There was a time when humans were migrating twice in the year. They had to move with their things and animals. In the Arabic peninsula they were called bédouins. They moved around with camels. Rich Arabs now move around with Range Rovers or Koenigsegg. Here in the bay I see now and then sail boats. Where are they sailing? What are they looking for? I could ask the same to the tourists that visit my island. Distraction?
I continue in a coming post.
Search
673 results for “same”
-
-
Second LiteLLM PyPI compromise of 2026 (after 1.82.7 and 1.82.8 in March): 1.107.0 on Oct 21 put a credential stealer in a .pth file, so it ran whenever Python started on the host, imported or not.
We run four LLM providers without a gateway library. It costs us adapter code, and not keeping every key in one package was part of why. A pin helps less if a bot bumps it the same afternoon.
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
-
l' #ArgentMagique a été retrouvé.
Mais comme d'hab, il est pas pour nous. Direct dans les poches au bourgeois et dans les armes utilisées pour nous mutiler !
https://presse.economie.gouv.fr/le-gouvernement-met-en-place-des-mesures-de-soutien-aux-commerces-touches-par-les-degradations-du-samedi-17-et-dimanche-18-octobre-2026/
#24octobre #Antifa #ACAB #Humour #dessinactu #Caricature -
There is apparently some blame going around for PHP’s messy disclosure. The Register has some details which paint a very different picture from PHP Foundation’s own blog post. If the vulnerabilities were in fact already being exploited, then Chainguard not waiting for the agreed upon release time makes perfect sense. The question is rather: why didn’t everybody else make the same call? Why didn’t PHP Foundation drop the embargo? Were they aware of the ongoing attacks?
There is another layer to this of course. Somebody leaked hints to this a few days too early. Which is unfortunately to be expected for an effort that takes months and involves so many parties. If anything, this disclosure went unexpectedly smoothly. And it still doesn’t change the fact that there will be vulnerable PHP installations for years to come.
To me this only shows: coordinated disclosure on this scale isn’t a silver bullet. It mitigates risks to some degree but we now have a world where the attackers can generate exploits faster than server administrators can reasonably be expected to install updates – and sometimes even before these updates are out because somebody got wind that the vulnerability might be there. I don’t think that we have the right tools to deal with that changed threat landscape just yet.
-
Last night a friend forwarded me the Scouts' email about the PHP flaw and wrote "time for thephpboyscout to shine 🙂". I shrugged. This morning I read it properly.
PHP2Shell is a real one: two 9.2 bugs, no credentials needed, firing under mod_php before a line of your app runs. The fix is 300 files and five authors, and it shipped before most of us had heard of the problem. Smarter minds than mine.
But the disclosure wobbled three times in a day (a CVE leak, a PoC video, and Chainguard shipping patched images six hours early while the official Docker image, 1.38 billion pulls, got it at the same moment as the attackers and then took three hours to build). The root of the bug was described in 2004, patched around in 2019 and stalled in 2024, and each call was reasonable at the time. The bug didn't change in 2026, but the price of exploiting it certainly did.
And 35.8% of WordPress runs a PHP that no longer gets fixes, so "just upgrade" is a whole project for them. Who runs that project for the Scout group's website?
The heroes got the applause. The bill went to five people, a few volunteers on holiday, and everyone with a club website to check.
InfoSec OpenSource
-
🧱 Each figure is assembled from dozens of small shaded solid parts, framed in a card with title, hint and live readout, and moves with eased motion on pointer and keyboard. Every number shown comes from the same small model that drives the parts.
🎨 Three output kinds: plain SVG (standalone HTML, a single .svg or #React / #NextJS components), SVG + WebGL for fire, water, steam, caustics and glow, and a 3D beta mode where moving parts are re-projected and re-shaded every frame.
-
I spent years before Mickai as a nuclear and fusion engineer, then as co-founder of Collector Crypt, a live on-chain marketplace that has moved more than a billion dollars in transactions. Here is what that chapter taught me about ownership, verification and sovereignty, and why the same question now shapes how I think about AI.
https://mickai.co.uk/articles/what-collector-crypt-taught-me-about-proving-ownership
-
There are many birds in the garden these days. Gardenbirding now means trying to count the redwings flying in and out of the garden and flying around in circles above it. I almost get dizzy trying to photograph them while flying around 🙂 .
There are about 7 or 8 Yellowhammers doing the same. Blackbirds have come from the north and their number has gone from 1 or 2 to 4 or 5, coming and going. And then there many pigeons, Chaffinches and jackdaws (whole groups) at the moment. Many more than normal.Trying to count them is impossible, did a new group of redwings arrive, or is it the same group flying around?
