The Rust version is licensed under the MIT license, in case anyone was wondering. The Ubuntu Discourse post says the change is not about licensing, but about security. What it does not provide is any kind of statistic on security issues related to coreutils.

It's weird mental gymnastics to call a union a "labor monopoly" to support drawing a false equivalence. Monopolies are generally disliked, not just by D people, because they prevent free competition, which is a staple of US economic and social policy. It's about protecting consumers and entrepreneurs. A union is about protecting workers. Both anti-monopoly laws and labour unions are about protecting people from nefarious effects of a completely unregulated market. The fact that the same people who want to have a monopoly also hate unions should tell you something.

To clarify, the users were OpenAI themselves, so there is no question that they would be liable in this case.

The bots were not intentionally deployed; rather, they were being tested on how well they could complete a data recovery task (downloading a certain file from a certain server on a simulated Internet) that had been complicated by putting various obstacles in the way. Unfortunately, they found a different way to solve the problem: by getting the file from the real Internet, where it was publicly available. Part of this process involved collaborating with each other by treating the RubyGems website (which is supposed to be for polished packages) like GitHub; unlike every other package site hack in history, the exploits they uploaded weren't meant to be downloaded by unsuspecting users. As usual the bots cheerfully ignored all the clues that they had escaped containment and were consistently justifying their actions as acceptable due to being in a sandboxed testing environment. (This is something OpenAI has pledged to focus on.)

The actual damage done to RubyGems seems to be that OpenAI is now unwittingly in possession of a substantial number of user login tokens. This certainly meets the definition of a data breach, but it's not like the credentials are for sale on the dark web. As a website operator I'd much rather be mauled to death by this well-meaning swarm of superintelligent infants than targeted by even a single actual malicious human. In all likelihood OpenAI will just quietly pass RubyGems a sizeable donation and it'll all blow over.

This will not happen. Apple and Android do not want to abandon whole markets to competitors, they want to dominate these markets. This is a weird fantasy that keeps popping up, usually from people who are proud of being from the US and champion a weird understanding of freedom of expression and freedom of choice. Apple and Android are not interested in freedom; they want your money, brain bandwidth, and everybody else's. Give it to them in a totalitarian society and they will happily take it.

America is not a country.

Well, technically, we're letting Natalie do it, which is, of course, worse in every way imaginable, since she's immune to the sense of embarrassment that sometimes restrains him from acting on every little whim.

To be honest that was actually my first theory, since the bots didn't seem interested in exploring the rest of the domain. I suppose there's no way to know for certain. I concluded that it must be an imbecile's attempt at harvesting, though, because the queries weren't really exploring the string space in any useful way. Here's a sample:

"GET /index?author=15&go=Search&id=48&name_restrict=1&q&re&results_&results_pagenum=2980 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=5440&template=41&type HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=33500&templat HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=32640&templ HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&res&results_page&results_pagenum=39300 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_&results_pa&results_pagenum=12340 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_r&res&results_pagenum=6100 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=2920&te HTTP/1.1"
"GET /index?author=15&go=Search&id=48&nam&results_&results_pagenum=17940 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results&results_pag&results_pagenu&results_pagenum=37720 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=9360&template=41&type_r HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&r&results_pagenum=28040 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_&results_pag&results_pagenum=10400 HTTP/1.1"

The only thing this is fuzzing is the query string parser. It's not testing the limits of string buffers, it's not using interesting characters, it's just brain-damaged. The fact that it's also fetching different page numbers shows it's trying to follow page links and failing badly at doing so.

The site gets plenty of sniffing from garden-variety pests. e.g. this half-hearted attempt to find a framework or two that I don't have:

"POST /__rsc HTTP/1.1"
"POST /api/auth/session HTTP/1.1"
"POST /api/auth HTTP/1.1"
"POST /__nextjs_action HTTP/1.1"
"POST /.action HTTP/1.1"
"POST /_rsc HTTP/1.1"
"POST /api/auth/callback HTTP/1.1"
"POST /_middleware HTTP/1.1"
"POST / HTTP/1.1"

(of course, none of these URLs exist other than /, and you definitely can't just POST to it)

All this said... I've seen that spammers regularly misconfigure their tools, they'll try to register accounts with names like #[X:\LISTS\NAMES.TXT] and it only makes sense that some other cybercriminals trying to get rich quick have a similar lack of interest in programming shit correctly. Generally people don't turn to script kiddie shit if they have a personality conducive to putting in an honest hard day's work perfecting their craft.

I believe the plan was to give that sobriquet to Lake Michigan, in honour of its decidedly flaccid silhouette.

I had a problem where AI scrapers were absolutely DETERMINED to fish out every possible query string from a search results page. Almost all of the query strings they tried were invalid due to shitty and dysfunctional string substitution. "&page=100" wouldn't be followed by "&page=101", it would be followed by "&pag&pag=1010" or something even more insanely half-baked, until the query strings were like 100+ characters long. It was the technological equivalent of watching HIV mutate in real time.

But the insane thing was that, aside from page number, they were always requesting info about the same other criteria: filtered by the same user, the same page type, and with no text string. So I just took those particular values and started banning logged-out users who requested that combination of criteria.

I figured I'd need to change my tactics in a couple of days once the botnet got bored of that particular page and moved on to requesting bogus entries for another user.

MariaDB> select count(*) from ip_bans;
+----------+
| count(*) |
+----------+
| 671671 |
+----------+

It hasn't.

Let's put the motivation aside for a minute. Have you asked yourself "at what cost"?

I don't know about you, personally I have never voted for someone I fully agreed with on every issue. Voting is more of a "lesser of two evils" situation. Are you really fine with the whole descent into fascism, rampant corruption, degradation of public health, nepotism, degradations of cost of living, etc? Is it all a fair price to pay for whatever you perceive the benefit to be?

Competing for what's a harder issue to deal with is fucking stupid when all need help. The people in your family clearly have a very hard life. But I don't understand why you leap from that to somewhat attaching trans folks. If it were so easy to be trans, they wouldn't have record suicide rates and a whole assortment of mental health issues. There is no need to belittle other people's needs, and there is no merit to it either.

Is it premature to call it unnecessary and with no clear stated goal or benefit for the US?

Is it premature to remind you that Trump campaigned on "no more wars"?

In case that helps: I'm not part of the "same people" you mention, I have not done what you describe.

Was autotune a net positive or net negative? I guess some artists really leaned into it trying to use autotune as a new instrument - I don't get the appeal.

On the other hand, AI already brought us Girly Girl productions https://www.youtube.com/watch?...

Why does everybody seem to be fine with the fact that they are allowed to lie to you? Are we allowed to lie to them? Do these people not have to take an oath before they can start assuming their duties?

I mean, kids used to learn how to extract a square root with pen and paper, then calculators came, now we wouldn't ask in a test how to extract a square root any more. New tools mean we learn different things and the content of tests and exams changes. To be very clear, I'm not saying "this is fine". But I don't think that the general argument that students lose certain knowledge due to a new tool is necessarily cause for alarm, as long as it also creates opportunities to learn new things.