, far richer.
Though. blaming it on the boogyman does have the benefit that you don't actually have to address the concerns of those revolting peasants!
>. blaming it on the boogyman does have the benefit that you don't actually have to address the concerns of those revolting peasants!
The establishment and its techbro enablers have messed up so badly that telling the torch people that the pitchfork people want to take their torches isn't working anymore. So now they're moving on to claiming that anyone with a torch or a pitchfork is secretly working for the next kingdom over.
The other iPhone mini user here, and agree that this phone looks nice. It looks like the keycaps form a capacitive touchscreen or something, so you can actually swipe to type over the keycaps. Marketing videos show using it to scroll the screen. But, seems like it could work for one-handed use.
I might pick one of these up in the de-Googled variant and keep my iPhone around for all the "attestation required to view your bank balance" apps that I have.
> This would have been possible since the certificates were created in April 2025. ... CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.
Meanwhile, back in April 2025: "Is it possible to enable CT checks in curl?" "No." https://github.com/curl/curl/discussions/17078
reply