Today I saw 7 at the same time, but it might well have been 30 (or more) of them in all.
-
We're an analytics company. But we don't track whether you open our emails.
Here's how we handle email privacy at Plausible:
✅ Email open, link click tracking are disabled
✅ No invisible tracking pixels to monitor your activity
✅ We don't build profiles based on how you engage with our emailsThis applies to both our transactional emails and blog newsletters.
We believe website owners deserve useful analytics without compromising visitor privacy. And we hold ourselves to the same standard.
-
TangerineUI Classic v3.0.0c1 is out 🍊
Mastodon 5.0 brings a redesigned web interface, already live on mastodon.social as nightly builds. Classic now follows it there: two-tone accent icons in the new navigation, stars instead of hearts, the rocket for boosts, accent buttons, frames and polls, and the same flat, calm look you know from 4.x.
Still works on 4.6–4.7, where the footer signature line is back too.
https://github.com/DanielSnor/TangerineUI-Classic-for-Mastodon/releases/tag/3.0.0c1
-
🍂 Morgen is het weer tijd voor een gezellige Apero Vrijdag! 🍛
Op het menu? Kip curry met rijst!
Mileen, Tiene, Rita en Katrijn zorgen voor een heerlijke maaltijd. En een flinke portie gezelligheid? Die krijg je er helemaal gratis bij! 🧡
Laat je dus niet tegenhouden door het herfstweer en kom gezellig langs! 🍁🌧️
Iedereen welkom! We maken er samen weer een fijne vrijdag van! 🥂
-
On this day in 1797, balloonist André-Jacques Garnerin makes the first recorded parachute jump, from 1 000 metres above Paris.
On this day in 1877, the Blantyre mining disaster in Scotland kills 207 miners.
On this day in 1964, philosopher and writer Jean-Paul Sartre is awarded the Nobel Prize for Literature, he is the first person to decline the award.
On this day in 2019, Northern Ireland legalises same-sex marriage and abortion.
-
💡 QField tip: don't rebuild your survey from scratch
Already have your form as an XLSForm, the spreadsheet format behind tools like KoboToolbox and ODK? QFieldCloud can turn it straight into a field project:
1️⃣ Create Project
2️⃣ Choose the XLSForm option
3️⃣ Upload your spreadsheetQuestions, logic and constraints come across, ready for QField.
Running the same survey somewhere new? Pick "Clone an existing project" instead.
-
Congrès du RN à Orléans: "plusieurs dizaines de milliers" de contre-manifestants attendus selon Laurent Nuñez, qui promet un dispositif "extrêmement conséquent"
🗞️ BFM - 🕐 21/10 18:29
Laurent Nuñez a annoncé ce mercredi 21 octobre un "dispositif de service d'ordre extrêmement conséquent" ce week-end à Orléans. "Plusieurs dizaines de milliers" de contre-manifestants y sont attendus samedi, en marge du congrès du RN.
"Plusieurs diza... [2122 chars]
🔗 https://www.bfmtv.com/politique/gouvernement/congres-du-rn-a-orleans-plusieurs-dizaines-de-milliers-de-contre-manifestants-attendus-selon-laurent-nunez-qui-promet-un-dispositif-extremement-consequent_AD-202610210764.html
#actu #news #presse #bfm -
Au procès de l’assassinat du frère aîné d’Amine Kessaci, l’horrible découverte des corps mutilés et carbonisés
🗞️ Le Figaro - 🕐 21/10 19:13
À lire aussi
«La police s’est fait massacrer» : attendu au tournant après les violences du 17 octobre, Laurent Nuñez reporte sa visite ce lundi à Marseille
DÉCRYPTAGE - Dans la cité phocéenne, alors que la journée de samedi a été particulièrement cha... [793 chars]
🔗 https://www.lefigaro.fr/marseille/au-proces-de-l-assassinat-du-frere-aine-d-amine-kessaci-l-horrible-decouverte-des-corps-mutiles-et-carbonises-20261021
#actu #news #presse #lefigaro -
That's escalated quickly:
- Chainguard Added as CVE Numbering Authority (CNA), September 22, 2026
- PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language ahead of a planned official disclosure.
I think the issue is not actually one or the other party but more the overall process. Can embargoed model for CVD sustainable when you need to notify many partners in large ecosystem? and expecting them to be ready at the exact same time?
