Do you believe the mitigation would be difficult to engineer? If, say somebody else, publicly disclosed the unmasking technique how long would you guess it would take Apple to implement a verifiable fix?

Nasty but I was expecting a remote unauthenticated attack at 9.9. Hopefully you don't allow admin on WAN!

Thanks for finding the bugs and writing about the design pattern problem, HackerAsk.

I think this is why AI Slop is so pervasive. If the tool were used properly you wouldn't even know it was there. It's possible some curl bug report was discovered with responsible use of ML but now such reports are disallowed, and for good reason. Though if used responsibly who would know?

There was always that kid whose book report was obviously from reading the back cover; today he's in a corporation trying to get someone else to do his work with an LLM. Not a new strategy, unfortunately.

I really don't care about this package or protest but what might be more interesting to consider is what if this were in a default package and what if the affected locales were different?

If I make a list of all the countries who have recently been at war or are currently engaged in hostilities or have ethnic animus towards each other and just choose to taunt them all, that would really be a dick move and it's probably OK for Debian to drop the package. FWIW I'd rather see them adopt a kindhearted fork than override an author/ maintainer when possible.

If there's no special pleading for the ru/ua conflict then it's not too concerning.

The scenario you describe is already a disaster, though! Who let that slip through? Replying to a message should create an idempotent context that can't run away from you. "What a mess!" as the kids say.

I'm not a user of smart earphones but lots of things like that should be on the table. Decades ago we were waiting for small cheap cameras and CV to do focus-follows-gaze and just kinda forgot about it when the stack arrived.

There are more "pinch to zoom" type revolutions available to those with a studious HCI methodology. Even Academia seems to be chasing "latest craze" development now, not fundamentals.

I hope your experiment succeeds!

Up/Down (authoritarian/libertarian) is what matters there.

If he has high allegiance to the extant power structure then promises should be questioned.

If he is for radical decentralization and antiwar then I'm more likely to trust promises made about privacy and autonomy.

Then there's international confusion about left/right. Scandinavia is known as a good place to run a business because businesses regulation is much lighter than places like the US which are heavily regulated. In the US business regulation is "left wing" in Scandinavia it's "right wing".

We'd use a 14-dimensional vector for political positioning if we wanted to be studious but most folks are just looking for a friend/enemy distinction. Even many of the comments here looking to dump a well-regarded service if either "tastes great" or "less filling" is confirmed. The false dialectic as means of control and all that jazz.

Pretty soon the AI will tell your father things that are more difficult to disprove and it will be done the same way "news" and Wikipedia do it - telling you how to feel before telling you what happened, reporting only part of the story, and not covering most happenings at all.

Now is the time to teach your circle psyop avoidance skills. Or build an honest competitor (if it were allowed to exist - Marc says only three will be permitted to exist).

And why does this essay's type style change dozens of times? Who is that helping? It's like a cut and pasted ransom note.

To do a supply-chain attack on Google's SDK would be much more expensive and less likely to succeed. Google isn't going to be the attacker.

The recent attack on AMI/Gigabyte's ME shows how a zero-day can bootkit a UEFI server quite easily.

There are newer Coreboot boards than Opteron, though. Some embedded-oriented BIOS'es let you fuse out the ME. You are warned this is permanent and irreversible.

F-Droid likely has upgrade options even in the all-open scenario.

It's really sad to see desktop apps adopt hamburger menus and things that make sense on mobile but make life harder on a desktop built for WIMP.

Thank you, Bill! Some days I'd rather be using your interface.

I wonder if they offer their customers source to keep the Busybox folks happy?