More

jadamson · 2026-04-25T18:45:00 1777142700

If you go to the homepage (or look at the banner) the project is shut down since 2015.

jadamson · 2026-04-23T21:14:29 1776978869

It's a laggy resource hog. It's slow to open. You can spam the windows key and watch CPU usage increase.

Putting words in someone's mouth to defend that dreck sounds ridiculous, yes.

petcat · 2026-04-23T21:17:14 1776979034

Well I don't use Windows so I can't comment on the quality. And I actually don't even really care about it. I was just commenting on the curmudgeonly perspective that young people can't do things right.

jadamson · 2026-04-04T17:07:56 1775322476

> I wish we'd first fix women's rights and then extend their duties.

"We'll get around to it when some arbitrary measure is met, we promise"

This is the same thing you're criticising - using one injustice to justify another.

ck45 · 2026-04-04T17:18:09 1775323089

I don't have intentions to justify an injustice. I'm saying why should we try to make it even harder for a disadvantaged group? It does not help a single German man if women also have to comply to this law. Fixing women's rights on the other hand gives everybody the benefit of living in a society that is more fair. For me, that's a valuable goal.

jadamson · 2026-04-04T17:24:23 1775323463

You may claim not to have the intention, but materially, it's what you're doing.

Everyone doesn't get drafted at once. It stands to reason that drafting women would mean fewer men were needed.

throw-the-towel · 2026-04-04T17:30:13 1775323813

Women vote, and pressure politicians into continuing a war that they will never have to fight themselves. Many such cases.

throwaway198846 · 2026-04-04T19:55:34 1775332534

Can you show me a recent war in a democracy where women had greater percentage of supporting a war than men?

jadamson · 2026-04-04T16:54:39 1775321679

Setting aside arguments over biology, avoiding getting sent to war to be blown to pieces wouldn't be a "light" reason to consider claiming gender diversity.

_cenw · 2026-04-04T16:56:37 1775321797

SBGG has an exclusion carved out for people who share this opinion (not me).

https://www.gesetze-im-internet.de/sbgg/__9.html

jadamson · 2026-04-04T17:02:40 1775322160

Interesting, so they have to see the writing on the wall a couple of months in advance (plus processing time, presumably).

jadamson · 2026-03-24T13:23:47 1774358627

In case you missed it, according to the OP, the previous point release (1.82.7) is also compromised.

dot_treo · 2026-03-24T13:30:49 1774359049

Yeah, that release has the base64 blob, but it didn't contain the pth file that auto triggers the malware on import.

jadamson · 2026-03-24T13:34:26 1774359266

The latest version with the the pth file doesn't require an import to trigger the exploit (just having the package installed is enough thanks to [1]).

The previous version triggers on `import litellm.proxy`

Again, all according to the issue OP.

[1] https://docs.python.org/3/library/site.html

jadamson · 2026-03-24T13:15:50 1774358150

Most his recent commits are small edits claiming responsibility on behalf of "teampcp", which was the group behind the recent Trivy compromise:

https://news.ycombinator.com/item?id=47475888

soco · 2026-03-24T13:33:26 1774359206

I was just wondering why the Trivy compromise hit only npm packages, thinking that bigger stuff should appear sooner or later. Here we go...

jadamson · 2026-03-21T23:29:17 1774135757

Little St. James

jadamson · 2026-03-21T07:35:16 1774078516

I don't understand your suggestion. If you're still showing one character after each character entered, what's changed?

What's the benefit of having a random character from a random set, instead of just a random character?

oneeyedpigeon · 2026-03-21T07:47:32 1774079252

I think the idea is that each character overwrites the previous, so you're never showing the total length (apart from 0/1!)

jadamson · 2026-03-21T07:53:36 1774079616

Ah, and the characters are supposed to be an ASCII spinner.

I think if I was new to Linux that would confuse the life out of me :)

NiloCK · 2026-03-21T07:53:38 1774079618

There's no persistent reveal of password length after you're finished typing. It reduces the length-reveal leak from anyone who eventually sees the terminal log to people who are actively over-the-shoulder as you type it.

ordu · 2026-03-21T09:46:49 1774086409

If you can see 1 char from set of 4 you know the number of characters modulo 4. If the minimum length of a password is 6, and probably it is no longer than 12 characters, then you can narrow the length to 1 or 2 numbers. It is marginally better than asterisks of course, of course, but it is still confusing.

NiloCK · 2026-03-21T15:21:31 1774106491

The original suggestion included randomizing the first character of the set, which removes this attack.

DrawTR · 2026-03-21T07:52:31 1774079551

They mean to have a static single character on the screen and have it change with every keypress. For example, you type "a" and it shows /. You type "b" and it shows "|", etc.

jadamson · 2026-03-15T19:12:48 1773601968

I like how some of the logos are inexplicably upside down:

https://office.eu/images/social-proof/tu-berlin.svg https://office.eu/images/social-proof/itzbund.svg

jadamson · 2026-03-12T02:14:59 1773281699

Safari is the highest for 10 tabs but second-lowest for 20? This reads like AI slop, but even if it's not, it's definitely blogspam with no methodology.

coloneltcb · 2026-03-12T03:33:23 1773286403

in practice, I can have ~infinte tabs in Safari on my M1 MBP. I'll have multiple windows with hundreds of tabs open and I've never seen it stutter once.

It's actually enabling my worst tab-hoarding tendencies. In the Intel days I'd pay a performance price at some point and have to tend to my tabs, but now they just keep propagating....