You are right, of course. However, what I'm reacting to is the culture around JS and it's supply chain and general attitudes around different groups of programmers. Yes, some language features *do* make it *easier* to write secure code, but they sure as hell don't do it for you, nor do they eliminate all classes of exploits or flaws. I'm just tired of everyone acting like web-programming is the only thing that matters or the only place folks write code. I detect a real stench around certain groups of coders and don't want everyone lumped into the same boat with "those" guys. JS seems to be a cesspool and the worst practices seem concentrated there and that's why the lame AI bug bounty stunt targets them first.

Or you could just switch to NetBSD and get yourself free from Systemd, Linus/Linux, Pottering, bundled GNOME, and a whole lot of other heinous un-Unixy shit and run your _386_ till the end of time with a better community and a better organized operating system.

You could hang a device with a late-model 2.6 Linux kernel on the internet right this minute, today, and be just fucking fine. There are no RCEs in the 2.6 kernels and there is one DoS attack with the network stack that only impacts somewhat early 2.6 kernels (the TCP SACK issues). People love to hyperventilate when something is 15 minutes old or older. The truth is that most old shit is perfectly safe if you pay attention. You could still compile/update to the most modern version of OpenSSH on your 2.6 box and be just peachy. I have a fucking IRIX 6.5.30 box still online and people constantly lose their minds and tell me how "insecure" it is. Really? Great, someone hack me, then. I've been double-dog daring fuckers to do it for 20 years and just updating OpenSSH every few years and I've been JUST FINE.

Security folks are mostly full of shit and can't compromise/"hack" half the shit they claim to be able to. Most "exploits" are theoretical and never get weaponized or even work as advertised. They just want to scare everyone and act like they have the knowledge everyone else is missing/ignoring. Wrong. Security weenies are rarely even programmers (the first step to being able to actually CRAFT an exploit). Most are shit-talking con-artists and lying wannabe posers. They are often folks with a vandal-mentality or are assholes trying to scare you by pointing out others who have the vandal-mentality and promising to protect you.

Just pay attention to your *services* and you'll be just fine.

Javascript isn't a terrible language, but it's pretty weak in several areas and compares poorly to languages with stronger typing and better security. Seems like AI tools are targeting the weakest systems first (Js + NPMis one of those). Of course TFA isn't talking about supply chain attacks but it is talking about Javascript related bounties. I doubt AI will "take over" development the way folks are anticipating, but if it does, feel free to take over Javascript, PHP, and VB coding any time now, guys. It's disgusting in the first place. Who can stand that shit? C/C++ is still the only way I'm taking you seriously. AI vibe coding has been pretty much an utter failure outside of JS attack code, with the recent "Anthropic C compiler" being the latest demonstration. It's got a broken assembler and cannot optimize at all (and it breaks with simple legal syntax on macros and pragma statements). It took weeks to create and tens of thousands of dollars in AI 'tokens'. Uhh, real intimidating, but hey, I guess if you are a shit-eating Javascript "programmer" you'd better be worried. Pffft.

These fucking people are running a business that's based on theft of IP from others. They lost their source code? Oh boo fucking hoo! Let's throw them a pity party!

I identify as a meat popsicle.

When I started they'd just finished digesting Sun. They were already turning into a pretty shitty place to work. They were starting to do the H1B offshoring thing like my other old employer: IBM. However, Oracle really got it going in the mid 2000's. They ginned up tons of white-guy layoffs so brown-guys could be subbed in. It was super obvious they were literally "sending all the jobs overseas" (well, to India, not some vague destination in the EU or something). They certainly were not hiding the fact internally. They started making everyone's job just a little harder and just a little more shitty in some ways. For example, people working the weekends were forced to come in during the week just to fuck them a bit and get them mad so they'd quit and make room for more Indians.

I'm amazed anyone but Indians and fucking MBA frat boys are left at Oracle. They SUCK now. They laid off just about everyone from Sun. They laid off all the American engineers that knew anything. It's just a strip mall corporation now that tries to buy low in India and overcharge Americans for their shitty RDBMS that's gone down the toilet. Oracle ASM and RAC are GARBAGEWARE that run like shit and have fucked up the operating environment to the point it's almost un-runnable. Oracle 8 was really the last/best version of Oracle RDBMS. That's why they have to bundle up Exadata systems as "custom racks" because nobody could make that pile of horse shit run without it being pre-built by Oracle and nobody would be dumb enough to use raw storage / ASM (dumbasses at Oracle forgot DirectIO was around by 2003 pretty much in every filesystem, so cache control is not a valid excuse). Well, okay DBAs that were never sysadmins might be dumb enough and I've heard a few tout ASM && RAC back when they first came out. Now, the DBAs I know all are miserable and wish like hell for the days before those shitty Oracle components were pushed as the default.

