This appears to be an FPM exploit: https://github.com/KillaBoi/St...

But notice it has to make a huge amount of assumptions about the configuration of the server in order to work. So this kinda sorta underlines the thing you say, assuming the hacker cannot obtain the output of php_info() - it's not unheard of for PHP devs to include that somewhere so they can check what's going on. It makes script kiddie stuff a little less likely, though a hacker specifically targetting a specific installation will likely be able to break in.

I've read various comments about viable this exploit is, and even submitted a link to someone's commentary to Slashdot about how it maybe overblown (https://eliastaylor.com/noexploit/) - The infosec community seems genuinely split on it, and I'm not sure this proof of concept is really going to convince anyone right yet.

The reality is we should probably not have acted as if a nuke went off last week, while at the same time we should patch it on a "just in case" basis. The 4 thing was more serious, and remains more serious given the number of IoT devices that'll accept 4 forever. This, on the other hand, is a good reason to stay up to date.

My suspicion is that all of those comments relate to importing Word documents and templates into LibreOffice. Without LibreOffice full-on ditching their internal DOM and using Microsoft's, formatting changes are inevitable.

The question to me is why they see that as a reason to not replace Word. The obvious solution is import the fucking templates and fix them, a one off task.

Standards, maybe, but features? I'm unaware of any features missing from LibreOffice of note, and LibreOffice has a better UI and discoverability as it supports CUA standards, something Microsoft's Office suites haven't done since the mid-2000s.

Collabra is a full office collaboration suite based on several open source projects including LibreOffice. LibreOffice and Collabra have had an... interesting relationship, despite the latter making probably the largest amount of contributions to it in recent decades.

It's not obscure, it's just you probably don't know the primary output of Collabra's work when you use it.

...and? Are you seriously saying we shouldn't address serious threats to health because there's other serious threats to health?

...says the person who defamed Fauci in the thing being replied to, something that only people who intentionally consume only media that agrees with them knowing full well it lies about 90% of the time would do.

Let me guess: you think children are getting sex change surgeries. You also think that schools are providing sex change surgery for free. You think that there are litterboxes in school classrooms for furry students. You won't fly any more because there's a risk the airplane pilot might be a furry, and that somehow makes them unable to fly. You think cats and dogs are being eaten by legal Haitian immigrants. You think that undocumented immigrants are flooding the polls or even make up a meaningful percentage of voter registrations. Global warming? Ridiculous liberal myth, clearly. Same for the damage CFCs did to the ozone layer. Oh, and that pizzeria Hilary Clinton got her pizzas from has a child rape basement. Sure.

Sound about right?

One of the more subtle dangers of vibe coding is that the genAI system will generally drown you in praise and at no point tell you that it's already been done or that there are already ways to achieve what you're doing.

That's why this project got to the coding stage.

> you cannot just separate out any pieces you want and use them independently,

Except when you can, which is most of the time. Grow up.

If you're overloaded with slop bug reports - that is, bullshit bug reports that aren't a bug in your program but are the results of genAI users simply believing the output of Claude and shoving it into a ticket so they can pretend they contributed - you might have a very different view on this.

Slop is slop. If genAI was producing high quality output that's usable we wouldn't call it that.

This would, if someone would do it, resolve a hell of a lot of issues that I think are serious in the current model. Alas big-AI seems reluctant to actually partition training sets like that, and instead are focusing on lobbying to try to get copyright laws to ignore the licenses of the content they're training on. And honestly, that strategy doomed because not every jurisdiction in the world is going to go along with "Please let us ignore copyrights because we have lots of money" the same way the US seems to be going.

Everything Big AI seems to be doing seems to be oriented towards preventing society from hitting CTRL-Z.

Another person who spouts some generic policy stuff without actually making a real point. Do you think those opposing genAI haven't used it? Haven't considered the ramifications? Haven't determined whether or not it's even what it claims to be?

Or are you saying the same of genAI advocates who insist that somehow they're being discriminated against when they keep submitting garbage, overstating the degree to which genAI helped them, often lying about it, ignoring the consequences both of doing this and the impact they're having on everything from the environment to the availability of personal computing (or worse, claiming those concerned about those issues should fuck off), ignoring or even celebrating the impact they're having on incentives to create non-slop (which their fucking genAI systems rely upon! What, exactly, are you expecting genAI to work with in 5-10 years time?), and pretending the legal issues are all solved because of a couple of US jurisdiction only legal cases that have already been contradicted by a fresh US jurisdiction only case, and with no sign the Supreme Court is going to take up the issue in the near future?

Every genAI advocate comes up with this pseudo-centrist bullcrap pretending that they are the "sensible" ones who have truly evaluated whether a technology is Good(tm) or not, and pretending the opposition is just irrational hate, when they are the people who haven't evaluated jack-squat: all they've done is used it, been complemented for their wonderful analytic abilities and told how smart they are, vibe coded some kludgy crap with awful UXes that aren't anywhere close to being finished, and then pronounced on the basis of this that somehow vibe coding iS tHe fUtUrE.

If you guys were the people who were thinking about the issues:

1. You'd have addressed the elephant in the room about where the training content is going to come from in the future.
2. You'd have acknowledged that everyone except you seems to be capable of noticing your programs are fucking awful.
3. You'd be demanding genAI makers knock it off with the constant sucking up manipulative shit because nobody in their right mind thinks that's (1) likely to get you a good end-product, and (2) you know damned well it's just going to turn you into some Musk or Trump "Thinks they're God but just produces shit" figure, for similar reasons.
4. You'd acknowledge that, no, the legal situation is *not* resolved, and the likelihood that your code isn't violating a shitload of licenses you're not even aware of is, actually, extremely high: you'd be calling for clarification, not shoving this crap in your open source projects as fast as humanly possible.

But you're not.

The people who are coming up with these issues you've decided are in your way, while the nice genAI machine is telling you how right you are. Of course you're going to side with the latter.

But no, you're not the rational ones in this exercise, you're the easily manipulated ones.

My daughter's been doing the same thing to me but failing regularly. One because the style was obviously artificial - but I recognized it as a pre-AI style so very unlikely to be AI (mostly gaming graphics cut and pasted.) The other was... a WatchMojo YouTube video. Because WatchMojo is pretty much what 50% of AI video slop generators are trying to imitate (ie top ten lists, etc.) (No, Mojo International Holdings Corp has not, so far as I can tell, switched to genAI, for starters they pronounced words correctly...) So I'm not convinced they're as good as they might appear...

A vibe coded *file system*. Really.

Gonna stay away from this one.

You mean if they'd spent time harassing trans people rather than writing code they'd have caught bugs earlier?

Because the CoC isn't spending time on irrelevant stuff, it's about preventing spending time on irrelevant stuff. Like bringing up whatever you can to try to get talented programmers to leave.