lol damn, flinched at both even though I was prepared

It really is a hell of a lot more sane, instantly missed once you don’t have it. And yeah Fork’s a blessing when used with care lol

Oh right, I misread. And yeah not sure (my win32 repro targets have all been locked for a while) but with all the facepalm regressions I’ve read about lately it really could be anything.

And you’d be technically correct, the best kind of correct.

Though yes, if you’re still using Windows, the learning curve may look like a wall.

I really want to know what they changed to break the clipboard service

Guessing the X11 [X]Wayland migration KDE Plasma bug report? Should be fixed in 6.5.2.

I’m specifically highlighting that there is none though I acknowledge machine ID makes it easier.

ETA: edited original comment to be more clear

Upvoting both comments for awareness, since Linux is the first of a multi-step process, not a privacy panacea.

But we must be clear that in both theory and practice there’s little comparison between systemd and modern Windows machine-user association.

Someone using Windows regularly has a gaping wound, is actively bleeding out. Switching to Linux is just a tourniquet, but every other treatment is at best no-effect until that tourniquet is applied.

E: transpose systemd/Windows for clarity

This city is singularly populous among others in the US. I mean we’re packed in here pretty tight.

On top of that, the city’s mayoral office wields quite a bit more implicit power than the runners up.

Which is why historically NYC mayors have so often been bought to mostly sit on their hands. Because one activist mayor in NYC can do more for more people than most governors.

Yeah this is a key realization that I suspect most investors aren’t privy to. With proven viable local, accessible, scalable, and energy-efficient 2TB infiniband clusters and routed multi-agentic stacks of open source models constantly nipping at their heals, achieving longterm market dominance for any of these AI developers is simply a tenuous prospect.

The only legitimate option is to maintain a meaningful lead at the cutting edge of performance and/or offer a superior efficiency/value proposition via SLA guarantees. Beyond that, the brute force options are limited to things like short-term market manipulation (such as outbidding everyone else for existing talent pool, chip manufacturing capacity, etc) or suppression of competition via regulatory capture.

In every case, above or below board, there is no permanent longterm global breakaway strategy, only treading water as long as investors are willing to inject enough funds to temporarily outrun market efficiency.

Once that reality sinks in… pop.

deleted by creator

It takes at least one generation for ground truth deprivation to render subjects effectively unmoored from reality

Can’t we all just… get along?

Towing large things. That’s the only true unmet edge case I know of. Perhaps because it crosses over into commercial semi-ev territory.

Concur with diagnosis. My condolences.

Respect that. They’re lucky to have you.

I should have also mentioned:

1. At these shops are also plenty of over-qualified people for whom compensation was secondary to flexibility, work-life balance, autonomy, or what have you.
2. More importantly, they’re popular foot-ins for people new to the field or stepping-stones for those in career transition. (Especially during hiring droughts like this, I suspect.) Consequently, these places are where I had the privilege of meeting many brilliant, diamond-in-the-rough types on their way up.

Best of luck ✊

It’s an extremely common small business pattern across North America. The “CEO” is usually the owner, evidenced here by absorption of non-fiduciary (unnecessary) liability of roles elevation. Only a handful of hires are traditionally qualified for their roles by education or experience. These few are usually found in client-facing roles and usually at least partially compensated by stake. Most employees are budget hires working well outside the usual expectations of their title.

Employer abusiveness in these shops goes mostly unchecked. Wanting someone who can “grow with the company” with clearly no intent to grow them (i.e., no mentor, no reporting senior to justify the title “junior”) is code for a lot of things including this. Part of why these companies only prefer to hire younger or underqualified people is because they don’t want anyone who knows what they’re worth, how things are done better elsewhere, who might expose management incompetence, or who are simply less likely to accept abuse (because even if management hasn’t rationalized it totally, they do not intend to change).

On the other hand, the subtle upside to lack of training and oversight is the opportunity for self-directed (and thus potentially much higher value) up-skilling and continued job-hunting, for those inclined.

So companies like these are viable, but crucibles, and for most should only be considered a last resort.

(Not my field. The following is armchair speculation.)

Why is [fusion] more economical than [solar/wind]

deleted by creator

While I maintain that repurposing OPFS as a measure of SSD usage by this method is unrealistic even under optimal conditions, I gotta admit I’m surprised by the lack of throttling and resource quotas.

ETA: Either way, I suspect any user vulnerable to this exploit is likely already exposed to much worse from attacks that are similarly inelegant but far more reliable. Those users are already heavily profiled in many datasets. I mean, no one here… hopefully.

In this case, I agree that it’s a low priority patch. Here’s what you must do as an attacker. Decide for yourself whether it sounds practical for general deployment.

Requirements: Fill OPFS storage with an arbitrarily large amount of data which at least exceeds RAM, but may require up to 60% of SSD, then lock up a thread with random reads while a worker thread hosts a model that you feed any detected latency clusters.

Even if users don’t notice their fans maxing / battery burning / memory+storage disappearing and kill the tab themselves, this definitely will be the first tab offloaded by most browsers and OSes shortly after it is sent to the background.

That means you have a brief window where you might get the chance to guess which sites a user is visiting. Your guess is likely far less than 89% accurate (PoCs illustrate in optimal conditions where models are often deliberately overfit to specific machine(s) and locale) outside a hyper-targeted attack, you will be lucky for coin toss levels of certainty for any guess.

Is this an attractive attack vector?

“Security hardened” for some might specifically mean “no JS” which will tend to break web pages that rely on async content loading and rendering.