Maybe we should review the GCVE BCP-02 - "Practical Guide to Vulnerability Handling and Disclosure" https://gcve.eu/bcp/gcve-bcp-02/ to better describe what and when embargo is really required and how it's supposed to be handled?
-
@LovesTha @ascentale @arestelle @bikenite #BikeNite A4
We've never had anyone yell out criticism of our bike, only teen boys shouting they like it.In conversations at bike parking racks, etc we've had opportunities to respond, kindly, to people who don't "get" #ebikes. We let them know we formerly felt the same way, and refer them to type "snob" in search window at bikemontereyDOTorg to see how our thinking changed, since 2017. We've found them all very positive in response. https://bikemonterey.org/from-ebike-snob-to-won-me-over.html
-
Anyone run into the apparent privacy rubbish bin fire that is the new Australian anti-money laundering laws?
We're trying to find a conveyencer, one that seems good is now is asking us to submit multi-perspective photos of our faces to some random non-govt web site for some kind of identity verification, because AML.
Talking to them just now, they say they have no other option and that we must trust this random 3rd party with unchangeable biometics, and that all conveyencers will require the same.
You a lawyer or engaged one in the last few months? That true?
-
I thought I’d take a crack at a self-portrait in anime style, one I’ve never attempted. Anime is an interesting style to work in — it’s quite simple, so it forces you to discard a lot of detail and make simplifying choices over anything ambiguous (like hair/beard colour). I looked at a lot of references for the eyes — while normally enlarged, there can be a huge variation in eye size even between different characters in the same anime, from realistic to ginormous. I went somewhere in the middle. It feels a bit creepy to draw them that big and I wonder if I should have made them farther apart.
#Inktober #inktober2026 -
Big AI companies are fighting hard to keep their energy consumption a secret. Yet, we thankfully have Open Source tools that start to estimate their climate impact.
#AI #opensource #climatechange
https://www.sei.org/about-sei/press-room/the-same-ai-request-emits-ten-times-more-co-in-texas-than-in-sweden/ -
"Un phénomène récent" : en marge du mouvement social, des pilleurs se sont introduits dans des immeubles et des logements
🗞️ Le Figaro - 🕐 21/10 16:31
Le phénomène n’est pas «massif» mais il est néanmoins «nouveau», aux dires d’une source policière interrogée par Le Figaro. En marge du mouvement social qui a eu lieu samedi 17 octobre, des pilleurs se sont introduits dans des parties communes d’imme... [791 chars]
🔗 https://www.lefigaro.fr/faits-divers/un-phenomene-recent-en-marge-du-mouvement-social-des-pilleurs-se-sont-introduits-dans-des-immeubles-et-des-logements-20261021
#actu #news #presse #lefigaro -
#WordWeavers 10/21: Your MC wakes up with the ability to read minds for 24 hours. Whose thoughts do they most want to hear? Whose thoughts do they least want to hear?
The ones she most and least wants to hear belong to the very same man: Elric. Zerika would want to hear his thoughts, and then would immediately cringe at the thought of "tuning in" to hear. What if he secretly finds her unattractive, boring as far as company goes, or think she's completely idiotic for not being good at talking to strangers? How would he feel about her not knowing how to read? (Spoiler alert, he doesn't care. In fact, he offers to teach her. He actually adores her.) All of these questions and thoughts would immediately flood her. I can feel her anxiety through the screen, poor thing.
Also... Not even kidding about this, but it gives me some ideas for an upcoming tale in the series, so thank you for that!
#WritingCommunity #WritersOfMastodon #TheScarletMirror #FatedByFire #CozyFantasy #Fantasy #SwordAndSorcery #Romance
-
You normalise aggressive behaviour, Albo, with your pandering to violent, warmongering, misogynist sex pest #Trumpolini and his mate, the genocidal land thieving #Netolini. Same with Minns. https://www.abc.net.au/news/2026-10-22/helen-haines-live-updates-brendan-nugent/107293362?utm_campaign=abc_news_web&utm_content=link&utm_medium=content_shared&utm_source=abc_news_web#live-blog-post-351946 #USFascism #IsraelFascism #OzFascism #auspol
-
Techdirt: Expert For News Orgs Suing OpenAI Warned ‘Always Verify’ AI, Then Didn’t Verify His AI-Made Charts In His Expert Report. “There are so many filings in this case (currently over 2,100) that it’s difficult to keep up with them all, but around the same time as they called out that expert’s report, they also tried to disqualify a number of other experts put forth by the […]
https://rbfirehose.com/2026/10/21/techdirt-expert-for-news-orgs-suing-openai-warned-always-verify-ai-then-didnt-verify-his-ai-made-charts-in-his-expert-report/ -
AI tools write answers that sound sure, including the wrong ones. You do not need to be technical to catch many of them. Ask these five questions, in this order, in the same chat.
