[object Object]

Maybe they should just try congress?

Hurray! Compressing and not using it, so you have a massive increase in disk use for no fucking reason.

Oh, and every container that uses PyTorch needs to download the full 7 gigabytes instead of sharing.

Man, why did they buy Tenor just to kill it?

What the fuck.

That’s a lot of Linux distros and libre office downloads!

I love that Claude.md file, fucking awesome.

AI is great, I use it to get started quickly, and then I delete a bunch of it and replace it with human approved and purposeful code.

The other day I used it to write a slugify method. I didn’t think I needed a full library imported for that, and with AI that was a 30 second task, including tests. Great.

Then later that day the AI wrote an API for me. The AI design hid potentially async code in a synchronous block and it butchered the control flow, so I rewrote it to give the caller control over how the code was executed. The result is exactly what I needed, and easy to use plus maintain. Also great.

The difference between that and slop where I never even review the file is massive! I like your power tool analogy. Yeah, I could use the spokeshave… or I could just use a router. But if you’re building a jig to turn your table saw into a jointer you might wanna take a step back and ask what you’re really doing here.

For posterity because I didn’t explain why/how it’s sketchy:

• they just found a hardcoded key that skips all security that was in the wild for like two years
• significant vibe coding means nobody actually understands the codebase. Hence not finding the backdoor key
• some of the documentation is only in Chinese, which isn’t sketchy in itself, but given the backdoor key does seem fucking sketchy.
• they have an X link you cannot remove from the admin console
• the admin console has minor but stupid bugs: you can’t go from a bucket to the list of buckets, auth is janky, etc.

Just because it’s good a good name doesn’t make it good pedigree (which is a bone I have with rustXYZ named projects). The fact nobody caught serious backdoors for years is damning.

If you’re running this offline, it might be fine for you. I still run it inside my vpn behind auth but I’m looking to move off.

Rustfs is sketchy as fuck though.

Where they lose comparability they have a good explanation too

Ouija 2 Origin of Evil by Mike Flannigan is the rare exception where the sequel trounced the OG in every way.

The Librarian also all three movies are good, with the third being arguably the best.

Yes, it’s helpful

I want to become unbusinessable.

That is my life goal.

How can anyone look at a heat pump and “this thing both cools and heats reliably using the temperature differentials of the air” and not think that’s cool as fuck. Rad as fuck.

It’s more efficient at heating than a fucking gas boiler! Imagine being better at heating that cheating by using planet boiling chemicals, and using no chemicals?

Seriously it’s fucking witchcraft. If I were an investor and you told me you invented such a machine I’d tell you to fuck off. But no, investor me would have been dead wrong.

That’s not nice

I doubt you can mail a letter without using letter fluid

Also, even if NATO stood for that, Canada is in NATO, so it’s still North American. The US does not own the Americas.

I’m not your bud guy.

I really don’t want more Americans to have the right to fuck up our elections and politics.

I’m so god damn exhausted of Americans.

I get you’re not all bad, but even the non trumpers have politics that are a reason they left.

That’s fair, I won’t pretend pypi/pip and running uvx is much safer than npx.

But why hasn’t JavaScript established a defacto stdlib to replace ask the left pads and is even type packages?

I’ve taken a near zero dependency policy on my personal projects regardless, and now I run most code in containers to sandbox it.

I think npm allows installation scripts which do make this worse, as a package can run arbitrary command at install time.

Can we stop using npm now?

I swear to god the number of attacks like this or spawned from other attacks like this is fucking stupid. I’ve gender seen anything like it.