You're acting like all you and your high-minded green pals ever do is forever-use a bit of blow molded plastic every now and then. That's unlikely. Are you in a heated building? Did you consume any food delivered or grown using diesel recently? Do you ever fly anywhere or use any products delivered by boat (they all burn bunker oil) ? You aren't dodging any responsibility, here.

Your "logic" seems to be that if someone else makes more, it's okay to steal from them if you believe you're underprivileged. Since most people are too weak and/or scared to steal, they get someone else to do it for them. Trouble is, it's still immoral to get someone else to steal for you, even if you believe you're somehow entitled to someone else's stuff.

About as dumb as giving drug companies immunity from lawsuits and liability during CV1984, I'd say.

Actually, he's completely and provably quite correct. Your response didn't even make any sense beyond this first, completely ridiculous denial. Whatever point you were trying to make about alternative fuels is lost in your lack of writing ability and poor communication skills. Fossil fuels are factually 96% of what powers transportation globally. Aviation and shipping are close to 100%. Even with cheap nuclear power, creating synfuels has major problems and still would result in more expensive fuels. The technology isn't there yet to make synfuels viable cost-wise, the are not, as you say, commercially viable. If they were they'd already be widespread and popular. Given that right now any synfuel production is likely the result of a government funded study or subsidy, you might want to get your facts straight.

One way to do this would be to make vouchers for underachieving students worth more than ones for high achievers. I suspect that'd have unwanted side effects, as well. However, anything is better than paying a bunch of non-working teachers under the guise of "education" when it's really "retirement". The current system punishes kids and rewards retired teachers and despite tapdancing around the topic, converting the system to vouchers seems would provide immediate relief and improved opportunities and learning for the kids.

The bill in question is Senate Bill 26-051 (SB26-051). It's sponsored by four Democrats and one known-RINO who was under official censure in 2023 by other Republicans. So, you're wrong about that.

Having said that, I can see Democrats supporting this because they are going to gizz themselves anytime the government is grown or given more power to fuck over and interfere with more individual rights and freedoms. I can see Republicans doing it because "By God we need to know what the hell is going on with these damn open source commies. They might be a threat to security! Terrorists!" That kind of shit.

If you are a person who just wants the government to stay small and completely fuck off and get out of your business, then you are a political refugee with no party and nobody to vote for. That's me. Neither of these partisans are worth defending, but the Left, at the moment, seems to be more dead set on becoming Communists (extreme Left) than the Right is dead set at becoming Fascists (extreme Right). That maybe being true by the smallest smidge of a margin. It's not even clear anymore.

I live in Colorado. Nobody here wanted this fucking law. It was just foisted on us by hyperventillating and clueless far-left assholes who pretty much all came from California and now run this state, too. They fucked up their own state now they want to come here and nanny-state Colorado, too.

I noticed for example that NetBSD is trying to raise $50k this year and their up to a whopping $600 so far. The OpenBSD guys are in a similar state so far this year. They maintain OpenSSH and a few other critical projects, too. It's rare they get enough help or money from the corporate interests who use their code (Oracle, Cisco, Juniper, Intel, Broadcom, etc....).

These kind of "Thou shalt" laws make writing an OS harder. It's precisely the kind of thing Stallman (can I talk about Stallman still, or is he "canceled") would have freaked out over in the 1990's. It simply takes more control from the little guy and hands it to corporations and government and it sucks donkey balls and should be resisted and rejected completely. I've always said that someday they (the lawyers and worthless political people) are gonna come for FOSS software. Looks like this is the start of it.

Pictures I still have are from June 2021 and are of mulch, not sand. Also, they don't need to fill them completely to make them unskatable. They just put enough in the bottom as to fuck up someone's line. The messages (which I do not have anymore since they were in Signal) did mention that they (volunteers / skaters) had the park cleaned up in under one day.

So, pictures (especially from censor-happy Facebook which would have taken down anything related to covid skeptics or refuseniks) don't really mean shit a month before or a month after.