- "What would have to be true for this to be wrong?" A good answer names real conditions. A vague one tells you the first answer was weaker than it sounded.
- "Which parts are you sure about, and which parts are you guessing?" Mark the guesses and check only those.
- "What did you assume about my situation?" Many bad answers are good answers to a question you did not ask. Your country, your budget and your skill level are the usual missing pieces.
- "Give me one source I can open myself, and tell me if you are not certain it exists." Then open it. If the link or the title is not real, treat the rest of the answer with care.
- "How could I check this in five minutes without you?" A search, a calculator, a phone call, a look at the official page. Do that one thing before you act on the answer.
None of this makes the tool perfect. You stay the one who decides.
We are TIC, a small studio that makes plain-language AI guides (ticassociation.com). The list above is free to copy and share.
Drafted with AI help and approved by a person before posting.#ai #beginners #productivity #software #coding #development #engineering #inclusive #community
Five questions to ask before you use an AI answer -
Health & Wellness
The $15 Wardrobe Myth: Why Your Closet Is Stagnant (And What’s Actually Missing) We’ve all seen the pitch: Upload your clothes, let an app style what you already own, and magically unlock a brand-new wardrobe for $15 a month. It sounds sensible. It sounds frugal. Until day four—when you’re staring down the same three tired knits, the same worn-out trousers, and the same pair of neutral loafers, trying to figure out how a smart algorithm is supposed to…
-
Think about what an attacker's budget used to look like. Working a broker portal meant a skilled person spending days on reconnaissance, credentials and the application's logic. That cost forced a choice, so most attackers made the same choice defenders did and went for the obvious door.
An agent doesn't have to choose. It enumerates what's exposed, replays logins leaked from other breaches, maps the APIs behind them and checks whether one customer's session can read another customer's data. When it gets blocked, it tries another door. The cost is now a few hours and a few thousand dollars to try all the doors...
https://xint.io/blog/side-door-problem -
Health & Wellness
The $15 Wardrobe Myth: Why Your Closet Is Stagnant (And What’s Actually Missing)
We’ve all seen the pitch: Upload your clothes, let an app style what you already own, and magically unlock a brand-new wardrobe for $15 a month.
It sounds sensible. It sounds frugal. Until day four—when you’re staring down the same three tired knits, the same worn-out trousers, and the same pair of neutral loafers, trying to figure out how a smart algorithm is supposed to make a faded fast-fashion top feel revolutionary again.
The getting-dressed struggle isn’t usually about a lack of combination ideas. It’s about wardrobe fatigue.
You can rearrange five pieces into three looks all week long, but at the end of the day, you’re still wearing the exact same five pieces. No amount of color-harmony scores or digital belt swaps can transform a static closet into an inspiring one.
The Real Fix: Fresh Statements, Zero Commitment
What if, instead of paying a monthly fee just to reorganize clothes you’re already tired of, you opened your door to high-end, show-stopping pieces curated directly from Lussira’s Shared Archive?
Lussira isn’t just another digital closet manager. It is an exclusive wardrobe-rental collective that gives you unlimited access to designer tailoring, archived runway statements, and premium everyday staples—without the clutter, the buyer’s remorse, or the tag-still-on guilt.
Why Renting with Lussira Changes Everything
- Break the “Safe Knit” LoopStop settling for the same three default outfits. Lussira lets you rotate through statement blazers, silk blouses, and structured trousers tailored for your actual life, returning them when you’re ready for something new.
- Experiment Without the Financial HangoverSpotted a bold silhouette that looked amazing on the runway? Don’t buy it to let it collect dust in your closet. Rent it for your presentation on Wednesday, wear it to Friday dinner, and send it back.
- The Ultimate Second Opinion: Real Curated StyleSkip the automated, generic styling tips. Every Lussira shipment is curated to integrate seamlessly with your lifestyle, giving you elevated, boutique-quality fits tailored to every event on your calendar.
One Closet. Infinite Possibilities.
The Old Way (Style What You Own)The Lussira Way (Unlimited Archive Access)Rearranging the same 20 basic itemsAccessing hundreds of premium designer piecesWearing worn fabrics on repeatPristine, freshly dry-cleaned garments delivered to your doorGuilt over unworn purchasesZero clutter, 100% circular fashionConstant wardrobe boredomA fresh wardrobe drop whenever you need itStop Rearranging the Old. Start Wearing the Exceptional.
You don’t need another app telling you to swap your belt. You need clothes that actually make you feel remarkable when you look in the mirror.
Experience the freedom of a high-end, rotational closet with Lussira.
[Explore the Lussira Archive — Start Your Trial Today]Nothing to wear?
#health #healthyLifestyle #lifestyle #mentalHealth #Mindfulness #personalDevelopment #selfImprovement #Wellness
Look again. -
Z mojej strony ogromne podziękowania dla wszystkich osób biorących udział w rozwiązaniu incydentu bezpieczeństwa w #PHP 🔥
Dzięki Waszej pracy moje aktualizacje przebiegły gładko i wszystko odbyło się terminowo, zaczynając od dostępności poprawek o umówionej godzinie, 16:00 mojego czasu.
Security Team @php zadziałał wzorowo udostępniając poprawki i wcześniej współpracując z dystrybucjami. 👏
Repozytoria #Debian w szczególności deb.sury.org od @ondrej opublikowały łatki natychmiast. 👍
Na koniec osoby odpowiedzialne za #Nextcloud @nextcloud AIO opublikowały nową wersję obrazów i samego #AIO. 💪Dzięki współpracy tylu osób, ja byłem w stanie ogarnąć aktualizacje dla Kooperatywy @koop i firm oraz organizacji w bardzo dobrym czasie przerywając działanie stron i serwerów na absolutne minimum.
Wielkie dzięki ❤️ #FOSS #OpenSource
-
Most teams check an LLM-assisted decision system for fairness by comparing approval rates across groups. That check can pass cleanly while the model is still changing its mind on individual cases for reasons nobody would defend out loud. Recent fairness-stress work on LLM decision-making points at a better default test - and it's a decision you can make before writing any code.
Aggregate Parity Nets Out; Per-Case Instability Doesn't
The choice is between two measurements. Outcome parity asks: across 1,000 applications, did group A get approved at roughly the same rate as group B? Counterfactual stress asks something narrower and harder: for this one application, if I change only a decision-irrelevant field - the name, the phrasing of the same request, the order of the bullet points - does the answer move?A model that favors one group on early-career cases and another on senior cases can show perfect parity overall. Parity is cheap and it's what regulators often ask for, but it averages. Per-case stress testing catches that, because it never aggregates across people - it compares a case to itself.
The trade-off is real. Stress testing costs N× the inference calls, and it requires someone to declare which fields are decision-irrelevant. That list is a policy judgment, not an engineering one, which is exactly why a PM should define it.
Running the Test on One Application
base = {"years_exp": 6, "skills": "python, sql"}
names = ["Alex Chen", "Aisha Khan", "John Smith", "Priya Patel"]votes = [decide(tmpl, {**base, "name": n})
for n in names
for tmpl in PROMPT_TEMPLATES] # 3 paraphrases, same instructionflip_rate = 1 - max(votes.count(v) for v in set(votes)) / len(votes)
Twelve variants of one application that a human reviewer would call identical. Any
flip_rateabove zero means the decision moved on something that shouldn't matter.The number alone isn't the point - the pattern is. Read the flips two ways:
- Clustered - all rejections land on the same name group across all three paraphrases. That's bias. Fix it in the prompt, the retrieval data, or the model choice.
- Scattered - flips appear randomly across names and templates. That's instability. Lower the temperature, constrain the output format, or stop auto-deciding borderline cases.
Both fail the same test and need different fixes, which is why one aggregate percentage can't tell you what to do next. Report worst-case flip rate per application, not the mean - the mean hides the cases that would end up in a complaint.
Key Takeaways
- Group-level parity can look clean while individual decisions flip on irrelevant details; counterfactual stress testing compares each case against itself and catches what averages hide.
- Separate clustered flips (bias - fix prompt, data, or model) from scattered flips (instability - fix sampling, output constraints, or add human review).
- The hard part isn't the code, it's agreeing on which input fields are decision-irrelevant. That list belongs to product and policy, not just engineering.
Which fields in your decision prompt would your team actually agree are irrelevant - and how long would that meeting take?
Sources referenced: FairStress: A deeper evaluation of fairness in LLM decision-making, Hugging Face Blog#llm #evaluation #fairness #python #software #coding #development #engineering #inclusive #community
Flip One Field: A Fairness Test That Beats Aggregate Parity